$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fa51b91-0fe3-353c-b816-5c07a5f59c70.roa File: 1fa51b91-0fe3-353c-b816-5c07a5f59c70.roa (raw, json) Hash identifier: yZG7i7OyJVM8V0MV5djVmlJn3ZVcFFFTBsk+DqCJV2c= Subject key identifier: 67:79:13:E1:8D:38:E6:8B:9A:19:18:65:32:30:07:10:28:00:AC:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFE502CA44CA1273514F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fa51b91-0fe3-353c-b816-5c07a5f59c70.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 67.161.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:e5:02:ca:44:ca:12:73:51:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=8339a649-36fb-46fd-b29b-bfbf33d0677e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:52:84:71:84:3f:35:3a:8b:22:2a:0b:75:74: 06:b9:6f:eb:6a:f4:87:17:44:95:28:af:81:f8:7a: cc:1d:47:cd:30:eb:94:83:83:10:a7:6e:4f:a3:f8: 57:1e:8d:e1:ed:50:8d:e2:35:17:43:49:72:e7:9f: 29:4a:22:aa:91:13:97:bc:21:3d:47:74:5f:cf:6c: a1:9b:ed:08:fa:42:0a:a0:2a:6e:d4:4a:64:a2:51: 37:83:08:d1:1e:5c:51:43:a5:88:38:7b:ec:2e:9e: 79:33:46:09:71:d1:5a:ce:65:2b:fc:41:13:77:02: 0d:e6:a6:6f:d0:7a:13:d0:f7:fc:36:61:0e:41:c2: 64:4a:15:13:3e:fd:ba:c1:f2:e6:e8:53:ef:46:c4: 2b:fd:b8:d7:e4:86:09:65:8b:3b:c5:79:1a:e4:23: c9:07:ad:a3:43:aa:2f:da:0f:26:ed:eb:8b:16:02: 30:5e:f8:84:4c:79:d2:65:cf:b2:56:dd:09:75:69: df:cd:37:7b:b0:aa:00:88:3d:95:f7:ae:05:de:18: 0a:53:4a:8a:f3:70:3b:82:a4:6d:80:92:5d:c2:58: 14:df:7d:1e:90:55:aa:7e:d1:86:69:92:a6:4c:e9: 05:cc:54:ec:d9:2d:e1:e6:06:b8:f1:7d:58:9f:3b: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:79:13:E1:8D:38:E6:8B:9A:19:18:65:32:30:07:10:28:00:AC:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1fa51b91-0fe3-353c-b816-5c07a5f59c70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.161.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5a:c1:6f:1d:91:b9:08:ee:00:e5:87:24:7f:8e:e0:22:a4: 7f:ed:fe:ee:cf:cc:bd:4e:4a:0f:d1:d1:88:54:ad:09:c7:03: 6b:55:43:88:db:f3:c6:49:c0:bd:0d:43:d9:b7:85:70:a8:05: 5d:f9:6a:90:cc:05:f4:f9:6c:62:5a:8d:11:24:27:9a:56:48: 06:4c:b2:d6:82:57:fb:63:ba:90:1f:db:4e:5d:ff:9c:78:bc: ec:e5:e3:45:ba:a7:75:82:83:9a:ce:6d:e4:d4:35:0f:ea:07: cb:69:95:08:d3:18:05:18:14:cf:64:63:a0:49:be:c4:15:44: 40:74:68:4c:d9:9e:4b:c7:a0:c1:30:1d:1d:64:d0:3b:f0:eb: 57:9d:56:1b:fd:06:c7:13:01:a1:18:b4:12:43:fd:02:32:a8: 49:6d:c1:0d:01:a6:ae:0b:87:8d:41:e3:4b:b7:7f:4b:8a:39: 2a:2d:2b:fb:02:ba:53:6c:69:1d:40:b5:d2:16:47:f2:f1:2a: 13:eb:2c:35:f4:20:3e:76:02:f9:f6:72:15:7a:f7:20:0f:38: c9:f8:5b:1c:ea:2c:7c:35:82:5a:1c:88:9d:8a:49:76:e5:65: e7:06:a6:07:b2:e1:a8:ca:37:0d:10:34:ad:bb:32:f3:19:95: 46:c6:4a:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr+UCykTKEnNRT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODMzOWE2NDktMzZmYi00NmZkLWIyOWItYmZiZjMzZDA2NzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1KEcYQ/NTqLIioLdXQGuW/ravSHF0SVKK+B +HrMHUfNMOuUg4MQp25Po/hXHo3h7VCN4jUXQ0ly558pSiKqkROXvCE9R3Rfz2yh m+0I+kIKoCpu1EpkolE3gwjRHlxRQ6WIOHvsLp55M0YJcdFazmUr/EETdwIN5qZv 0HoT0Pf8NmEOQcJkShUTPv26wfLm6FPvRsQr/bjX5IYJZYs7xXka5CPJB62jQ6ov 2g8m7euLFgIwXviETHnSZc+yVt0JdWnfzTd7sKoAiD2V964F3hgKU0qK83A7gqRt gJJdwlgU330ekFWqftGGaZKmTOkFzFTs2S3h5ga48X1Ynzv0hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd5E+GNOOaLmhkYZTIwBxAoAKwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWZhNTFiOTEtMGZlMy0z NTNjLWI4MTYtNWMwN2E1ZjU5YzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6EEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9awW8dkbkI7gDlhyR/juAipH/t/u7PzL1OSg/R0YhUrQnHA2tVQ4jb 88ZJwL0NQ9m3hXCoBV35apDMBfT5bGJajREkJ5pWSAZMstaCV/tjupAf205d/5x4 vOzl40W6p3WCg5rObeTUNQ/qB8tplQjTGAUYFM9kY6BJvsQVREB0aEzZnkvHoMEw HR1k0Dvw61edVhv9BscTAaEYtBJD/QIyqEltwQ0Bpq4Lh41B40u3f0uKOSotK/sC ulNsaR1AtdIWR/LxKhPrLDX0ID52Avn2chV69yAPOMn4WxzqLHw1glociJ2KSXbl ZecGpgey4ajKNw0QNK27MvMZlUbGSsE= -----END CERTIFICATE-----Generated at Mon Apr 7 06:31:18 2025 by rpki-client