$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/7cc10ba8-2178-308c-98a2-2d22e9f3a9ab.roa File: 7cc10ba8-2178-308c-98a2-2d22e9f3a9ab.roa (raw, json) Hash identifier: tTAt8zd86TGcm8Rb6ay9TBZ0ZkGBiCqLSh22bhY9zCY= Subject key identifier: ED:6D:C8:55:CC:80:8B:2E:69:69:1D:CA:70:EF:BC:D3:55:46:CA:8C Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584898D5FF446939DDD5027DFC40 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/7cc10ba8-2178-308c-98a2-2d22e9f3a9ab.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 6621 IP address blocks: 67.46.64.0/20 maxlen: 20 97.73.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d5:ff:44:69:39:dd:d5:02:7d:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=dfb5c749-62e1-4aa7-8673-c1309fe6723d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:74:15:20:a6:55:76:28:cd:07:28:d6:fe: bd:77:a4:25:bb:c8:3c:7d:1b:e3:8f:e8:55:f3:85: c0:94:60:75:7f:f8:2a:4e:c4:ae:f8:14:73:82:21: 0c:9a:5d:2d:22:97:b8:23:40:79:0f:d5:ad:29:da: 66:42:40:9e:29:26:16:4c:58:7b:cc:b4:ba:2a:28: 5b:70:4b:18:4f:23:77:cc:13:4d:91:a5:b8:31:0a: 65:36:9b:65:2b:13:4f:9c:c8:54:d0:0a:71:87:4d: 07:63:31:c3:7c:e1:77:a1:7b:1e:ac:58:72:d1:f3: e8:83:70:57:44:f0:3b:60:4f:93:f1:cc:bc:87:0a: d5:76:13:23:eb:4d:5b:1b:39:90:e7:ac:15:74:63: 7d:bc:cd:4d:df:c1:18:de:00:8d:e0:d5:76:67:e2: be:71:a4:8f:f9:7a:a7:ce:87:64:04:80:72:34:90: a5:34:c3:6a:e6:a2:d0:ac:13:99:f4:80:eb:e6:9a: 8a:0e:7e:1a:cf:50:fb:51:86:79:9f:62:9b:9e:98: f4:2e:33:de:2a:31:54:51:38:41:69:22:ec:48:08: f3:2d:88:c3:3f:5a:e2:90:b3:89:63:f8:9a:88:9e: 87:56:0b:f3:df:8c:58:51:1f:92:1d:b0:9d:18:58: dc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6D:C8:55:CC:80:8B:2E:69:69:1D:CA:70:EF:BC:D3:55:46:CA:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/7cc10ba8-2178-308c-98a2-2d22e9f3a9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.46.64.0/20 97.73.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:3f:32:df:a9:b9:9e:21:a1:c4:8f:41:0a:7d:ed:1c:a9:0a: 62:b8:9b:5a:45:a3:cd:09:bc:b3:cc:e5:4a:1d:f8:55:68:c9: 6d:10:60:fe:da:03:d6:e4:3f:54:f6:d8:1a:c4:e6:ff:83:36: 2d:29:4c:f4:0a:fb:63:a2:c2:7a:52:46:f6:ff:ef:19:57:64: 32:03:37:cb:04:28:3b:d5:43:9e:2d:71:77:a7:af:ef:1a:c7: 73:92:48:73:cc:ed:67:a2:3e:d3:25:7b:36:f0:aa:1a:d9:d8: a4:01:20:7b:21:18:c5:df:35:9a:3f:24:17:00:a8:5f:fa:70: 1b:a2:85:e6:21:86:a6:28:e3:e9:4e:7a:4e:e8:66:5d:01:7c: 82:31:12:ba:fd:61:c5:f8:b0:ed:41:54:84:42:55:1f:86:33: c9:15:39:09:29:aa:7c:c9:d1:49:9e:82:eb:c4:ed:57:28:3a: ba:36:f3:78:96:61:ab:3b:a8:34:b0:b7:e4:33:74:76:4a:c4: 8c:71:93:58:4e:ff:a5:44:8d:3c:01:42:78:87:9e:f5:b4:eb: 01:f3:fb:68:00:02:c2:1f:35:f5:e0:0b:5d:56:7c:99:56:99: b1:d3:ac:cf:9f:98:4e:1e:f9:e5:34:1d:0d:ba:6f:43:de:4e: 9f:a2:5d:89 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiY1f9EaTnd1QJ9/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZGZiNWM3NDktNjJlMS00YWE3LTg2NzMtYzEzMDlmZTY3MjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkF0FSCmVXYozQco1v69d6Qlu8g8fRvjj+hV 84XAlGB1f/gqTsSu+BRzgiEMml0tIpe4I0B5D9WtKdpmQkCeKSYWTFh7zLS6Kihb cEsYTyN3zBNNkaW4MQplNptlKxNPnMhU0Apxh00HYzHDfOF3oXserFhy0fPog3BX RPA7YE+T8cy8hwrVdhMj601bGzmQ56wVdGN9vM1N38EY3gCN4NV2Z+K+caSP+Xqn zodkBIByNJClNMNq5qLQrBOZ9IDr5pqKDn4az1D7UYZ5n2Kbnpj0LjPeKjFUUThB aSLsSAjzLYjDP1rikLOJY/iaiJ6HVgvz34xYUR+SHbCdGFjc3QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFO1tyFXMgIsuaWkdynDvvNNVRsqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvN2NjMTBiYTgtMjE3OC0z MDhjLTk4YTItMmQyMmU5ZjNhOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEQy5AAwQE YUmAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI8/Mt+puZ4hocSPQQp97RypCmK4m1pFo80JvLPM5Uod+FVo yW0QYP7aA9bkP1T22BrE5v+DNi0pTPQK+2OiwnpSRvb/7xlXZDIDN8sEKDvVQ54t cXenr+8ax3OSSHPM7WeiPtMlezbwqhrZ2KQBIHshGMXfNZo/JBcAqF/6cBuiheYh hqYo4+lOek7oZl0BfIIxErr9YcX4sO1BVIRCVR+GM8kVOQkpqnzJ0UmeguvE7Vco Oro283iWYas7qDSwt+QzdHZKxIxxk1hO/6VEjTwBQniHnvW06wHz+2gAAsIfNfXg C11WfJlWmbHTrM+fmE4e+eU0HQ26b0PeTp+iXYk= -----END CERTIFICATE-----Generated at Mon Apr 7 13:04:26 2025 by rpki-client