$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1549d81c-2dcd-3e4a-b6e8-081897c8725c.roa File: 1549d81c-2dcd-3e4a-b6e8-081897c8725c.roa (raw, json) Hash identifier: j1GmMSKk4r4MGQOIrZx2aNcoE1IlbEzjmnHdWF4IxQg= Subject key identifier: 79:D4:80:C2:F8:28:F5:8A:D9:9E:1E:A2:84:15:73:46:30:EA:33:13 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F43285849244E7CBB3209036022F3E980 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1549d81c-2dcd-3e4a-b6e8-081897c8725c.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 14061 IP address blocks: 67.205.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7c:bb:32:09:03:60:22:f3:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=4c55be2c-9b65-482c-aee2-ba3d51acf102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5d:f5:42:b3:c6:7d:de:30:ee:d6:de:73:41: ab:98:fb:5d:8b:9b:d0:49:ee:1f:1a:4b:65:66:ce: be:96:bb:bf:c4:75:cb:21:af:e1:aa:98:28:08:bb: a0:ac:87:56:bb:2f:5d:89:ee:e1:16:b2:71:2b:0a: 83:3c:af:50:9f:cf:12:91:fb:46:82:69:57:d4:f1: dd:cc:51:62:91:a9:e2:1d:2d:14:68:3a:9c:52:fd: a0:d0:ce:19:38:02:23:29:67:cf:53:7a:8a:4c:08: 73:2b:a8:f6:ea:6d:31:0a:27:4a:a8:3a:74:0a:60: 6b:e9:d4:9e:b2:f5:61:a5:75:4c:05:b5:88:db:d0: 36:60:52:0f:7e:e6:2e:0c:3b:ee:bb:98:cd:b2:f6: 8c:48:b3:c0:fa:bd:15:4f:cf:2c:a5:ce:2c:d6:cb: 66:b2:fb:a6:83:20:d3:79:ad:be:e0:0d:8b:54:7c: 29:6b:dd:a7:9e:8f:d4:47:ca:c5:0d:e1:68:37:5f: f6:62:ee:89:36:1d:dd:74:8f:ec:74:9d:26:cf:29: dd:f3:01:b0:49:f3:fc:52:f3:d2:da:3e:a7:d4:c0: 0a:2e:65:0a:42:4d:47:db:a7:6b:ed:e9:b0:28:2d: 79:64:94:d8:b2:ad:c0:7c:69:2b:fb:3c:96:9c:ed: 37:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D4:80:C2:F8:28:F5:8A:D9:9E:1E:A2:84:15:73:46:30:EA:33:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/1549d81c-2dcd-3e4a-b6e8-081897c8725c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 67.205.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:30:69:2c:dd:0b:48:d3:10:c1:fb:d0:54:01:9e:6a:06:ff: 87:75:69:fd:46:83:84:62:ef:74:61:10:dc:9e:03:0c:fc:a8: ed:3c:94:38:b9:03:b3:34:5b:a9:3f:ce:da:58:c3:88:14:c4: d8:a5:1e:c4:08:b0:50:32:08:41:ec:c0:4e:ac:08:fb:ff:ed: f5:62:6e:98:ab:ee:ae:50:48:a9:fe:9d:19:cd:86:96:ef:67: f4:97:35:55:fd:16:fd:66:f2:5a:15:ba:61:40:5f:b4:db:8c: a0:9c:9c:3e:5d:6c:8c:fa:86:f0:c7:ec:81:58:9f:75:87:fa: 1d:e3:c9:ce:56:73:d4:25:da:98:6f:0b:7a:ab:7f:b5:a0:b2: 8d:da:a8:9e:3f:cd:32:30:ec:04:95:bc:9c:f4:81:06:de:03: 98:8d:4b:e4:38:e6:7c:2e:7f:ff:31:31:6a:34:ba:21:28:a1: 10:23:6a:98:b2:8f:b4:76:61:82:4a:d3:5e:64:c0:03:27:93: 43:ff:ba:40:56:54:55:30:58:29:61:d8:83:26:25:15:9d:23: 83:86:fb:b9:a7:08:a4:87:66:9a:05:05:aa:d6:bc:12:d0:38: 83:6f:24:47:6f:5a:e2:75:d6:0e:c2:01:90:95:9a:2d:58:92: b3:78:05:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTny7MgkDYCLz6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NGM1NWJlMmMtOWI2NS00ODJjLWFlZTItYmEzZDUxYWNmMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V31QrPGfd4w7tbec0GrmPtdi5vQSe4fGktl Zs6+lru/xHXLIa/hqpgoCLugrIdWuy9die7hFrJxKwqDPK9Qn88SkftGgmlX1PHd zFFikaniHS0UaDqcUv2g0M4ZOAIjKWfPU3qKTAhzK6j26m0xCidKqDp0CmBr6dSe svVhpXVMBbWI29A2YFIPfuYuDDvuu5jNsvaMSLPA+r0VT88spc4s1stmsvumgyDT ea2+4A2LVHwpa92nno/UR8rFDeFoN1/2Yu6JNh3ddI/sdJ0mzynd8wGwSfP8UvPS 2j6n1MAKLmUKQk1H26dr7emwKC15ZJTYsq3AfGkr+zyWnO033wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnUgML4KPWK2Z4eooQVc0Yw6jMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMTU0OWQ4MWMtMmRjZC0z ZTRhLWI2ZTgtMDgxODk3Yzg3MjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQ82AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAwaSzdC0jTEMH70FQBnmoG/4d1af1Gg4Ri73RhENyeAwz8qO08lDi5 A7M0W6k/ztpYw4gUxNilHsQIsFAyCEHswE6sCPv/7fVibpir7q5QSKn+nRnNhpbv Z/SXNVX9Fv1m8loVumFAX7TbjKCcnD5dbIz6hvDH7IFYn3WH+h3jyc5Wc9Ql2phv C3qrf7Wgso3aqJ4/zTIw7ASVvJz0gQbeA5iNS+Q45nwuf/8xMWo0uiEooRAjapiy j7R2YYJK015kwAMnk0P/ukBWVFUwWClh2IMmJRWdI4OG+7mnCKSHZpoFBarWvBLQ OINvJEdvWuJ11g7CAZCVmi1YkrN4BVY= -----END CERTIFICATE-----Generated at Fri Mar 14 09:27:23 2025 by rpki-client