$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09d4a220-797d-387c-a7ee-76c38f85951b.roa File: 09d4a220-797d-387c-a7ee-76c38f85951b.roa (raw, json) Hash identifier: mPu1zbyokQAMQzY5BCXetqBc8A+EXVUMo2cfVrRO7uQ= Subject key identifier: D7:5B:52:B7:E9:6A:59:67:DC:B9:54:8E:3B:6C:B6:DC:0F:A7:42:DF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF396CE4D5986A4572F480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09d4a220-797d-387c-a7ee-76c38f85951b.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 67.165.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:39:6c:e4:d5:98:6a:45:72:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=40cfeccf-cc41-4d1c-b6ef-55cca4f411e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:82:36:99:6f:be:c0:85:b9:67:9d:7d:15:d2: c2:3b:e3:7d:d7:88:ba:6f:23:ae:a0:ad:54:b1:2c: 94:5f:c8:71:1c:fb:a0:ce:ea:e6:41:51:9e:88:af: 98:56:28:f2:48:db:fb:b4:dd:ac:86:44:59:80:53: 4b:79:68:5a:8e:95:e3:e2:99:90:99:7d:b7:93:9a: 25:ed:b1:b8:0a:22:44:c9:51:3a:f3:93:1e:a0:e1: ba:d1:17:21:7d:a1:fd:71:f4:d2:78:60:bd:e5:c4: 9a:c6:8c:7e:42:34:13:74:5a:0e:74:62:b8:68:ff: a9:33:ea:50:42:71:32:ba:c7:54:2e:f0:ef:8c:a6: eb:e0:cc:fc:31:58:c4:ba:08:c4:74:43:3f:1c:7d: 36:62:48:de:09:fe:c4:e4:86:ba:16:49:01:7d:a9: e1:69:1f:b5:c8:cc:3c:7a:c8:58:c8:93:1f:70:dd: 0d:c4:11:66:e5:8f:c0:7f:c9:f9:11:22:c9:74:58: c5:bd:a2:e9:43:75:df:f3:3b:6b:b5:83:43:3c:0f: ba:fe:53:02:6e:39:e7:88:38:c1:04:f2:72:81:f9: 71:3a:48:27:ed:47:a8:40:dd:ff:d4:f8:33:a0:00: e9:86:24:f9:90:4d:07:83:62:b3:0c:2f:1f:c6:08: e8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5B:52:B7:E9:6A:59:67:DC:B9:54:8E:3B:6C:B6:DC:0F:A7:42:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09d4a220-797d-387c-a7ee-76c38f85951b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.165.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:eb:d3:6e:38:55:c7:97:48:6c:4a:07:49:4e:41:4a:87:2a: b7:0a:54:43:de:a4:33:6c:66:61:11:22:5d:ff:ff:bb:7d:14: 04:c1:2d:f1:af:bc:ea:f3:f8:5a:98:87:74:22:a2:9d:45:54: 6e:02:d0:a5:87:94:42:21:c6:76:ea:b2:f4:1c:d2:0e:df:50: ed:9e:72:f3:04:33:b1:4a:f5:19:c5:79:a0:c5:ca:29:18:47: 76:0f:ab:24:a4:9b:ad:1d:51:3d:6b:9f:a3:5f:29:72:4f:0c: 6b:d6:52:5c:2a:25:9c:95:a6:7f:10:5b:ae:9a:88:cb:2c:77: 02:18:31:9d:54:61:06:3e:b5:d6:42:76:de:ba:2d:26:4b:87: 78:f3:ca:96:73:ab:3c:61:26:fc:97:b1:03:a7:9d:1f:85:c9: 11:91:bd:08:85:3a:ef:c7:08:e1:f6:9b:19:b1:51:2c:ec:a2: 3f:bf:bf:d3:c6:22:7a:a6:99:70:d2:e9:d9:64:cd:6d:d3:a5: 7f:c1:55:08:fa:ea:2b:19:fd:86:7c:35:65:b5:56:13:c3:2c: 19:39:a3:09:fe:5a:b2:a7:c6:a3:54:65:01:66:5a:f2:cd:b0: e6:20:27:a0:b7:6f:99:40:74:83:12:43:53:e5:dc:cd:72:7a: 83:47:6c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrzls5NWYakVy9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NDBjZmVjY2YtY2M0MS00ZDFjLWI2ZWYtNTVjY2E0ZjQxMWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtII2mW++wIW5Z519FdLCO+N914i6byOuoK1U sSyUX8hxHPugzurmQVGeiK+YVijySNv7tN2shkRZgFNLeWhajpXj4pmQmX23k5ol 7bG4CiJEyVE685MeoOG60RchfaH9cfTSeGC95cSaxox+QjQTdFoOdGK4aP+pM+pQ QnEyusdULvDvjKbr4Mz8MVjEugjEdEM/HH02YkjeCf7E5Ia6FkkBfanhaR+1yMw8 eshYyJMfcN0NxBFm5Y/Af8n5ESLJdFjFvaLpQ3Xf8ztrtYNDPA+6/lMCbjnniDjB BPJygflxOkgn7UeoQN3/1PgzoADphiT5kE0Hg2KzDC8fxgjotQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdbUrfpalln3LlUjjtsttwPp0LfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDlkNGEyMjAtNzk3ZC0z ODdjLWE3ZWUtNzZjMzhmODU5NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ6WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN3r0244VceXSGxKB0lOQUqHKrcKVEPepDNsZmERIl3//7t9FATBLfGv vOrz+FqYh3Qiop1FVG4C0KWHlEIhxnbqsvQc0g7fUO2ecvMEM7FK9RnFeaDFyikY R3YPqySkm60dUT1rn6NfKXJPDGvWUlwqJZyVpn8QW66aiMssdwIYMZ1UYQY+tdZC dt66LSZLh3jzypZzqzxhJvyXsQOnnR+FyRGRvQiFOu/HCOH2mxmxUSzsoj+/v9PG InqmmXDS6dlkzW3TpX/BVQj66isZ/YZ8NWW1VhPDLBk5own+WrKnxqNUZQFmWvLN sOYgJ6C3b5lAdIMSQ1Pl3M1yeoNHbAA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:00:36 2025 by rpki-client