$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/2731d2f0-9541-3aab-bdf8-127310be17f3.roa File: 2731d2f0-9541-3aab-bdf8-127310be17f3.roa (raw, json) Hash identifier: eyxuKJl65qpDmbKfLi1DBvHOlbZKNg60Zkret0Kkin8= Subject key identifier: A2:51:07:E9:34:B4:12:E3:C8:A3:6C:42:23:E3:9D:A1:45:8D:38:91 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584944693AB82FFF33EDF1670D00 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/2731d2f0-9541-3aab-bdf8-127310be17f3.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 6621 IP address blocks: 67.44.48.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3a:b8:2f:ff:33:ed:f1:67:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=c89ba3dc-a63d-4d66-bd85-d2670d1645bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:7b:f7:4f:63:7b:dd:a4:e6:6e:63:ab:65: 64:5a:fe:1f:ed:f2:4c:33:18:81:05:c5:ee:31:cf: 1d:a4:a9:27:48:51:6d:d0:8a:29:07:9c:32:9a:cc: 91:dc:47:f3:b7:53:91:f3:81:5a:cb:54:01:3c:75: 1f:cd:e0:57:9a:fc:11:ad:f7:39:cd:60:53:89:3d: ba:43:69:b0:90:5a:b1:e0:76:da:e9:31:ad:3d:c6: ad:a5:26:d2:99:29:64:4f:1a:84:3b:ef:bc:f1:ba: 12:ad:53:db:40:f3:b2:b7:9e:72:4c:ff:62:d1:cf: 33:49:8c:6f:53:83:1e:9a:0e:a1:5b:b9:22:55:95: 58:4c:74:cd:ff:76:62:6d:bf:36:82:cc:f6:e9:a6: 94:ec:c4:c7:c2:f0:2d:34:ea:6d:f5:aa:6d:ba:b1: 45:39:9f:30:69:49:a1:d6:60:e6:14:30:ae:8e:4c: d5:df:c4:54:48:34:24:b4:fe:7e:1d:f3:6f:e6:27: 0a:46:6a:43:c6:49:9f:22:9b:bf:9d:9b:c8:e9:e1: d1:78:58:4d:11:e9:05:b9:cb:03:d1:fc:eb:fe:54: 48:7a:bd:e5:de:0f:27:2e:7a:97:83:8c:38:ac:2b: 71:83:01:04:4c:2c:f7:30:90:0c:5f:a6:48:2e:ac: 72:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:51:07:E9:34:B4:12:E3:C8:A3:6C:42:23:E3:9D:A1:45:8D:38:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/2731d2f0-9541-3aab-bdf8-127310be17f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:54:24:ce:5d:1e:29:9e:7c:92:62:02:56:26:9d:a3:e8:4c: 4a:42:f8:a0:29:d1:d3:be:f8:a8:15:5b:33:8d:79:80:4f:43: 71:cb:fd:6c:f6:4d:52:9f:fd:23:8d:d1:bb:fb:9c:b8:df:65: 2a:2b:5d:ce:2c:eb:19:bb:6d:9b:0e:f6:b9:0d:cb:20:62:18: 7e:85:57:a8:3d:a3:28:d4:42:e5:c5:56:87:75:04:01:a2:04: ca:d6:02:55:28:35:2c:b0:2b:8d:4f:f9:f2:5c:ab:89:31:96: 84:25:14:17:a5:c6:08:48:60:d1:aa:c7:a3:53:ac:aa:46:2a: 66:4d:d0:b4:4f:c4:dd:4e:94:84:e2:24:7e:37:b5:8d:e2:01: 7c:76:91:3b:34:ad:9f:16:e1:80:61:1f:6c:15:8a:6b:5f:c5: 7c:cb:4a:a1:28:c3:a8:95:bb:0f:78:52:69:af:96:00:05:54: 31:a8:e3:05:8b:b2:08:ae:c7:1b:5f:3b:4f:f0:6c:c5:28:3c: 90:69:fd:f0:56:a7:7a:5e:7c:85:32:e6:cb:2b:b3:05:09:9e: 37:ca:15:de:9d:97:f1:44:fc:da:dd:ca:5d:3f:ab:f6:96:8f: 26:4b:86:35:b0:64:ec:77:78:bd:2a:7e:1e:87:3b:ba:df:21: cf:0d:85:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTq4L/8z7fFnDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk Yzg5YmEzZGMtYTYzZC00ZDY2LWJkODUtZDI2NzBkMTY0NWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulR7909je92k5m5jq2VkWv4f7fJMMxiBBcXu Mc8dpKknSFFt0IopB5wymsyR3Efzt1OR84Fay1QBPHUfzeBXmvwRrfc5zWBTiT26 Q2mwkFqx4Hba6TGtPcatpSbSmSlkTxqEO++88boSrVPbQPOyt55yTP9i0c8zSYxv U4Memg6hW7kiVZVYTHTN/3Zibb82gsz26aaU7MTHwvAtNOpt9apturFFOZ8waUmh 1mDmFDCujkzV38RUSDQktP5+HfNv5icKRmpDxkmfIpu/nZvI6eHReFhNEekFucsD 0fzr/lRIer3l3g8nLnqXg4w4rCtxgwEETCz3MJAMX6ZILqxy7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJRB+k0tBLjyKNsQiPjnaFFjTiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMjczMWQyZjAtOTU0MS0z YWFiLWJkZjgtMTI3MzEwYmUxN2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNUJM5dHimefJJiAlYmnaPoTEpC+KAp0dO++KgVWzONeYBPQ3HL/Wz2 TVKf/SON0bv7nLjfZSorXc4s6xm7bZsO9rkNyyBiGH6FV6g9oyjUQuXFVod1BAGi BMrWAlUoNSywK41P+fJcq4kxloQlFBelxghIYNGqx6NTrKpGKmZN0LRPxN1OlITi JH43tY3iAXx2kTs0rZ8W4YBhH2wVimtfxXzLSqEow6iVuw94UmmvlgAFVDGo4wWL sgiuxxtfO0/wbMUoPJBp/fBWp3pefIUy5ssrswUJnjfKFd6dl/FE/Nrdyl0/q/aW jyZLhjWwZOx3eL0qfh6HO7rfIc8NheE= -----END CERTIFICATE-----Generated at Mon Apr 7 16:09:11 2025 by rpki-client