$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/488e3454-6631-34b2-add6-fb98d1f5d98e.roa File: 488e3454-6631-34b2-add6-fb98d1f5d98e.roa (raw, json) Hash identifier: HOUf8C5hmuRnobjt+mTGHwstE9C+EV6PuK2pGkQDJpc= Subject key identifier: 36:9C:00:14:05:BA:86:BE:F0:57:84:F0:16:12:19:55:AB:BD:8F:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C6FB6F1326F5FFAFC9D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/488e3454-6631-34b2-add6-fb98d1f5d98e.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 67.174.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:6f:b6:f1:32:6f:5f:fa:fc:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f8b8f749-2840-4809-a964-00794e1fb102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bd:d4:ca:e3:21:85:e2:69:3f:06:61:f8:80: bf:8d:79:46:14:33:13:ed:e0:95:5b:b0:c2:b7:53: 7d:8a:06:61:69:68:f3:44:85:34:9e:bb:0f:df:15: 56:40:4f:84:76:86:94:ec:f1:e2:90:12:58:b1:63: ae:c0:07:74:c3:58:bc:fb:1b:10:94:f1:2b:f6:cf: 92:51:f1:fc:76:40:f6:16:43:0d:4d:54:97:9d:46: b9:90:cc:1e:65:58:0d:9a:60:7f:8f:1e:a1:71:08: 19:01:c4:8a:31:f8:44:f3:44:b2:5c:d1:2a:02:a2: 4f:67:30:52:93:ab:32:ae:88:6b:94:07:47:86:ce: 23:dc:d0:e4:ed:fd:dc:7d:b2:4b:bd:b6:a8:30:6b: d8:47:5e:43:74:ed:dd:d5:55:fd:a1:c0:d9:70:3f: a9:c9:b5:0b:ba:6c:ce:5e:3f:30:22:76:15:46:17: eb:12:a4:d3:1a:d8:fa:8a:b3:48:c3:94:9b:7f:09: 39:52:0a:44:28:f8:75:6e:6e:62:24:c6:af:be:c1: 4c:96:49:f2:30:a6:bd:38:d6:5e:08:9e:9e:24:72: f4:4e:6d:42:b1:67:ce:77:ce:a2:fe:28:5b:c5:f7: f9:e0:ae:94:13:59:2f:7d:d7:f8:6c:bf:55:bf:5b: 2b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9C:00:14:05:BA:86:BE:F0:57:84:F0:16:12:19:55:AB:BD:8F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/488e3454-6631-34b2-add6-fb98d1f5d98e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.174.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:43:a8:e8:b1:07:c4:17:bb:fa:25:7b:67:f9:b4:9c:08:dc: 6a:0d:79:5d:8e:b9:7e:fc:29:d1:a1:2c:46:4d:f1:61:8c:a8: 3b:a4:87:43:9c:bb:53:47:5e:96:10:be:1b:ac:ba:75:36:eb: 65:96:e6:b3:93:67:32:89:86:84:40:a6:46:a2:7a:73:d2:b7: bc:2d:77:d4:f1:49:84:05:24:4b:48:e6:7b:b1:c4:fe:29:80: e3:0c:43:68:a5:68:3f:1d:5f:66:ee:d0:18:03:38:53:69:98: 92:f2:3c:bd:d6:04:f1:84:c3:30:20:13:2b:44:96:92:49:d6: dc:70:38:da:95:36:af:e1:f7:47:19:2f:88:74:90:94:01:fe: 78:3d:94:47:08:2b:35:08:cf:79:04:e8:35:f6:41:9a:51:eb: 4a:38:b6:7b:76:da:43:94:91:41:52:ea:5b:b4:02:28:cb:8c: a9:d5:22:3d:05:24:19:33:57:63:55:2b:a1:ff:39:c2:4a:d8: e7:c0:b4:3e:b0:77:ec:d1:9a:a6:14:18:d0:82:bb:f2:3d:02: 6b:6b:29:97:b4:40:20:19:21:31:6d:a5:bb:b1:e5:a1:7b:0b: a8:83:8d:08:8e:cf:b6:37:96:b2:fc:c8:8d:89:f7:28:80:ca: b4:ef:7c:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebG+28TJvX/r8nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjhiOGY3NDktMjg0MC00ODA5LWE5NjQtMDA3OTRlMWZiMTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL3UyuMhheJpPwZh+IC/jXlGFDMT7eCVW7DC t1N9igZhaWjzRIU0nrsP3xVWQE+EdoaU7PHikBJYsWOuwAd0w1i8+xsQlPEr9s+S UfH8dkD2FkMNTVSXnUa5kMweZVgNmmB/jx6hcQgZAcSKMfhE80SyXNEqAqJPZzBS k6syrohrlAdHhs4j3NDk7f3cfbJLvbaoMGvYR15DdO3d1VX9ocDZcD+pybULumzO Xj8wInYVRhfrEqTTGtj6irNIw5Sbfwk5UgpEKPh1bm5iJMavvsFMlknyMKa9ONZe CJ6eJHL0Tm1CsWfOd86i/ihbxff54K6UE1kvfdf4bL9Vv1srawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDacABQFuoa+8FeE8BYSGVWrvY8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDg4ZTM0NTQtNjYzMS0z NGIyLWFkZDYtZmI5OGQxZjVkOThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ66AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtDqOixB8QXu/ole2f5tJwI3GoNeV2OuX78KdGhLEZN8WGMqDukh0Oc u1NHXpYQvhusunU262WW5rOTZzKJhoRApkaienPSt7wtd9TxSYQFJEtI5nuxxP4p gOMMQ2ilaD8dX2bu0BgDOFNpmJLyPL3WBPGEwzAgEytElpJJ1txwONqVNq/h90cZ L4h0kJQB/ng9lEcIKzUIz3kE6DX2QZpR60o4tnt22kOUkUFS6lu0AijLjKnVIj0F JBkzV2NVK6H/OcJK2OfAtD6wd+zRmqYUGNCCu/I9AmtrKZe0QCAZITFtpbux5aF7 C6iDjQiOz7Y3lrL8yI2J9yiAyrTvfEs= -----END CERTIFICATE-----Generated at Sun Apr 6 19:13:01 2025 by rpki-client