$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04bfc0e6-752e-3639-aa49-33dda598c7a6.roa File: 04bfc0e6-752e-3639-aa49-33dda598c7a6.roa (raw, json) Hash identifier: kJ5S5hH/ZJoIsEUIOj/vD0c2dYdbv/kTbqemyRytt80= Subject key identifier: 8F:9B:E4:EB:D0:BE:46:29:18:03:3E:B4:1E:E7:D5:75:E8:33:53:14 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C1BAA6EB91F568E786A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04bfc0e6-752e-3639-aa49-33dda598c7a6.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33667 IP address blocks: 67.164.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:1b:aa:6e:b9:1f:56:8e:78:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=ee644101-d0e6-4ef5-9ff5-1822f0d239e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ad:ab:e8:ce:0a:d0:db:2c:23:dd:9c:27:e0: fd:ba:13:72:be:2a:6b:6e:47:f8:aa:dd:c3:92:aa: cb:a3:ab:99:a6:ed:35:71:10:06:fb:f1:7f:f4:e2: 7a:fd:c4:b3:0f:6d:96:d1:95:ff:37:3f:6c:14:15: 06:3e:61:48:82:ed:2a:63:0a:24:6e:d8:f5:0d:bf: 41:b7:3c:b3:70:75:55:4f:f2:91:f3:d8:90:6a:c3: 06:f6:f1:b3:98:da:1c:6b:3d:7e:a1:d7:b0:9e:6a: 25:7c:db:cd:20:05:c9:39:e5:07:41:95:9b:a3:5d: 64:94:cb:a2:65:bd:c4:dc:b6:26:da:d4:cf:2b:50: bb:d5:a8:0e:3a:25:b2:79:d3:e8:cd:c7:cf:57:ae: b7:ab:de:56:5f:2a:b6:f4:cc:ba:03:8f:e7:3c:95: f0:8c:e7:3c:6a:f1:84:87:f7:a9:de:70:c6:63:6e: e7:fd:c7:72:97:d8:02:9a:4f:d5:ce:b7:33:47:cb: e8:f2:c1:24:37:23:2c:f4:f0:08:63:1d:3f:ce:0f: e1:7f:c2:8f:b4:45:f1:eb:67:41:83:a1:3e:69:ac: c6:44:d3:27:5e:81:06:55:ec:db:4b:48:8b:d7:32: 6d:9f:17:95:eb:81:f6:a9:e4:65:af:64:72:1e:f8: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9B:E4:EB:D0:BE:46:29:18:03:3E:B4:1E:E7:D5:75:E8:33:53:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04bfc0e6-752e-3639-aa49-33dda598c7a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.164.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:17:4e:70:82:45:85:67:99:04:63:27:bc:e5:dd:f5:ae:85: 7b:44:d5:c7:34:cf:20:02:e9:69:cf:1b:24:9f:46:35:b9:ec: 96:10:68:6c:9a:8e:b8:f7:b6:5b:c4:44:a9:9c:de:f9:d3:9f: 42:c3:93:07:53:80:88:ca:13:27:7e:54:84:a4:6a:ca:45:e9: 5a:51:20:91:2a:f1:25:7d:80:91:21:75:ae:39:30:70:d3:c0: bf:29:0c:a4:36:54:f0:34:99:b3:ae:12:b4:6b:af:ec:4e:6e: f5:84:e0:15:32:fa:11:cd:28:af:9e:ff:77:1a:d5:26:df:c8: 8f:3b:58:a8:c2:fc:81:b2:1c:e1:dd:15:f3:4e:84:30:db:40: 29:92:5f:51:7f:3b:60:61:dd:c1:43:ff:a9:e9:d6:de:16:97: c7:7d:e7:19:e6:06:89:ae:1e:b5:16:41:0d:41:8e:79:65:45: f7:fe:3d:4d:c2:2b:89:31:82:8a:87:9b:63:d6:89:0b:08:2b: df:a4:58:58:3a:14:c4:64:49:9d:c7:f0:d1:07:78:6b:7a:86: 91:77:e0:38:eb:df:91:5e:63:63:2d:3c:ea:32:8e:0d:52:9d: 55:2e:b7:45:4a:e8:a8:13:28:14:7a:62:d5:38:bb:8b:b8:e9: e9:94:31:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebBuqbrkfVo54aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZWU2NDQxMDEtZDBlNi00ZWY1LTlmZjUtMTgyMmYwZDIzOWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK2r6M4K0NssI92cJ+D9uhNyviprbkf4qt3D kqrLo6uZpu01cRAG+/F/9OJ6/cSzD22W0ZX/Nz9sFBUGPmFIgu0qYwokbtj1Db9B tzyzcHVVT/KR89iQasMG9vGzmNocaz1+odewnmolfNvNIAXJOeUHQZWbo11klMui Zb3E3LYm2tTPK1C71agOOiWyedPozcfPV663q95WXyq29My6A4/nPJXwjOc8avGE h/ep3nDGY27n/cdyl9gCmk/VzrczR8vo8sEkNyMs9PAIYx0/zg/hf8KPtEXx62dB g6E+aazGRNMnXoEGVezbS0iL1zJtnxeV64H2qeRlr2RyHvgsRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+b5OvQvkYpGAM+tB7n1XXoM1MUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDRiZmMwZTYtNzUyZS0z NjM5LWFhNDktMzNkZGE1OThjN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ6TQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoXTnCCRYVnmQRjJ7zl3fWuhXtE1cc0zyAC6WnPGySfRjW57JYQaGya jrj3tlvERKmc3vnTn0LDkwdTgIjKEyd+VISkaspF6VpRIJEq8SV9gJEhda45MHDT wL8pDKQ2VPA0mbOuErRrr+xObvWE4BUy+hHNKK+e/3ca1SbfyI87WKjC/IGyHOHd FfNOhDDbQCmSX1F/O2Bh3cFD/6np1t4Wl8d95xnmBomuHrUWQQ1BjnllRff+PU3C K4kxgoqHm2PWiQsIK9+kWFg6FMRkSZ3H8NEHeGt6hpF34Djr35FeY2MtPOoyjg1S nVUut0VK6KgTKBR6YtU4u4u46emUMX8= -----END CERTIFICATE-----Generated at Mon Apr 7 06:10:28 2025 by rpki-client