$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eba1f98-83eb-3a8d-8ec5-54f0b9a84ef6.roa File: 1eba1f98-83eb-3a8d-8ec5-54f0b9a84ef6.roa (raw, json) Hash identifier: eWBCSO+0v5s+pXNsp9ElQ49cKF91u4/T9J3m1aJsAT4= Subject key identifier: F5:6C:3E:66:7C:4F:97:EF:47:B0:B6:0D:96:98:5F:D9:15:40:90:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6B5F638FDE4C673633500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eba1f98-83eb-3a8d-8ec5-54f0b9a84ef6.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 67.170.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:b5:f6:38:fd:e4:c6:73:63:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=f121b69c-0648-47e9-b55d-7bc2f3fb7522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:26:56:43:9d:02:bb:dc:a4:7b:2f:43:ff:2f: 24:49:3d:25:39:74:33:da:98:31:10:93:3b:7e:64: 43:3b:95:ae:00:30:5d:d0:7a:5f:f5:1f:24:33:d5: a9:89:d0:62:76:3e:67:ca:bb:5c:15:d2:22:be:76: 58:a4:25:6e:fc:98:01:bd:87:ad:20:6e:2f:bb:de: fa:c0:26:c6:56:b4:59:88:82:36:1c:2b:3c:16:73: 0f:51:7e:49:6c:ba:b1:51:da:b8:f4:13:12:d9:9e: 56:90:65:4c:8b:81:ce:cd:a2:fc:21:32:7b:2b:8d: f0:4e:09:fd:4d:fe:c2:79:e9:3f:88:4f:2f:ef:6c: b3:f7:5c:16:ad:19:45:cb:a0:16:20:da:ea:66:24: c4:5d:64:e2:2a:83:19:eb:a2:64:35:13:09:a1:78: 06:88:4b:76:ff:9d:8a:08:25:d2:12:1c:06:b0:f8: b7:3c:8b:79:1a:68:30:b8:81:7e:7f:3b:c7:92:a7: 54:40:3b:c4:0f:97:80:67:dd:0a:09:3b:7f:ff:b0: c2:52:3a:52:4f:a9:5d:1b:c1:b5:db:25:20:c1:43: db:de:c4:45:36:0c:f1:16:bc:69:55:03:d5:54:d0: 9e:2d:b3:0d:7b:86:09:d8:ca:e7:de:6e:e6:33:a9: dd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6C:3E:66:7C:4F:97:EF:47:B0:B6:0D:96:98:5F:D9:15:40:90:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1eba1f98-83eb-3a8d-8ec5-54f0b9a84ef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e3:bd:f6:7d:59:92:85:e2:a4:a0:fc:ef:49:d0:c7:1f:52: 31:09:56:67:d1:b5:7f:1a:4f:d5:38:35:82:48:fb:8f:97:f7: 72:39:c2:e3:38:42:1c:3e:85:f3:b8:bc:8b:36:28:92:72:85: f4:b5:40:8f:6b:45:42:53:4c:f7:da:e5:72:40:1b:11:c3:fb: 25:44:41:56:2a:24:99:aa:f5:51:2a:a2:70:b6:8a:5f:86:11: 88:a8:08:2b:c2:12:de:ff:6f:55:81:6c:05:63:96:ca:a8:b6: 8a:96:24:1d:f7:8a:97:a7:fd:68:45:5c:d7:6a:bc:fd:3f:ed: 33:b5:a8:51:ea:1b:c5:73:7c:68:b2:ba:5a:aa:cf:25:4c:90: 76:10:2f:8f:b3:87:60:37:1e:0c:64:36:9c:f7:05:90:dd:fc: a7:3f:64:0a:a6:c6:5d:e4:90:38:0a:43:64:2e:c1:25:04:19: 41:94:55:b6:f6:81:78:2a:87:b3:a7:68:b2:27:3b:9b:d6:e3: 7a:f6:3c:aa:71:da:ca:4f:5d:25:b0:cc:1f:e5:0a:a3:9a:52: 6f:60:1e:78:54:4b:33:68:b9:fd:15:67:4a:c3:1f:19:d4:62: 33:61:fe:56:bb:e1:7b:1a:70:ff:ca:ab:c6:49:80:2f:30:96: d5:0a:4c:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09rX2OP3kxnNjNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZjEyMWI2OWMtMDY0OC00N2U5LWI1NWQtN2JjMmYzZmI3NTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSZWQ50Cu9ykey9D/y8kST0lOXQz2pgxEJM7 fmRDO5WuADBd0Hpf9R8kM9WpidBidj5nyrtcFdIivnZYpCVu/JgBvYetIG4vu976 wCbGVrRZiII2HCs8FnMPUX5JbLqxUdq49BMS2Z5WkGVMi4HOzaL8ITJ7K43wTgn9 Tf7Ceek/iE8v72yz91wWrRlFy6AWINrqZiTEXWTiKoMZ66JkNRMJoXgGiEt2/52K CCXSEhwGsPi3PIt5GmgwuIF+fzvHkqdUQDvED5eAZ90KCTt//7DCUjpST6ldG8G1 2yUgwUPb3sRFNgzxFrxpVQPVVNCeLbMNe4YJ2Mrn3m7mM6ndLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVsPmZ8T5fvR7C2DZaYX9kVQJCHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWViYTFmOTgtODNlYi0z YThkLThlYzUtNTRmMGI5YTg0ZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ6qIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7jvfZ9WZKF4qSg/O9J0McfUjEJVmfRtX8aT9U4NYJI+4+X93I5wuM4 Qhw+hfO4vIs2KJJyhfS1QI9rRUJTTPfa5XJAGxHD+yVEQVYqJJmq9VEqonC2il+G EYioCCvCEt7/b1WBbAVjlsqotoqWJB33ipen/WhFXNdqvP0/7TO1qFHqG8VzfGiy ulqqzyVMkHYQL4+zh2A3HgxkNpz3BZDd/Kc/ZAqmxl3kkDgKQ2QuwSUEGUGUVbb2 gXgqh7OnaLInO5vW43r2PKpx2spPXSWwzB/lCqOaUm9gHnhUSzNouf0VZ0rDHxnU YjNh/la74XsacP/Kq8ZJgC8wltUKTCc= -----END CERTIFICATE-----Generated at Mon Apr 7 06:04:19 2025 by rpki-client