$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa File: 42972859-eb24-3402-bd6b-51e9207a7162.roa (raw, json) Hash identifier: QSkAXB65rIoPeMdpFoh9/2OtSJOrj0d/OeieFseNXR0= Subject key identifier: 17:88:A8:83:E3:B8:E3:DB:A8:16:C5:72:FF:9D:21:46:BC:82:72:40 Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F432858499DBF3064A8D1FB54299CEA00 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 11067 IP address blocks: 67.219.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:30:64:a8:d1:fb:54:29:9c:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=0cb860c9-3067-4198-becc-0d025c4158d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:83:19:d2:5a:fb:9b:dd:a9:83:86:a8:de: 65:81:bb:fa:d8:80:c3:db:7b:74:a3:75:24:44:35: 2e:90:9f:92:16:77:ac:32:35:74:fc:df:01:63:66: 3b:42:b2:c8:a9:3b:90:f1:bd:21:c5:b8:0d:8f:3b: 8d:4e:4b:39:a8:5f:9a:0e:b9:cd:1e:8a:f2:e3:3e: 3d:b0:95:1e:f9:1a:79:8f:d4:86:ac:a9:01:ff:26: 0a:2d:da:21:be:6a:92:87:86:2e:38:81:86:b0:52: 59:37:82:14:c1:36:c2:e8:65:d6:22:22:61:db:a5: 3b:f7:82:a6:87:0c:44:0d:2c:e6:2a:6e:22:a7:5f: 43:f0:84:f6:84:29:2c:96:98:3d:0a:5d:52:30:79: 16:ba:4f:7f:7d:79:ab:d7:ad:88:1a:fe:2d:3d:b3: b7:66:04:91:1a:e6:25:46:fc:5d:48:22:28:24:cb: 1c:6c:0d:91:7e:16:20:1c:65:fd:4d:bb:4e:0a:8c: c6:1a:f3:d9:01:f5:39:99:25:18:a4:1a:be:83:01: 99:e9:4c:45:03:62:03:e5:4b:48:9f:85:63:2e:4c: fa:e7:2a:d0:25:35:38:a3:c5:f4:a7:81:3e:e1:c3: 50:7e:02:38:3e:fd:04:31:c8:72:ab:4c:3d:df:68: 92:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:88:A8:83:E3:B8:E3:DB:A8:16:C5:72:FF:9D:21:46:BC:82:72:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv4: 67.219.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:03:a1:8e:ea:6a:a6:c2:4b:b5:db:a5:86:14:ae:12:e2:4c: a4:d4:c2:08:0f:c7:d9:fa:66:df:7a:c0:91:18:81:63:eb:10: c4:4e:a7:ec:53:20:98:c5:70:52:2f:2c:63:94:a4:99:53:60: cc:d5:35:a6:eb:62:ee:8d:88:8a:23:a9:20:19:ce:7d:49:f0: 29:b4:88:6a:d4:96:f5:6a:01:56:af:6b:f1:47:44:fc:a9:ec: 01:f6:4c:ef:2b:6d:bc:0a:70:91:3b:d9:a0:19:05:fd:5e:ae: 51:16:ae:9a:cd:53:7f:cd:12:ff:f0:56:44:19:39:92:e9:77: 03:84:91:ab:b1:9e:ae:4a:74:2b:a5:22:e3:54:13:06:11:6b: ae:31:f5:39:7e:cb:9e:57:83:a5:ad:3b:ea:1f:36:05:f0:0d: 9e:dc:96:83:95:d0:ba:27:8e:8f:5b:0b:6d:82:1b:8a:47:d1: d5:e9:2e:e2:a7:02:da:09:bc:48:84:2b:db:c1:b1:85:3d:02: 2a:92:c0:96:1d:fd:fc:0d:e4:57:b0:90:24:da:66:8e:b3:f6: b4:aa:68:b3:c5:e8:bb:a8:88:f2:75:6d:4d:d4:78:f1:78:f1: 83:5d:d5:26:45:6e:ad:7c:17:9a:c9:84:cf:6b:7a:da:22:ce: 41:fc:ad:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzBkqNH7VCmc6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk MGNiODYwYzktMzA2Ny00MTk4LWJlY2MtMGQwMjVjNDE1OGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWODGdJa+5vdqYOGqN5lgbv62IDD23t0o3Uk RDUukJ+SFnesMjV0/N8BY2Y7QrLIqTuQ8b0hxbgNjzuNTks5qF+aDrnNHory4z49 sJUe+Rp5j9SGrKkB/yYKLdohvmqSh4YuOIGGsFJZN4IUwTbC6GXWIiJh26U794Km hwxEDSzmKm4ip19D8IT2hCkslpg9Cl1SMHkWuk9/fXmr162IGv4tPbO3ZgSRGuYl RvxdSCIoJMscbA2RfhYgHGX9TbtOCozGGvPZAfU5mSUYpBq+gwGZ6UxFA2ID5UtI n4VjLkz65yrQJTU4o8X0p4E+4cNQfgI4Pv0EMchyq0w932iSHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeIqIPjuOPbqBbFcv+dIUa8gnJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvNDI5NzI4NTktZWIyNC0z NDAyLWJkNmItNTFlOTIwN2E3MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9ugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwDoY7qaqbCS7XbpYYUrhLiTKTUwggPx9n6Zt96wJEYgWPrEMROp+xT IJjFcFIvLGOUpJlTYMzVNabrYu6NiIojqSAZzn1J8Cm0iGrUlvVqAVava/FHRPyp 7AH2TO8rbbwKcJE72aAZBf1erlEWrprNU3/NEv/wVkQZOZLpdwOEkauxnq5KdCul IuNUEwYRa64x9Tl+y55Xg6WtO+ofNgXwDZ7cloOV0Lonjo9bC22CG4pH0dXpLuKn AtoJvEiEK9vBsYU9AiqSwJYd/fwN5FewkCTaZo6z9rSqaLPF6LuoiPJ1bU3UePF4 8YNd1SZFbq18F5rJhM9retoizkH8rWA= -----END CERTIFICATE-----Generated at Tue Apr 29 15:42:11 2025 by rpki-client