$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/04f8af44-22cb-3a08-b7f4-332ea1380b17.roa File: 04f8af44-22cb-3a08-b7f4-332ea1380b17.roa (raw, json) Hash identifier: WVzu1CiqNbbLJ7Xz/X4d9lJ+oYnQ1s5dQ6pFHXirDeQ= Subject key identifier: 69:C0:4A:8A:11:68:53:0B:91:FA:C2:6F:09:04:94:75:E0:B0:2D:46 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858488DAB42046DD27A0485F78020 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/04f8af44-22cb-3a08-b7f4-332ea1380b17.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 209 IP address blocks: 67.63.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:42:04:6d:d2:7a:04:85:f7:80:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=9a6869ae-2770-4c2d-ae2b-cf8b51694c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bd:b0:03:e6:c4:8a:66:25:bd:82:da:5a:25: c2:7e:dc:ca:db:0d:df:03:e3:68:6f:aa:8e:5c:94: 21:df:7e:1b:e1:10:1e:1d:7c:8c:d3:ee:d6:e6:b8: 37:6c:d1:da:30:15:cf:e4:7e:f4:74:0b:16:ee:6d: 1b:ec:a7:8c:da:69:9b:e7:89:58:ae:8a:0d:3a:14: 32:cb:e7:69:96:42:23:3e:c1:4e:e6:9e:b4:93:c0: 36:81:2c:22:97:61:52:7d:b7:a1:f0:61:80:c3:e6: 03:eb:24:39:29:d7:41:c7:69:2f:90:e5:98:0f:11: 91:5a:59:dd:48:04:74:dd:24:e8:5e:b3:d6:5f:75: db:aa:2c:d2:a8:3f:a0:3c:9c:fd:29:69:72:cb:4e: 65:3e:cb:ec:50:60:28:c0:b8:3a:45:3e:14:7a:e5: c1:3a:95:8d:48:6c:8f:eb:cf:36:7d:bf:39:50:d4: 27:9e:6c:f5:4c:47:c7:9a:e3:ed:84:43:59:f9:99: 7d:1c:78:a1:06:8b:c1:f8:a5:3b:96:cc:84:31:2d: 36:23:1b:4c:2d:6b:df:b5:2e:62:bf:51:de:67:66: e3:c3:f2:01:4f:9a:a4:37:e5:7d:fe:31:d3:a3:a8: da:46:a9:d2:28:0f:8a:96:03:65:56:11:c5:9a:bb: 86:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C0:4A:8A:11:68:53:0B:91:FA:C2:6F:09:04:94:75:E0:B0:2D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/04f8af44-22cb-3a08-b7f4-332ea1380b17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 67.63.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:6f:da:78:a4:08:d4:ce:8a:11:3d:ee:a1:94:f8:70:a7:1c: 30:b2:5f:be:dd:0f:2f:63:eb:34:d6:86:80:3f:8a:0d:06:50: b7:34:c4:05:94:18:be:04:4a:46:7f:bb:e4:67:7a:44:9d:09: 1d:20:44:27:79:1a:a8:d6:9a:a1:f8:a4:04:c0:3c:c0:0f:84: 4a:2a:32:60:10:9c:e5:0e:0f:58:da:ca:43:5e:78:28:8c:97: c8:66:cb:bf:fa:45:60:4a:b7:b6:d8:4a:b3:80:21:fb:12:d4: c6:7a:fc:f5:73:67:b2:6e:c1:10:ad:1f:bf:2e:7f:00:36:59: 07:45:6b:47:d2:8e:81:17:cb:4d:95:72:5d:95:2b:11:d8:ce: a3:da:dd:5e:09:d6:a7:86:56:0b:f1:39:db:89:aa:2c:9f:3a: e8:a7:7c:fc:4f:01:29:80:69:22:6e:60:ff:41:c8:ef:94:ec: 3d:f8:08:ea:ee:c8:6f:4c:fe:c5:7f:14:e2:41:0b:f4:40:bb: b0:fd:a8:5a:85:75:a9:da:38:ea:d1:fb:ef:80:d3:83:8d:a0: 8f:dd:1e:d4:30:d2:81:0e:77:c4:94:cc:51:8c:e1:9d:c3:c2: 91:c6:f8:f9:23:eb:2c:e4:a5:5a:25:d1:b9:a0:90:78:e9:0a: a2:60:e6:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq0IEbdJ6BIX3gCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk OWE2ODY5YWUtMjc3MC00YzJkLWFlMmItY2Y4YjUxNjk0YzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj72wA+bEimYlvYLaWiXCftzK2w3fA+Nob6qO XJQh334b4RAeHXyM0+7W5rg3bNHaMBXP5H70dAsW7m0b7KeM2mmb54lYrooNOhQy y+dplkIjPsFO5p60k8A2gSwil2FSfbeh8GGAw+YD6yQ5KddBx2kvkOWYDxGRWlnd SAR03SToXrPWX3XbqizSqD+gPJz9KWlyy05lPsvsUGAowLg6RT4UeuXBOpWNSGyP 6882fb85UNQnnmz1TEfHmuPthENZ+Zl9HHihBovB+KU7lsyEMS02IxtMLWvftS5i v1HeZ2bjw/IBT5qkN+V9/jHTo6jaRqnSKA+KlgNlVhHFmruGGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnASooRaFMLkfrCbwkElHXgsC1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvMDRmOGFmNDQtMjJjYi0z YTA4LWI3ZjQtMzMyZWExMzgwYjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQz+rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRv2nikCNTOihE97qGU+HCnHDCyX77dDy9j6zTWhoA/ig0GULc0xAWU GL4ESkZ/u+RnekSdCR0gRCd5GqjWmqH4pATAPMAPhEoqMmAQnOUOD1jaykNeeCiM l8hmy7/6RWBKt7bYSrOAIfsS1MZ6/PVzZ7JuwRCtH78ufwA2WQdFa0fSjoEXy02V cl2VKxHYzqPa3V4J1qeGVgvxOduJqiyfOuinfPxPASmAaSJuYP9ByO+U7D34COru yG9M/sV/FOJBC/RAu7D9qFqFdanaOOrR+++A04ONoI/dHtQw0oEOd8SUzFGM4Z3D wpHG+Pkj6yzkpVol0bmgkHjpCqJg5ig= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:57 2025 by rpki-client