$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa File: bdd949a7-e0e1-3b8e-81bc-94238a595155.roa (raw, json) Hash identifier: Nbh5aRKCFB4wnsqcwD0qXuvYEfJhAqSVcYhDDZMOkCQ= Subject key identifier: 79:09:FC:C3:D5:06:2A:C8:3D:57:26:EF:6A:FF:40:DF:D1:58:86:8D Certificate issuer: /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939 Certificate serial: 010D0C9F43285848E59BC70050C8EE167C2D0A00 Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 14618 IP address blocks: 67.226.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c7:00:50:c8:ee:16:7c:2d:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=d2494241-1d49-41be-b0f1-fce1a562be17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:e8:ec:d9:81:85:54:fd:ba:7a:cd:c9:97: 5d:03:bf:6e:14:97:6d:02:a8:7e:69:af:82:78:b4: b4:d8:6b:44:57:24:ed:6d:a3:a3:e0:75:6b:3a:12: 36:e2:f3:fd:9f:10:c0:d7:a9:a9:b8:44:87:dd:e7: a0:a9:98:3d:51:8e:d0:08:5b:99:ca:1e:9e:c7:ea: 78:84:1f:e3:00:19:c4:f4:e0:78:01:7c:7e:5c:e1: 19:d5:ea:2e:12:ea:ba:b3:c9:d7:98:d5:79:53:d2: 28:9c:d5:7a:0f:cc:79:d3:59:00:61:39:c0:a1:8e: 37:9f:3c:63:7c:33:5c:5c:9c:d0:39:02:6a:16:e6: 08:f8:75:ab:62:86:54:44:47:0a:2c:0b:a4:8e:da: 93:26:37:a7:f1:e3:2d:02:6f:e5:69:c3:93:59:18: 8a:52:ba:25:f2:4a:cd:03:89:b6:99:58:e8:7f:98: 3f:ed:46:43:c5:4f:98:57:2b:e9:2b:cc:6b:fa:70: 6e:f3:85:b7:1d:b7:ac:3e:5f:09:c7:6d:bb:55:de: f5:c8:fa:e0:96:76:8f:39:92:d8:73:44:c6:a6:a3: 24:85:f0:bd:f4:1d:e2:3d:48:64:b4:eb:9c:b2:55: 9c:71:7e:3b:53:69:73:a1:a7:72:3e:a5:72:a8:53: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:09:FC:C3:D5:06:2A:C8:3D:57:26:EF:6A:FF:40:DF:D1:58:86:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl X509v3 Authority Key Identifier: keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer sbgp-ipAddrBlock: critical IPv4: 67.226.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:95:d3:c3:eb:24:5e:93:20:a6:c7:de:7c:65:26:47:b2:9b: e1:95:dc:5e:c2:9d:e9:2e:59:ed:5d:00:59:88:54:3c:0a:d2: 83:38:5e:ec:98:b2:97:0b:c8:71:78:5d:c6:4d:91:d2:41:16: e7:87:36:93:87:f0:e0:a9:76:13:6e:57:c5:31:e8:10:2a:0a: bb:f2:53:d8:ff:fa:18:b4:be:71:e1:96:eb:13:5f:cc:98:76: ab:13:bf:f3:34:ce:9f:c4:37:d2:90:9c:82:d4:15:ae:59:94: 0f:a8:05:6b:c6:a3:69:f6:95:52:94:ef:90:d2:cc:60:44:25: 79:ed:a2:1d:9d:94:72:28:ab:b5:b9:c5:9f:84:34:46:ea:9c: 0e:6b:4a:cf:a0:d3:56:a9:81:59:96:d6:34:9e:be:a6:25:94: c1:2f:fa:95:7a:c2:68:68:e1:1f:b5:47:29:25:7e:7a:ed:e9: 4a:86:48:cb:73:c2:47:c7:cd:5b:98:d6:d8:df:a3:3d:73:97: f6:37:5f:0f:30:82:7f:27:e9:ca:07:87:3d:b1:d9:d5:6e:b3: 9b:30:79:ba:59:24:6a:23:64:c6:fa:d8:a8:67:fc:1b:64:f5: 05:ac:bf:66:08:d6:ca:32:b3:f5:09:70:10:8b:29:06:6e:de: fd:2e:34:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8cAUMjuFnwtCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI4Y2NjYzgtNGMxZC00NTdiLWE3MDktMmYyYzVkODNj OTM5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZDI0OTQyNDEtMWQ0OS00MWJlLWIwZjEtZmNlMWE1NjJiZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3Po7NmBhVT9unrNyZddA79uFJdtAqh+aa+C eLS02GtEVyTtbaOj4HVrOhI24vP9nxDA16mpuESH3eegqZg9UY7QCFuZyh6ex+p4 hB/jABnE9OB4AXx+XOEZ1eouEuq6s8nXmNV5U9IonNV6D8x501kAYTnAoY43nzxj fDNcXJzQOQJqFuYI+HWrYoZUREcKLAukjtqTJjen8eMtAm/lacOTWRiKUrol8krN A4m2mVjof5g/7UZDxU+YVyvpK8xr+nBu84W3HbesPl8Jx227Vd71yPrglnaPOZLY c0TGpqMkhfC99B3iPUhktOucslWccX47U2lzoadyPqVyqFPXPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkJ/MPVBirIPVcm72r/QN/RWIaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Mjhj Y2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJjNWQ4M2M5MzkvYmRkOTQ5YTctZTBlMS0z YjhlLTgxYmMtOTQyMzhhNTk1MTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTI4Y2NjYzgtNGMxZC00NTdiLWE3 MDktMmYyYzVkODNjOTM5LzkyOGNjY2M4LTRjMWQtNDU3Yi1hNzA5LTJmMmM1ZDgz YzkzOS5jcmwwHwYDVR0jBBgwFoAU50jP7N+pFw+ueUr7PjNtsErFiKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MjhjY2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJj NWQ4M2M5MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ+LdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWV08PrJF6TIKbH3nxlJkeym+GV3F7CnekuWe1dAFmIVDwK0oM4XuyY spcLyHF4XcZNkdJBFueHNpOH8OCpdhNuV8Ux6BAqCrvyU9j/+hi0vnHhlusTX8yY dqsTv/M0zp/EN9KQnILUFa5ZlA+oBWvGo2n2lVKU75DSzGBEJXntoh2dlHIoq7W5 xZ+ENEbqnA5rSs+g01apgVmW1jSevqYllMEv+pV6wmho4R+1Ryklfnrt6UqGSMtz wkfHzVuY1tjfoz1zl/Y3Xw8wgn8n6coHhz2x2dVus5swebpZJGojZMb62Khn/Btk 9QWsv2YI1soys/UJcBCLKQZu3v0uNFA= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:23 2025 by rpki-client