$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa File: 86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa (raw, json) Hash identifier: vQuVyuoJER5B1RhhWl1PUCpahOn51hoPlSrbwDOyJ8s= Subject key identifier: 12:26:7C:CF:0D:4F:F5:A9:CA:3C:D1:B6:C1:14:F1:82:42:4C:54:F2 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285848F22C737C4CAF7D4B85BAB140 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 11030 IP address blocks: 67.52.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:73:7c:4c:af:7d:4b:85:ba:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=0f30494f-fd21-45ed-9653-b9f569932401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:15:4d:d6:1f:d5:3f:f4:5e:63:24:eb:80:56: cc:c5:b6:ae:92:6f:65:22:be:b4:ba:c0:e4:ed:b8: dd:dc:c8:8a:3f:0b:b6:4d:88:b2:88:9d:58:88:3d: a9:42:44:89:35:7e:7d:c1:9e:c3:16:8c:20:49:fa: f8:27:df:c6:c6:59:d1:15:cf:d3:5a:74:5b:5a:e8: 8f:c3:a3:78:86:9b:2c:45:93:0e:61:32:bf:49:92: c5:bf:9e:8b:4c:b7:81:fa:42:a0:1b:5e:8d:7d:da: 28:2e:ae:d0:75:17:0b:fa:46:e8:a9:1d:6a:c4:27: 4c:1a:d3:8e:5b:43:7d:63:92:27:2c:ed:ad:33:64: a5:a9:21:d3:67:60:f4:32:28:0e:8a:ac:91:18:52: ed:ae:c8:90:a3:0b:ce:4f:d1:ba:14:52:da:e2:28: 98:28:6e:aa:96:fc:0a:fa:8a:df:23:b6:a5:26:50: ee:9d:a5:0f:04:07:49:44:99:ab:73:ca:a1:b0:16: 8d:eb:39:a8:68:64:e3:3d:8f:2a:19:21:e9:35:e8: fc:c9:87:49:44:5c:46:b9:cb:36:36:95:22:aa:1b: b5:93:63:4e:25:80:1f:e6:86:74:9c:b1:06:d2:93: 66:e5:86:39:ae:4a:96:a7:fa:ac:33:a1:b9:26:cc: b3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:26:7C:CF:0D:4F:F5:A9:CA:3C:D1:B6:C1:14:F1:82:42:4C:54:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 67.52.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:84:cb:c8:2b:7f:78:ab:38:20:34:ae:82:3f:32:f2:23:eb: fe:0f:57:17:36:84:94:2f:1e:4a:5a:ba:bf:df:12:b5:d5:3e: 06:75:0b:78:f9:8f:1d:9e:ff:a9:68:bf:a7:51:50:bd:7e:24: 98:3f:2a:4d:04:46:10:2b:33:e8:dd:fe:3f:5c:db:e3:4e:4b: 9e:45:f0:f7:70:a8:fc:21:b6:02:8b:b6:f7:ec:2f:26:8f:4f: 6c:9e:bc:f5:08:c1:61:cc:d1:db:a8:03:d9:a6:66:80:5b:26: cb:73:29:b0:af:26:04:3d:f5:6a:cd:99:46:45:c5:ce:08:99: e8:2e:b3:44:11:b7:c2:dd:b0:80:74:36:dc:d7:d8:94:22:d2: e8:26:ff:a7:96:64:97:5c:ed:e9:5f:ee:48:53:f4:76:9c:52: a6:de:25:18:62:35:99:f2:67:ff:1b:fe:4a:a0:44:5d:dc:aa: 01:e0:e0:9f:3b:01:26:73:fd:fc:79:b9:c4:4b:ec:32:26:e6: 8c:d2:b4:26:4f:34:82:d5:db:6a:06:12:a3:88:7b:36:55:d0: 62:91:8a:f4:5a:98:2c:4f:42:48:ca:46:4d:3b:f0:3a:7d:e8: 58:66:54:c4:af:03:e5:66:1f:45:7b:db:46:63:81:10:aa:a3: c3:5d:c8:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLHN8TK99S4W6sUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MGYzMDQ5NGYtZmQyMS00NWVkLTk2NTMtYjlmNTY5OTMyNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBVN1h/VP/ReYyTrgFbMxbaukm9lIr60usDk 7bjd3MiKPwu2TYiyiJ1YiD2pQkSJNX59wZ7DFowgSfr4J9/GxlnRFc/TWnRbWuiP w6N4hpssRZMOYTK/SZLFv56LTLeB+kKgG16NfdooLq7QdRcL+kboqR1qxCdMGtOO W0N9Y5InLO2tM2SlqSHTZ2D0MigOiqyRGFLtrsiQowvOT9G6FFLa4iiYKG6qlvwK +orfI7alJlDunaUPBAdJRJmrc8qhsBaN6zmoaGTjPY8qGSHpNej8yYdJRFxGucs2 NpUiqhu1k2NOJYAf5oZ0nLEG0pNm5YY5rkqWp/qsM6G5Jsyz9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBImfM8NT/WpyjzRtsEU8YJCTFTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODZjZDVmOWItNjE1Mi0z ZjI0LTk3M2YtYzA0YWU5MGViNmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQzSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiEy8grf3irOCA0roI/MvIj6/4PVxc2hJQvHkpaur/fErXVPgZ1C3j5 jx2e/6lov6dRUL1+JJg/Kk0ERhArM+jd/j9c2+NOS55F8PdwqPwhtgKLtvfsLyaP T2yevPUIwWHM0duoA9mmZoBbJstzKbCvJgQ99WrNmUZFxc4Imegus0QRt8LdsIB0 NtzX2JQi0ugm/6eWZJdc7elf7khT9HacUqbeJRhiNZnyZ/8b/kqgRF3cqgHg4J87 ASZz/fx5ucRL7DIm5ozStCZPNILV22oGEqOIezZV0GKRivRamCxPQkjKRk078Dp9 6FhmVMSvA+VmH0V720ZjgRCqo8NdyHI= -----END CERTIFICATE-----Generated at Sun Apr 27 13:36:32 2025 by rpki-client