$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f1dd0958-307b-3494-81ec-2170193c7886.roa File: f1dd0958-307b-3494-81ec-2170193c7886.roa (raw, json) Hash identifier: 3dqSgy7fOc6DwtWZFEPgAw6Iz3reKjEnMWJSiUskTE0= Subject key identifier: 06:15:82:5B:58:B4:CD:8C:A0:B4:9B:71:94:EA:AF:17:10:30:FD:E7 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858494B640536EEFFF17C2D98FB40 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f1dd0958-307b-3494-81ec-2170193c7886.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 3561 IP address blocks: 63.129.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:05:36:ee:ff:f1:7c:2d:98:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=bdbfe87c-d8d7-4fd0-8b1c-787d05a4a1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4a:8f:52:de:36:1c:a4:b9:41:5b:24:26:ad: 7e:e8:e8:3c:3f:ce:18:be:ef:fc:7b:ed:93:20:c4: 24:4e:ff:47:08:b9:c8:4d:47:ce:1c:ea:c7:28:6a: 09:5b:a7:d4:5f:ca:4d:3d:6e:2c:29:df:41:25:16: b8:72:29:6a:d3:45:f3:dd:e4:c2:17:25:27:ec:28: 27:f5:df:e9:4e:bd:da:55:53:4b:8b:52:6f:2b:c6: 85:9a:e2:aa:b6:fa:6a:64:db:db:a1:bc:2e:44:de: 07:82:21:fe:63:f0:96:52:17:47:07:78:1d:b7:07: 9c:9e:40:76:0a:e4:5b:7a:08:29:87:84:b6:cb:3b: ae:39:b0:81:89:4a:b5:6a:03:30:16:06:46:07:0a: 9b:b3:af:b2:bb:5a:18:be:4d:30:7a:c1:11:4e:8c: b6:41:fd:37:a3:78:a8:78:0c:9d:ec:bf:72:ca:90: 86:60:6c:bd:df:cc:18:5f:84:59:da:7a:55:bd:b3: 68:84:79:4f:69:e7:e9:09:3e:b3:0b:4a:86:38:fa: 5d:c9:95:88:f8:c3:d6:5a:f3:80:91:5f:e7:cc:42: ad:96:c7:ee:5a:54:15:02:81:4f:32:fd:ea:46:35: 90:c6:cf:9d:fa:db:05:07:52:51:b3:8d:fe:1c:1f: a5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:15:82:5B:58:B4:CD:8C:A0:B4:9B:71:94:EA:AF:17:10:30:FD:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f1dd0958-307b-3494-81ec-2170193c7886.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 63.129.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:08:bb:60:58:5f:c3:2e:70:76:b0:db:87:f2:b9:ca:26:63: df:07:76:7c:c3:d0:fd:b3:6f:73:50:8f:21:00:0f:5e:4d:3c: 79:29:af:d4:5d:97:a1:2d:37:73:83:61:a9:ca:a5:9e:ca:6a: 9f:89:dc:d8:66:f1:7d:db:6d:24:0b:a5:68:5b:5f:de:1a:02: 47:f2:29:87:40:6f:bb:6a:d2:31:03:a7:ce:98:15:16:b9:88: bd:b6:e8:cc:24:83:72:7e:4d:61:7b:ba:f4:d8:13:66:4f:4c: f3:ea:70:99:bf:4f:21:0e:a8:66:b9:26:0c:ff:54:16:06:30: e9:bc:7e:af:d6:43:98:52:97:e0:00:d4:3a:3f:17:24:02:40: 04:20:90:7f:1e:29:41:2a:64:04:b7:7c:05:de:e1:d8:4e:bb: 4d:2f:e5:ac:88:bb:a2:04:45:b4:f3:aa:20:5c:61:b8:4d:69: b3:ca:6d:b0:0f:80:33:e2:1a:3d:28:ba:7a:be:f3:b3:d9:06: c8:7f:3f:8b:2f:3a:74:73:d7:58:50:9a:17:dc:87:73:a6:db: f2:89:3c:bc:ff:00:6c:48:c7:70:e5:a1:13:4f:a8:85:8c:b9: 50:83:50:84:be:14:96:d6:6d:02:d0:87:68:aa:94:27:69:70: ce:eb:13:70 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElLZAU27v/xfC2Y+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YmRiZmU4N2MtZDhkNy00ZmQwLThiMWMtNzg3ZDA1YTRhMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEqPUt42HKS5QVskJq1+6Og8P84Yvu/8e+2T IMQkTv9HCLnITUfOHOrHKGoJW6fUX8pNPW4sKd9BJRa4cilq00Xz3eTCFyUn7Cgn 9d/pTr3aVVNLi1JvK8aFmuKqtvpqZNvbobwuRN4HgiH+Y/CWUhdHB3gdtwecnkB2 CuRbeggph4S2yzuuObCBiUq1agMwFgZGBwqbs6+yu1oYvk0wesERToy2Qf03o3io eAyd7L9yypCGYGy938wYX4RZ2npVvbNohHlPaefpCT6zC0qGOPpdyZWI+MPWWvOA kV/nzEKtlsfuWlQVAoFPMv3qRjWQxs+d+tsFB1JRs43+HB+lqwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAYVgltYtM2MoLSbcZTqrxcQMP3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZjFkZDA5NTgtMzA3Yi0z NDk0LTgxZWMtMjE3MDE5M2M3ODg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAP4EwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGQi7YFhfwy5wdrDbh/K5yiZj3wd2fMPQ/bNvc1CPIQAPXk08eSmv1F2X oS03c4Nhqcqlnspqn4nc2GbxfdttJAulaFtf3hoCR/Iph0Bvu2rSMQOnzpgVFrmI vbbozCSDcn5NYXu69NgTZk9M8+pwmb9PIQ6oZrkmDP9UFgYw6bx+r9ZDmFKX4ADU Oj8XJAJABCCQfx4pQSpkBLd8Bd7h2E67TS/lrIi7ogRFtPOqIFxhuE1ps8ptsA+A M+IaPSi6er7zs9kGyH8/iy86dHPXWFCaF9yHc6bb8ok8vP8AbEjHcOWhE0+ohYy5 UINQhL4UltZtAtCHaKqUJ2lwzusTcA== -----END CERTIFICATE-----Generated at Sat Apr 5 10:41:53 2025 by rpki-client