$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16cc80f8-6967-3475-a4dd-8597c5814907.roa File: 16cc80f8-6967-3475-a4dd-8597c5814907.roa (raw, json) Hash identifier: cEhD1/SNIUMJ6IJuQKHPiyHiyhx/eVu9gv825SqwhWo= Subject key identifier: 0C:0E:A6:BE:A5:6F:6B:29:7F:B6:1C:0E:99:BA:21:13:BA:E0:70:76 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6B4A24FE2587BDFC5C840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16cc80f8-6967-3475-a4dd-8597c5814907.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 67.168.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:b4:a2:4f:e2:58:7b:df:c5:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=b4300584-814e-4e9e-a0ac-67315313a3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:a0:17:57:51:9b:4b:02:e5:06:47:7b:9b: ad:5f:a8:33:7b:f9:7c:8e:fc:bc:e4:f2:7f:e7:9f: c3:ad:87:09:8f:ea:f1:58:7d:ca:83:23:d9:13:41: 48:65:b2:1e:71:3b:8f:f5:5e:0b:d9:eb:3b:54:5f: 24:89:be:a2:1d:50:7c:79:8b:1a:ed:75:c1:46:1c: 26:d8:c3:fc:95:39:be:b5:33:81:1f:ff:cd:a2:a0: 47:c8:87:fb:38:51:d5:35:5e:03:77:44:bf:77:46: 7f:d8:19:06:3d:ba:1c:52:5c:a1:9d:4b:ea:9b:47: 72:ae:6e:e6:39:50:57:9a:4e:fb:21:0e:da:7d:b6: c0:2c:7b:31:7f:c1:7e:d0:e5:e4:76:2c:2f:e5:54: e1:45:c4:8d:7d:c6:51:54:bb:db:dd:27:b8:bc:61: c1:29:a8:9f:8d:d5:28:0e:cb:71:73:0a:24:7e:08: eb:8e:98:3b:1e:f8:54:45:ce:0a:ee:64:e4:93:fd: 71:3c:9c:88:34:50:a5:a8:f3:59:c1:d4:a0:70:1b: 12:cb:59:a5:29:6b:b7:47:f1:9c:04:79:8e:2e:39: 29:c3:cb:75:6b:e8:dd:81:08:c4:8b:27:16:fe:2b: a4:d9:80:37:9b:77:06:a3:ed:38:9a:7b:78:3e:2a: ad:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0E:A6:BE:A5:6F:6B:29:7F:B6:1C:0E:99:BA:21:13:BA:E0:70:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16cc80f8-6967-3475-a4dd-8597c5814907.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.168.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:92:72:5c:3d:f8:fa:32:26:8e:bc:1c:ce:74:fc:75:69:93: 85:fb:61:ec:20:cf:e3:e3:af:00:23:a6:66:4d:d4:69:48:c7: 6a:95:a3:b9:04:0e:2d:20:a0:1b:77:bd:42:74:37:3b:5c:1e: 6b:92:b6:ad:54:48:1d:9a:8d:91:3d:56:fa:e3:a0:ab:ec:76: cd:f4:3e:56:80:1e:43:65:d4:e9:fd:8a:3b:42:18:86:48:23: ba:f5:36:e9:91:f7:46:7c:44:1a:92:1c:ea:ba:2d:ea:e1:c9: ef:55:68:76:b9:bd:8a:af:a4:74:23:8b:7a:da:71:e8:57:f5: 7d:b6:77:61:88:77:d6:2e:4e:17:d8:1d:88:a2:4a:68:fc:d3: 7a:da:ce:3b:4f:ab:e8:7d:b2:47:52:e9:9b:73:a7:ab:00:08: 4a:f5:92:ba:81:fa:ed:7a:72:2f:da:5d:71:5f:af:98:2f:0c: 63:7b:b6:c0:02:23:b1:ab:f3:57:db:b2:27:db:f6:e6:01:ec: c6:7c:37:12:c4:32:a9:82:2d:b6:8d:03:71:1a:10:70:20:4e: 58:7e:97:21:56:cd:31:93:d4:af:1a:08:50:8a:c5:86:2d:34: 25:b7:8b:b6:ef:4f:59:c5:83:06:cc:8b:53:2d:19:47:2d:e0: 4e:c0:c1:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09rSiT+JYe9/FyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YjQzMDA1ODQtODE0ZS00ZTllLWEwYWMtNjczMTUzMTNhM2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw6gF1dRm0sC5QZHe5utX6gze/l8jvy85PJ/ 55/DrYcJj+rxWH3KgyPZE0FIZbIecTuP9V4L2es7VF8kib6iHVB8eYsa7XXBRhwm 2MP8lTm+tTOBH//NoqBHyIf7OFHVNV4Dd0S/d0Z/2BkGPbocUlyhnUvqm0dyrm7m OVBXmk77IQ7afbbALHsxf8F+0OXkdiwv5VThRcSNfcZRVLvb3Se4vGHBKaifjdUo Dstxcwokfgjrjpg7HvhURc4K7mTkk/1xPJyINFClqPNZwdSgcBsSy1mlKWu3R/Gc BHmOLjkpw8t1a+jdgQjEiycW/iuk2YA3m3cGo+04mnt4PiqtJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwOpr6lb2spf7YcDpm6IRO64HB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTZjYzgwZjgtNjk2Ny0z NDc1LWE0ZGQtODU5N2M1ODE0OTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ6jDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMiSclw9+PoyJo68HM50/HVpk4X7Yewgz+PjrwAjpmZN1GlIx2qVo7kE Di0goBt3vUJ0NztcHmuStq1USB2ajZE9VvrjoKvsds30PlaAHkNl1On9ijtCGIZI I7r1NumR90Z8RBqSHOq6Lerhye9VaHa5vYqvpHQji3racehX9X22d2GId9YuThfY HYiiSmj803razjtPq+h9skdS6Ztzp6sACEr1krqB+u16ci/aXXFfr5gvDGN7tsAC I7Gr81fbsifb9uYB7MZ8NxLEMqmCLbaNA3EaEHAgTlh+lyFWzTGT1K8aCFCKxYYt NCW3i7bvT1nFgwbMi1MtGUct4E7Awfc= -----END CERTIFICATE-----Generated at Mon Apr 7 09:42:58 2025 by rpki-client