$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/8bc94d77-81f1-31f2-9793-8b8c39aec503.roa File: 8bc94d77-81f1-31f2-9793-8b8c39aec503.roa (raw, json) Hash identifier: rkQRs/v8BWVg4K2PhGPy4/7sM/XYAPjg25LWthcwyEo= Subject key identifier: 58:28:60:BD:7E:F1:3E:59:1C:C4:2F:39:41:AC:B4:2F:6C:41:8C:85 Certificate issuer: /CN=5c6c3a7f-86b7-4f9a-b2ab-04c827927389 Certificate serial: 010D0C9F432858499F249AE908BF5A33D3ED7600 Authority key identifier: 93:4F:C0:68:0F:B6:73:44:0B:D0:25:EB:63:C7:E7:CF:0A:DD:00:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/8bc94d77-81f1-31f2-9793-8b8c39aec503.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 67.202.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:9a:e9:08:bf:5a:33:d3:ed:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6c3a7f-86b7-4f9a-b2ab-04c827927389 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=5c5bc3f2-32f5-48e3-bd44-d6a9df930464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f6:df:cd:20:99:20:1d:a4:bc:30:f5:38:ff: dc:ed:a4:96:90:bd:18:fb:e2:af:a8:36:04:54:cc: 66:49:e3:98:85:97:f7:d8:ba:19:b1:56:14:c0:c0: 5a:ba:7e:81:c2:44:53:0c:ea:14:85:73:cb:af:8b: 79:b9:8c:91:1e:f4:7f:db:be:e0:76:13:a1:8c:30: 15:f5:26:48:f5:11:6d:38:9d:c7:ac:60:3c:9e:ab: 5e:52:f8:c9:5b:11:93:90:54:db:84:a5:36:8c:34: 4b:6f:13:62:d7:40:dd:1e:7f:3f:09:55:f3:fe:23: be:d1:9b:66:df:79:7c:d6:69:75:c5:47:60:3d:05: e2:f8:af:02:19:02:50:36:9a:bf:aa:51:83:bf:db: 0f:b6:91:f9:b5:a7:81:b5:20:27:7a:83:c0:de:c1: fb:5a:3b:72:f4:75:32:9e:a1:3d:1f:cf:ea:18:de: 54:d9:f1:10:b2:03:0e:f3:7c:5b:e8:dc:76:1d:d0: 4d:e2:03:36:91:31:16:ed:50:a3:28:63:bd:0a:35: 9a:19:55:6a:4e:13:f4:07:e4:91:99:2f:67:ae:53: 2b:5d:33:68:7f:88:5f:e4:4a:25:c7:ab:f8:44:8e: 2b:94:76:d1:cb:32:40:9e:a1:42:12:d2:41:a5:26: ab:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:28:60:BD:7E:F1:3E:59:1C:C4:2F:39:41:AC:B4:2F:6C:41:8C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/8bc94d77-81f1-31f2-9793-8b8c39aec503.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.crl X509v3 Authority Key Identifier: keyid:93:4F:C0:68:0F:B6:73:44:0B:D0:25:EB:63:C7:E7:CF:0A:DD:00:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c6c3a7f-86b7-4f9a-b2ab-04c827927389.cer sbgp-ipAddrBlock: critical IPv4: 67.202.