$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/39cdf786-e1eb-3850-9f30-0a3b8005613d.roa File: 39cdf786-e1eb-3850-9f30-0a3b8005613d.roa (raw, json) Hash identifier: RwMgCw8noc6RmVNfhL8oCjtwZK2xgwP5KW3kuh5oMoc= Subject key identifier: 9E:49:67:F3:BD:03:DB:76:54:20:1C:AA:7D:7D:75:49:F1:A5:9F:0A Certificate issuer: /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Certificate serial: 010D0C9F4328584973DEEB7B6BB1865A8F452C00 Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/39cdf786-e1eb-3850-9f30-0a3b8005613d.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 54523 IP address blocks: 67.59.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:eb:7b:6b:b1:86:5a:8f:45:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=c3f38bd8-c1ca-4bec-a46a-b0f29fcf48ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4b:22:74:9a:9c:5f:0c:e4:f9:4a:fd:a5:24: 1c:4d:f9:41:a5:f3:39:f8:b5:98:6d:43:82:18:f5: 75:3f:48:7e:4b:69:76:49:36:fd:8d:6b:46:00:03: 19:81:e2:46:f2:d0:c2:c6:13:e1:16:46:8b:c0:8e: df:42:56:eb:63:b2:a1:65:6d:ce:b2:fd:fc:1e:19: 01:56:e6:fa:ec:00:e2:b6:ad:04:34:1c:f9:a0:35: 43:6c:01:bd:54:c4:a8:e4:c9:23:76:4b:d1:93:dc: 04:c0:25:88:d2:60:aa:63:d8:44:ed:cc:9a:ff:f8: 2c:3a:04:01:24:fb:76:f7:02:c7:3d:92:1e:3c:34: a1:6e:07:45:01:bc:b3:6f:05:69:10:1a:c1:12:2c: a7:cd:01:8a:f1:66:ce:70:ad:9c:8e:a9:32:4e:ee: 2e:28:46:3a:59:4b:3e:60:57:0e:77:f9:be:47:7d: 80:0a:22:2f:49:a9:a7:de:4f:9e:b4:a7:09:96:0a: d1:9e:92:43:78:f2:ff:dc:72:76:8b:49:43:61:33: 6e:e5:a8:d6:21:fc:84:b9:00:61:ea:2c:f5:ff:62: 07:f7:f0:cb:f7:e1:f7:43:a5:84:37:12:36:de:85: fe:5b:aa:2e:c6:66:e4:8b:d1:b9:05:2e:25:f4:c5: 96:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:49:67:F3:BD:03:DB:76:54:20:1C:AA:7D:7D:75:49:F1:A5:9F:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/39cdf786-e1eb-3850-9f30-0a3b8005613d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl X509v3 Authority Key Identifier: keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer sbgp-ipAddrBlock: critical IPv4: 67.59.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f9:32:9a:15:29:6d:9f:36:e7:59:c4:b3:0d:2a:d0:4f:62: 63:c8:51:94:4b:11:d6:56:fa:e1:e7:53:1e:a0:a7:b7:c5:bb: 4c:70:2e:ee:83:3d:f3:c6:7d:47:56:13:ea:c9:5b:9f:0a:ce: 63:ff:f4:fd:45:3f:dc:b6:6e:c7:de:51:5a:6b:6a:8e:8e:90: dc:32:b0:4c:d5:87:e7:a1:63:c4:10:60:1f:53:19:48:be:77: 26:27:df:f6:4e:be:f4:99:7b:94:f0:a4:aa:2b:e2:8a:58:a1: 50:a4:ec:3e:be:a6:46:38:fd:cf:4f:a6:36:40:c8:26:d2:e6: 22:e7:bb:ee:ce:43:6f:b3:00:10:c6:76:1e:97:a9:4d:95:1a: f7:6e:07:b0:f0:84:81:13:16:ca:5f:ad:1a:7c:5d:c7:57:af: dc:49:ec:38:e1:6a:1b:72:81:a1:ef:fb:73:12:41:36:5e:7a: 51:65:ed:3d:65:38:22:eb:76:9f:67:d6:0b:d3:cb:0c:c8:c1: b8:d5:3f:dd:e7:6a:c3:30:35:3b:93:54:41:ea:0a:92:41:fc: 5b:d0:33:a0:42:68:c5:68:c4:a0:12:2e:a5:b2:0f:45:4f:8b: 1c:82:42:c7:90:c1:ec:80:58:eb:07:a7:31:0d:f6:92:62:fa: 6a:d7:9e:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3ut7a7GGWo9FLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz ZmY0MB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk YzNmMzhiZDgtYzFjYS00YmVjLWE0NmEtYjBmMjlmY2Y0OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnksidJqcXwzk+Ur9pSQcTflBpfM5+LWYbUOC GPV1P0h+S2l2STb9jWtGAAMZgeJG8tDCxhPhFkaLwI7fQlbrY7KhZW3Osv38HhkB Vub67ADitq0ENBz5oDVDbAG9VMSo5MkjdkvRk9wEwCWI0mCqY9hE7cya//gsOgQB JPt29wLHPZIePDShbgdFAbyzbwVpEBrBEiynzQGK8WbOcK2cjqkyTu4uKEY6WUs+ YFcOd/m+R32ACiIvSamn3k+etKcJlgrRnpJDePL/3HJ2i0lDYTNu5ajWIfyEuQBh 6iz1/2IH9/DL9+H3Q6WENxI23oX+W6ouxmbki9G5BS4l9MWWAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5JZ/O9A9t2VCAcqn19dUnxpZ8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3 MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvMzljZGY3ODYtZTFlYi0z ODUwLTlmMzAtMGEzYjgwMDU2MTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQztWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH5MpoVKW2fNudZxLMNKtBPYmPIUZRLEdZW+uHnUx6gp7fFu0xwLu6D PfPGfUdWE+rJW58KzmP/9P1FP9y2bsfeUVprao6OkNwysEzVh+ehY8QQYB9TGUi+ dyYn3/ZOvvSZe5TwpKor4opYoVCk7D6+pkY4/c9PpjZAyCbS5iLnu+7OQ2+zABDG dh6XqU2VGvduB7DwhIETFspfrRp8XcdXr9xJ7DjhahtygaHv+3MSQTZeelFl7T1l OCLrdp9n1gvTywzIwbjVP93nasMwNTuTVEHqCpJB/FvQM6BCaMVoxKASLqWyD0VP ixyCQseQweyAWOsHpzEN9pJi+mrXnpo= -----END CERTIFICATE-----Generated at Mon Apr 28 09:26:51 2025 by rpki-client