$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70aa6e44-e8bf-3d5f-9e04-8805d8b0cef6.roa File: 70aa6e44-e8bf-3d5f-9e04-8805d8b0cef6.roa (raw, json) Hash identifier: rAfsCKFRXAGaGfhb0MKqLDKMh2wspdDjEMCLy/qRzdg= Subject key identifier: 1E:B8:F8:87:18:3F:BE:F3:18:31:6F:D3:5C:5D:DE:1B:B0:A0:27:45 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAEA37E7955B9D458F11680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70aa6e44-e8bf-3d5f-9e04-8805d8b0cef6.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33660 IP address blocks: 67.171.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:a3:7e:79:55:b9:d4:58:f1:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=52ee4a17-de19-4ea4-9a0b-4e30398d7da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:57:3a:ac:ee:e8:24:0a:49:60:e4:e1:95: 9a:b6:b4:51:13:86:5a:24:33:e3:b7:a7:6f:42:bb: d4:b7:79:30:11:f5:2e:11:1a:45:e8:2d:7d:a7:35: 29:e7:e7:a1:1c:92:c7:ad:2a:b6:5b:fe:87:4c:db: 73:14:82:5a:02:fd:df:9b:19:3c:ed:38:67:8c:0a: ae:5f:1d:4e:15:e4:9d:c3:26:90:c3:05:47:6a:7e: 5f:ee:82:46:d3:8d:2f:cd:2d:7e:e5:3a:73:e6:a0: 2e:16:3a:72:5f:37:47:74:ad:bb:97:2f:ac:34:e1: bb:4f:3c:93:77:f5:92:58:d9:1c:58:9c:ca:58:17: e8:1e:c5:e8:77:c4:97:14:7c:2a:64:9c:17:98:fd: f0:23:d4:39:ef:c7:ec:ee:c6:e0:0a:3c:af:61:cd: 5b:2d:77:ba:65:ab:11:87:67:57:80:8d:d8:b3:75: 9f:dd:73:b4:51:98:b0:d0:c0:20:60:0c:98:da:cc: a8:31:14:9f:1e:b0:d7:c2:27:26:15:5d:8f:93:6f: e9:6e:a0:83:d7:76:16:5b:32:bf:a5:cd:21:dd:2f: 5a:0b:8a:cf:7a:c0:47:1d:f6:f7:97:6c:f8:c1:a3: 53:78:29:85:05:62:ad:c9:35:2e:b6:33:95:9a:fe: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B8:F8:87:18:3F:BE:F3:18:31:6F:D3:5C:5D:DE:1B:B0:A0:27:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70aa6e44-e8bf-3d5f-9e04-8805d8b0cef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.171.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:16:d5:1e:6c:7e:80:d2:d7:52:aa:3d:47:d8:9c:1c:05:9c: e3:ec:99:53:29:83:9b:c3:78:49:bb:58:fa:a0:4b:c8:35:1a: 38:c9:34:bb:07:2f:4e:1f:41:c3:17:dd:e9:c7:98:e3:0c:bc: b7:29:a3:8d:e1:91:a5:69:bb:fe:6a:5e:e7:d6:ac:b8:1f:3b: 94:c4:03:7c:42:e4:8f:ce:7c:52:95:bd:5b:2f:e0:cf:cc:0b: d1:01:a7:cd:f3:86:27:47:bd:55:89:91:98:7d:0e:75:cf:96: 03:c3:fc:24:ec:94:ab:19:b7:d5:05:ee:b1:68:16:29:c6:be: 19:7f:59:13:7f:23:f7:71:c1:ff:62:55:5e:f4:95:c1:79:c8: e6:33:e6:11:dd:de:8d:61:a8:e3:15:17:dc:33:63:90:35:c6: 1e:52:13:ad:b5:d6:2b:df:6b:40:ea:68:f3:c7:65:64:c9:d0: 74:5e:a7:fd:89:96:7c:a8:37:a4:7b:5d:d0:c8:a8:2a:00:f7: c2:69:58:2b:0d:5f:1e:8d:18:71:4a:c4:14:0f:84:61:83:ac: 57:9a:38:b8:14:b7:70:1d:56:3d:7b:9c:89:08:cc:9c:55:ce: 6b:e3:bb:c6:8d:f0:28:7f:0b:59:c2:09:a4:18:e8:4a:b5:eb: 3b:84:cd:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrqN+eVW51FjxFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NTJlZTRhMTctZGUxOS00ZWE0LTlhMGItNGUzMDM5OGQ3ZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq9XOqzu6CQKSWDk4ZWatrRRE4ZaJDPjt6dv QrvUt3kwEfUuERpF6C19pzUp5+ehHJLHrSq2W/6HTNtzFIJaAv3fmxk87ThnjAqu Xx1OFeSdwyaQwwVHan5f7oJG040vzS1+5Tpz5qAuFjpyXzdHdK27ly+sNOG7TzyT d/WSWNkcWJzKWBfoHsXod8SXFHwqZJwXmP3wI9Q578fs7sbgCjyvYc1bLXe6ZasR h2dXgI3Ys3Wf3XO0UZiw0MAgYAyY2syoMRSfHrDXwicmFV2Pk2/pbqCD13YWWzK/ pc0h3S9aC4rPesBHHfb3l2z4waNTeCmFBWKtyTUutjOVmv42UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB64+IcYP77zGDFv01xd3huwoCdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzBhYTZlNDQtZThiZi0z ZDVmLTllMDQtODgwNWQ4YjBjZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6t8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8W1R5sfoDS11KqPUfYnBwFnOPsmVMpg5vDeEm7WPqgS8g1GjjJNLsH L04fQcMX3enHmOMMvLcpo43hkaVpu/5qXufWrLgfO5TEA3xC5I/OfFKVvVsv4M/M C9EBp83zhidHvVWJkZh9DnXPlgPD/CTslKsZt9UF7rFoFinGvhl/WRN/I/dxwf9i VV70lcF5yOYz5hHd3o1hqOMVF9wzY5A1xh5SE6211ivfa0DqaPPHZWTJ0HRep/2J lnyoN6R7XdDIqCoA98JpWCsNXx6NGHFKxBQPhGGDrFeaOLgUt3AdVj17nIkIzJxV zmvju8aN8Ch/C1nCCaQY6Eq16zuEzT0= -----END CERTIFICATE-----Generated at Mon Apr 7 06:21:45 2025 by rpki-client