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:a3:ba:98:34:d5:24:f9:7e:43:39:e7:94:47:2c:78:c8:a5: 8b:c2:ff:c3:7a:fb:0f:d1:2c:3e:8d:fe:7d:d5:23:4b:40:d4: a3:38:a9:7d:51:67:49:ca:7a:69:1e:41:fe:f4:15:2e:09:f1: a8:a0:f0:fd:2e:b0:8b:ca:53:61:6f:fc:7b:af:69:0d:10:5f: 65:da:db:37:d3:56:98:23:f5:92:d1:af:7e:ee:bc:76:0f:ba: 67:75:9c:3a:3f:28:99:30:91:c2:0e:cb:d9:c9:29:eb:dc:9e: c5:4b:11:bb:d6:c4:58:89:16:65:57:9f:b6:ff:45:46:f3:12: f6:3f:71:87:29:e2:2f:42:de:74:ee:1f:ab:12:f7:09:c1:f1: 1a:85:75:0f:7d:94:a6:4a:0f:89:d3:7e:d3:a8:17:78:22:81: 64:cb:0e:9b:13:65:dd:85:f7:ef:b5:4a:4c:6b:c8:1f:92:60: 0a:5f:a2:c7:58:46:45:d4:87:79:a7:d7:7a:31:da:b2:86:e4: f5:f0:b0:90:60:ef:c9:41:42:db:de:ea:e4:a0:5d:d6:25:1d: e7:08:60:2f:b5:32:26:c3:4d:47:7f:16:00:89:b4:e1:0d:d7: 6d:cb:25:81:fd:20:cd:96:72:41:0e:7f:2d:1c:66:76:bd:ae: 51:76:d3:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJrpCL9aM9PtdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM2YzNhN2YtODZiNy00ZjlhLWIyYWItMDRjODI3OTI3 Mzg5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NWM1YmMzZjItMzJmNS00OGUzLWJkNDQtZDZhOWRmOTMwNDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfbfzSCZIB2kvDD1OP/c7aSWkL0Y++KvqDYE VMxmSeOYhZf32LoZsVYUwMBaun6BwkRTDOoUhXPLr4t5uYyRHvR/277gdhOhjDAV 9SZI9RFtOJ3HrGA8nqteUvjJWxGTkFTbhKU2jDRLbxNi10DdHn8/CVXz/iO+0Ztm 33l81ml1xUdgPQXi+K8CGQJQNpq/qlGDv9sPtpH5taeBtSAneoPA3sH7Wjty9HUy nqE9H8/qGN5U2fEQsgMO83xb6Nx2HdBN4gM2kTEW7VCjKGO9CjWaGVVqThP0B+SR mS9nrlMrXTNof4hf5Eolx6v4RI4rlHbRyzJAnqFCEtJBpSar9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgoYL1+8T5ZHMQvOUGstC9sQYyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YzZj M2E3Zi04NmI3LTRmOWEtYjJhYi0wNGM4Mjc5MjczODkvOGJjOTRkNzctODFmMS0z MWYyLTk3OTMtOGI4YzM5YWVjNTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWM2YzNhN2YtODZiNy00ZjlhLWIy YWItMDRjODI3OTI3Mzg5LzVjNmMzYTdmLTg2YjctNGY5YS1iMmFiLTA0YzgyNzky NzM4OS5jcmwwHwYDVR0jBBgwFoAUk0/AaA+2c0QL0CXrY8fnzwrdAFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YzZjM2E3Zi04NmI3LTRmOWEtYjJhYi0wNGM4 Mjc5MjczODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8rVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN+jupg01ST5fkM555RHLHjIpYvC/8N6+w/RLD6N/n3VI0tA1KM4qX1R Z0nKemkeQf70FS4J8aig8P0usIvKU2Fv/HuvaQ0QX2Xa2zfTVpgj9ZLRr37uvHYP umd1nDo/KJkwkcIOy9nJKevcnsVLEbvWxFiJFmVXn7b/RUbzEvY/cYcp4i9C3nTu H6sS9wnB8RqFdQ99lKZKD4nTftOoF3gigWTLDpsTZd2F9++1SkxryB+SYApfosdY RkXUh3mn13ox2rKG5PXwsJBg78lBQtve6uSgXdYlHecIYC+1MibDTUd/FgCJtOEN 123LJYH9IM2WckEOfy0cZna9rlF205g= -----END CERTIFICATE-----Generated at Sat Apr 26 16:14:44 2025 by rpki-client