$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa File: 06b87a17-da72-35cd-99c5-447ec65e01d5.roa (raw, json) Hash identifier: 0EizLzAirqYXM/bhOXx/dFETkTvbgaNEj6+NGPezibw= Subject key identifier: E7:73:28:D7:EE:54:96:E6:97:69:87:40:2D:90:D8:C4:75:58:59:AF Certificate issuer: /CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Certificate serial: 010D0C9F43285849350E83C4DE2AA5EC27AA54A0 Authority key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 22224 IP address blocks: 23.187.128.0/24 maxlen: 24 207.174.168.0/22 maxlen: 24 2602:fed6::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:83:c4:de:2a:a5:ec:27:aa:54:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=c17b95fe-b143-446b-aacc-3e84cc6cabf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6c:b5:f0:db:51:d7:06:bc:e2:f5:98:fd:71: 4b:98:f9:41:36:39:f4:0d:a9:04:e2:ba:bc:be:4e: b2:55:9d:a0:a8:a8:37:c8:8c:72:9a:65:7b:d6:09: 24:99:50:95:df:3a:af:58:53:16:b5:55:4e:4d:b2: 0f:a5:25:95:2c:7b:2c:59:8d:66:94:15:d5:94:82: 65:37:28:d9:4e:6f:33:a7:91:15:c3:f1:d7:74:c4: 4f:4a:01:09:bf:df:1d:8b:71:13:de:01:ab:76:63: 72:4d:8f:af:06:49:ff:1f:8b:59:77:ae:8e:2f:cf: dc:fe:98:c0:60:28:4f:a7:02:69:cf:8e:c4:e8:a4: 72:cf:56:a0:90:00:2c:9e:e7:51:40:bb:f3:e6:29: 73:72:a0:2e:43:21:c3:ec:94:96:c8:b5:e8:17:0e: ac:09:1b:2a:fb:ad:b3:1b:51:47:78:7a:64:a8:35: d8:be:3e:ba:be:5a:fb:d3:b1:f8:15:f6:df:a0:85: d9:2f:71:21:64:c2:9f:96:4d:23:c9:bb:09:c9:ac: d7:cd:c2:16:57:12:3b:9d:41:8e:8f:f0:80:e2:33: f8:09:ef:af:1c:c4:d4:44:46:53:84:97:54:9c:02: a1:9e:dc:e5:44:dc:d1:31:f5:e2:91:22:3a:3c:30: 69:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:73:28:D7:EE:54:96:E6:97:69:87:40:2D:90:D8:C4:75:58:59:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/06b87a17-da72-35cd-99c5-447ec65e01d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.crl X509v3 Authority Key Identifier: keyid:40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer sbgp-ipAddrBlock: critical IPv4: 23.187.128.0/24 207.174.168.0/22 IPv6: 2602:fed6::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:51:c4:ae:8f:5a:a9:57:84:25:97:dc:a7:87:db:26:a9:45: 89:1b:3c:3b:48:bb:0a:d1:dd:8d:7a:dc:28:25:1a:78:b6:e7: 3d:6d:77:cb:4e:00:66:49:8d:09:8f:73:dd:0d:15:59:44:22: e2:89:e3:96:e6:ca:65:38:ea:83:00:4f:7b:27:64:1d:59:ed: 0b:df:19:99:97:fe:03:08:ff:96:a2:1c:29:b6:8e:f5:e2:af: c3:32:12:f1:2e:74:a9:d1:e7:7f:11:f2:70:60:c1:cd:49:51: f3:70:58:68:ca:43:20:00:a1:5d:c5:bb:13:62:39:a6:88:af: d2:7c:a5:94:0e:56:77:65:bb:9b:2e:55:dc:53:4b:7b:14:3a: c3:06:e1:84:fd:4e:c2:13:66:55:33:8c:f8:1f:94:55:d0:13: 06:ed:ee:0e:55:15:ca:e5:48:84:03:1c:fb:65:3e:5d:5a:40: bc:f1:5c:4c:cd:b5:d6:78:11:4b:0e:30:8e:e0:8c:58:89:a6: dd:fa:3c:98:db:a8:3b:54:69:84:1f:67:50:a9:c6:a2:fc:b1: ab:ce:39:79:a8:7d:c9:90:71:78:07:0c:ad:2f:be:1b:2c:e6: 42:d8:02:8f:09:2f:8b:a9:d9:24:00:7a:38:5d:49:2c:cb:6c: 5a:19:d6:c2 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEk1DoPE3iql7CeqVKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1 ZmUxMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YzE3Yjk1ZmUtYjE0My00NDZiLWFhY2MtM2U4NGNjNmNhYmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWy18NtR1wa84vWY/XFLmPlBNjn0DakE4rq8 vk6yVZ2gqKg3yIxymmV71gkkmVCV3zqvWFMWtVVOTbIPpSWVLHssWY1mlBXVlIJl NyjZTm8zp5EVw/HXdMRPSgEJv98di3ET3gGrdmNyTY+vBkn/H4tZd66OL8/c/pjA YChPpwJpz47E6KRyz1agkAAsnudRQLvz5ilzcqAuQyHD7JSWyLXoFw6sCRsq+62z G1FHeHpkqDXYvj66vlr707H4FfbfoIXZL3EhZMKflk0jybsJyazXzcIWVxI7nUGO j/CA4jP4Ce+vHMTUREZThJdUnAKhntzlRNzRMfXikSI6PDBpEwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFOdzKNfuVJbml2mHQC2Q2MR1WFmvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82N2Iw MDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvMDZiODdhMTctZGE3Mi0z NWNkLTk5YzUtNDQ3ZWM2NWUwMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjdiMDA0ZTgtM2IyMy00ZjlkLTkz MjUtYmVhYzg1ODI1ZmUxLzY3YjAwNGU4LTNiMjMtNGY5ZC05MzI1LWJlYWM4NTgy NWZlMS5jcmwwHwYDVR0jBBgwFoAUQFyQ+sCtey1+tsX0s1WQ8mUc/q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFj ODU4MjVmZTEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF7uAAwQC z66oMA4EAgACMAgDBgQmAv7WADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhUcSuj1qpV4Qll9ynh9smqUWJ Gzw7SLsK0d2NetwoJRp4tuc9bXfLTgBmSY0Jj3PdDRVZRCLiieOW5splOOqDAE97 J2QdWe0L3xmZl/4DCP+Wohwpto714q/DMhLxLnSp0ed/EfJwYMHNSVHzcFhoykMg AKFdxbsTYjmmiK/SfKWUDlZ3ZbubLlXcU0t7FDrDBuGE/U7CE2ZVM4z4H5RV0BMG 7e4OVRXK5UiEAxz7ZT5dWkC88VxMzbXWeBFLDjCO4IxYiabd+jyY26g7VGmEH2dQ qcai/LGrzjl5qH3JkHF4BwytL74bLOZC2AKPCS+LqdkkAHo4XUksy2xaGdbC -----END CERTIFICATE-----Generated at Tue Apr 29 12:08:16 2025 by rpki-client