$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63bb5d7d-de3e-3cd6-9872-2d69429d5e7e.roa File: 63bb5d7d-de3e-3cd6-9872-2d69429d5e7e.roa (raw, json) Hash identifier: 2+5i5iiorcxOZCz1DcwxDUWk55xm6XKIcUhsWwct1w0= Subject key identifier: B7:9A:13:C0:5B:39:B6:A8:78:59:8A:0A:BE:72:89:B4:3A:49:3D:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB177326D85C35CE25A8280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63bb5d7d-de3e-3cd6-9872-2d69429d5e7e.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 67.161.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:77:32:6d:85:c3:5c:e2:5a:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=4fbb5bee-f6c2-4701-b1f1-2970a50e328c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:36:35:c8:75:88:6d:e3:29:4f:ca:48:41:d4: 3f:c6:64:ae:30:6b:73:93:28:b5:7c:cb:9f:fb:63: 01:1b:91:96:35:50:31:a1:3a:97:ec:c9:6e:a7:44: b9:28:02:6e:df:0c:81:9c:6c:95:f6:05:a3:3c:1d: 52:1f:8d:43:5e:d9:33:67:c9:3d:1c:2c:a1:41:e0: 8c:09:73:8e:3e:97:e9:bd:17:be:a5:d8:bc:d2:30: 87:8b:3a:77:72:b0:93:5e:88:b2:ad:49:af:bc:ec: e9:6f:f3:04:16:9a:ff:ba:85:c0:8d:dd:25:13:23: 0b:1d:b5:55:3e:18:f8:4a:88:84:64:69:41:11:ef: e2:69:bb:8a:a8:3c:ec:a1:0d:22:a2:86:df:f5:fe: 28:1e:90:fb:59:6d:f3:03:f4:f7:83:72:51:50:76: 9b:0f:89:3b:f1:11:91:85:0b:a1:24:ba:3b:14:3b: 61:4c:c8:96:ab:e7:87:e1:da:19:a0:e7:3a:89:ad: 38:43:3c:71:c0:41:d8:d5:21:28:dd:1f:4e:a1:a0: ac:24:59:d6:48:2c:24:51:b0:13:e6:bd:db:c8:a3: 09:9e:20:4c:b2:37:4b:f8:ee:6b:c3:18:c3:0e:b7: 2a:13:0f:e6:8b:81:96:93:48:c6:84:e2:ce:15:64: 68:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9A:13:C0:5B:39:B6:A8:78:59:8A:0A:BE:72:89:B4:3A:49:3D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63bb5d7d-de3e-3cd6-9872-2d69429d5e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.161.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:49:f7:1d:04:85:f1:15:cd:9c:be:6d:aa:86:5b:ae:90:be: f5:4d:d1:33:5d:9f:64:cd:ce:7e:b4:14:08:45:8e:9e:24:d6: 4d:a5:c9:84:6e:49:73:37:cc:08:1c:a3:91:3c:ef:6c:02:e2: 52:12:70:09:ee:dd:33:83:8a:00:38:1c:b2:b4:a5:51:3b:e9: 58:8c:55:4c:16:dc:8d:b9:b8:20:11:78:5d:48:82:16:cc:af: b1:fb:cf:56:e3:00:9a:50:49:db:59:db:53:3d:34:59:ea:c7: 8e:dc:ff:fb:d9:96:37:a1:af:02:dd:07:55:58:54:d3:9d:2e: fa:fb:12:83:c4:b6:c8:e3:1e:d9:c3:30:65:bc:30:46:a6:23: 9b:68:7d:88:4c:47:fd:ec:c0:a3:31:6b:91:b4:b1:c0:f5:2f: 8b:a0:b3:65:1c:78:cc:00:a5:62:9e:48:8d:ed:43:20:3d:e1: 92:05:90:d4:e8:f8:da:62:a7:22:50:c7:1d:56:3c:57:dc:0d: 1d:6f:c1:b5:fe:c8:df:1c:a2:a8:e0:00:fa:2c:78:c0:37:25: c9:f0:8d:a8:0c:4a:58:66:65:7b:8a:63:e3:5a:3d:88:b3:f0: 15:23:06:d9:ba:39:34:50:90:aa:ad:6c:7f:89:5f:2d:69:61: 98:67:ed:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssXcybYXDXOJagoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NGZiYjViZWUtZjZjMi00NzAxLWIxZjEtMjk3MGE1MGUzMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDY1yHWIbeMpT8pIQdQ/xmSuMGtzkyi1fMuf +2MBG5GWNVAxoTqX7Mlup0S5KAJu3wyBnGyV9gWjPB1SH41DXtkzZ8k9HCyhQeCM CXOOPpfpvRe+pdi80jCHizp3crCTXoiyrUmvvOzpb/MEFpr/uoXAjd0lEyMLHbVV Phj4SoiEZGlBEe/iabuKqDzsoQ0ioobf9f4oHpD7WW3zA/T3g3JRUHabD4k78RGR hQuhJLo7FDthTMiWq+eH4doZoOc6ia04QzxxwEHY1SEo3R9OoaCsJFnWSCwkUbAT 5r3byKMJniBMsjdL+O5rwxjDDrcqEw/mi4GWk0jGhOLOFWRofQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeaE8BbObaoeFmKCr5yibQ6ST3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjNiYjVkN2QtZGUzZS0z Y2Q2LTk4NzItMmQ2OTQyOWQ1ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6EIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpJ9x0EhfEVzZy+baqGW66QvvVN0TNdn2TNzn60FAhFjp4k1k2lyYRu SXM3zAgco5E872wC4lIScAnu3TODigA4HLK0pVE76ViMVUwW3I25uCAReF1IghbM r7H7z1bjAJpQSdtZ21M9NFnqx47c//vZljehrwLdB1VYVNOdLvr7EoPEtsjjHtnD MGW8MEamI5tofYhMR/3swKMxa5G0scD1L4ugs2UceMwApWKeSI3tQyA94ZIFkNTo +NpipyJQxx1WPFfcDR1vwbX+yN8coqjgAPoseMA3JcnwjagMSlhmZXuKY+NaPYiz 8BUjBtm6OTRQkKqtbH+JXy1pYZhn7fU= -----END CERTIFICATE-----Generated at Mon Apr 7 05:58:31 2025 by rpki-client