$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa File: 971c8edd-06bb-333f-94f5-8b5f3db41453.roa (raw, json) Hash identifier: EPZuQUew6YPgiVCmC/vp+tRIZcEU1HLaxQVZI1z2OjM= Subject key identifier: 07:3D:7D:28:1E:D2:86:A7:22:D0:0D:15:72:B5:1A:A7:38:66:66:DF Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F43285848D7A649B4F1205AB6F8FB9F80 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 63062 IP address blocks: 67.44.32.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:49:b4:f1:20:5a:b6:f8:fb:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=8030b2ec-0ef7-4e17-abe1-a7b2eb6154dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9e:75:fd:e7:a8:bf:be:dd:29:04:6e:26:88: 15:ac:f0:f1:03:ef:50:ed:1f:74:0c:51:6b:c7:e2: ee:4d:b7:d5:e2:14:45:27:29:21:a1:3a:73:7f:ca: 03:8a:b6:7a:03:72:eb:44:e8:75:fe:86:b4:26:1f: 01:40:2e:6f:c3:f9:d7:7c:03:4d:22:02:b3:91:41: ff:03:7a:05:05:b2:24:d3:f4:18:63:ef:99:2b:33: b5:f8:ce:3a:a5:fa:cd:5e:ed:8e:b7:5f:86:df:62: ff:d5:ce:32:22:a8:56:44:d0:0f:98:80:71:fb:b0: ce:83:4a:9e:5e:aa:ad:de:3e:e7:07:dd:77:85:e9: ef:07:bc:cf:da:29:17:3d:8c:46:aa:4e:2e:9a:26: c8:a8:54:5c:f4:1d:11:9f:0b:13:6d:6a:40:ea:3a: 32:bd:ec:05:60:0d:d2:32:67:88:f7:79:94:d4:96: c5:81:98:f3:95:81:37:b1:68:25:cc:3b:eb:9b:f4: 4e:bc:74:f3:e2:af:82:b5:8c:0c:83:f8:6d:81:a4: 69:62:3f:3f:bc:1c:19:8b:80:fa:78:ec:1d:56:fd: a7:b6:d0:e2:0a:24:03:5b:12:ef:30:4b:4f:9d:14: 40:9f:83:7e:63:92:e5:74:95:c5:c0:71:1e:9c:a7: 3f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3D:7D:28:1E:D2:86:A7:22:D0:0D:15:72:B5:1A:A7:38:66:66:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a6:84:55:45:ae:fc:0b:00:dc:6e:9c:ea:c6:5a:95:ee:9b: 65:9c:af:de:6c:2a:a7:81:85:b2:d4:4c:e1:46:86:81:0e:17: d7:24:32:95:43:86:cc:17:91:71:81:e5:73:94:84:e4:62:bb: 33:d6:0d:ef:c5:2b:ee:57:95:7c:79:6a:d6:af:b8:0e:4b:22: 20:e5:6d:85:f1:c3:95:50:45:aa:2b:c9:20:e4:83:0f:aa:3c: 18:f0:b1:dd:3c:b0:db:13:a3:d7:80:01:76:bd:e1:99:67:dd: 9a:08:a0:8f:a5:ca:66:3c:86:8b:6d:59:e8:39:69:06:97:5f: 3b:3a:9b:a2:20:43:ff:ee:ac:ff:2a:45:02:c4:2e:4d:40:d2: a0:4a:cc:10:db:ef:f4:79:66:66:71:fb:c7:d1:ae:a4:40:bc: 2b:11:da:61:6d:60:85:16:16:4c:31:02:7e:2b:1a:56:54:2a: c8:31:70:f5:b2:8f:13:a4:6c:2c:75:d0:2a:19:b6:b8:33:7e: 0b:5c:39:88:2d:10:e3:db:9b:12:b9:b1:d8:eb:06:6b:de:ba: 7e:f7:38:cc:6e:d6:8d:11:66:00:63:4f:92:ba:57:b8:df:7b: 26:97:28:c6:52:d1:08:ee:d2:a9:3c:2d:bd:df:37:00:a6:17: cd:60:00:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpkm08SBatvj7n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk ODAzMGIyZWMtMGVmNy00ZTE3LWFiZTEtYTdiMmViNjE1NGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp51/eeov77dKQRuJogVrPDxA+9Q7R90DFFr x+LuTbfV4hRFJykhoTpzf8oDirZ6A3LrROh1/oa0Jh8BQC5vw/nXfANNIgKzkUH/ A3oFBbIk0/QYY++ZKzO1+M46pfrNXu2Ot1+G32L/1c4yIqhWRNAPmIBx+7DOg0qe Xqqt3j7nB913henvB7zP2ikXPYxGqk4umibIqFRc9B0RnwsTbWpA6joyvewFYA3S MmeI93mU1JbFgZjzlYE3sWglzDvrm/ROvHTz4q+CtYwMg/htgaRpYj8/vBwZi4D6 eOwdVv2nttDiCiQDWxLvMEtPnRRAn4N+Y5LldJXFwHEenKc/BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAc9fSge0oanItANFXK1Gqc4ZmbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvOTcxYzhlZGQtMDZiYi0z MzNmLTk0ZjUtOGI1ZjNkYjQxNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHumhFVFrvwLANxunOrGWpXum2Wcr95sKqeBhbLUTOFGhoEOF9ckMpVD hswXkXGB5XOUhORiuzPWDe/FK+5XlXx5atavuA5LIiDlbYXxw5VQRaorySDkgw+q PBjwsd08sNsTo9eAAXa94Zln3ZoIoI+lymY8hottWeg5aQaXXzs6m6IgQ//urP8q RQLELk1A0qBKzBDb7/R5ZmZx+8fRrqRAvCsR2mFtYIUWFkwxAn4rGlZUKsgxcPWy jxOkbCx10CoZtrgzfgtcOYgtEOPbmxK5sdjrBmveun73OMxu1o0RZgBjT5K6V7jf eyaXKMZS0Qju0qk8Lb3fNwCmF81gAFI= -----END CERTIFICATE-----Generated at Tue Apr 8 11:24:08 2025 by rpki-client