$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/843402b1-8e31-3bfc-9601-71684368f1a1.roa File: 843402b1-8e31-3bfc-9601-71684368f1a1.roa (raw, json) Hash identifier: Wrsst0sc0xKebysk4Wh1YYniyjsxjT+BsjgCdF6tnSI= Subject key identifier: 95:73:68:B4:0E:DD:A3:66:9C:56:75:D4:3A:81:AA:AD:F2:BC:1A:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF3E3009AA7E98BD491630 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/843402b1-8e31-3bfc-9601-71684368f1a1.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 67.176.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:3e:30:09:aa:7e:98:bd:49:16:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=03107b19-ea45-4262-9bd1-3ff200c7e677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:da:ba:09:f8:15:33:ca:f0:13:63:07:f7:14: 02:9c:ca:00:d8:92:f6:51:1c:2d:51:a1:ce:c4:3d: 26:a6:20:e9:da:8f:7b:b2:0c:6b:57:18:26:e4:35: 1c:7e:76:3d:27:f4:22:e5:07:2a:dc:7b:62:da:a2: 74:d7:7b:f3:d5:f6:2e:ce:e3:8d:c7:62:fb:1c:3d: bd:30:5b:58:24:16:ed:bc:3c:ad:78:00:a1:7d:64: fb:2e:ac:34:49:f3:51:71:ba:0f:d8:03:3c:0a:21: e6:65:3f:26:34:5c:2a:84:a9:8a:a9:bb:55:b1:f1: 86:a7:c8:c5:eb:e1:79:fa:5a:7c:58:4f:06:1b:9b: 46:86:b9:d7:eb:26:82:0a:62:ac:12:b3:e0:2e:c0: 53:fd:15:d7:f8:9e:fa:d6:30:69:6c:c1:4f:c5:ae: 31:d1:7c:aa:a0:53:ce:d3:b2:b3:79:bc:da:0a:09: f7:e3:39:a6:83:0c:b0:c4:42:7c:4b:99:3e:33:f2: 93:eb:e8:dd:21:8c:7a:6e:a6:b9:9b:5e:d9:eb:89: ec:69:d5:9c:1a:a4:fe:78:31:8e:a7:0b:6b:92:bb: 28:80:b7:bf:20:b6:52:2a:5a:a5:9b:3b:29:da:29: 90:98:eb:c4:11:67:fe:00:1b:4f:c8:c9:a1:16:b4: 09:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:73:68:B4:0E:DD:A3:66:9C:56:75:D4:3A:81:AA:AD:F2:BC:1A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/843402b1-8e31-3bfc-9601-71684368f1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.176.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:c5:74:14:e2:8a:a9:19:b6:1b:08:a4:2d:94:d3:0f:78:64: 3f:f8:ef:fe:ad:e8:5b:ca:86:7f:74:30:b2:f3:96:a9:9c:d9: 07:9d:d0:fc:ce:5d:aa:32:42:80:b5:35:19:d6:e7:92:0a:21: 0f:55:b9:1e:0b:41:5a:80:3c:db:76:91:2a:27:ef:fa:b8:d1: da:0f:3b:b7:24:53:58:c3:0e:7a:a5:2d:c6:a6:73:e5:70:d1: 1e:85:83:ff:b4:e2:d1:ed:e0:c4:b4:80:e3:a1:3f:55:e8:01: 45:10:28:b4:3d:53:62:8c:98:eb:b8:96:ec:c3:a1:3f:72:fb: 1c:cc:28:b4:ba:9d:e0:f9:a8:cd:c5:7d:70:10:66:2b:07:e9: 64:ad:90:37:38:81:9a:de:c2:21:e2:31:1e:3a:c1:ef:74:09: 38:c5:9b:8d:50:70:32:56:18:06:c7:dd:87:c2:90:d3:ca:94: 56:95:28:d1:c1:16:77:af:57:c8:57:8f:c2:3d:84:26:86:5f: bb:2b:a9:08:a8:b0:f2:19:69:e5:ba:f4:0d:e2:56:7c:4f:1d: fd:26:31:1c:2b:c4:d8:96:7c:b9:00:3c:02:3c:58:0e:53:d0: df:4c:b6:11:28:e7:ee:2d:5f:ad:00:ad:b5:49:81:b1:12:9e: df:f1:94:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrz4wCap+mL1JFjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MDMxMDdiMTktZWE0NS00MjYyLTliZDEtM2ZmMjAwYzdlNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdq6CfgVM8rwE2MH9xQCnMoA2JL2URwtUaHO xD0mpiDp2o97sgxrVxgm5DUcfnY9J/Qi5Qcq3Hti2qJ013vz1fYuzuONx2L7HD29 MFtYJBbtvDyteAChfWT7Lqw0SfNRcboP2AM8CiHmZT8mNFwqhKmKqbtVsfGGp8jF 6+F5+lp8WE8GG5tGhrnX6yaCCmKsErPgLsBT/RXX+J761jBpbMFPxa4x0XyqoFPO 07KzebzaCgn34zmmgwywxEJ8S5k+M/KT6+jdIYx6bqa5m17Z64nsadWcGqT+eDGO pwtrkrsogLe/ILZSKlqlmzsp2imQmOvEEWf+ABtPyMmhFrQJ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVzaLQO3aNmnFZ11DqBqq3yvBpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODQzNDAyYjEtOGUzMS0z YmZjLTk2MDEtNzE2ODQzNjhmMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ7CKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALDFdBTiiqkZthsIpC2U0w94ZD/47/6t6FvKhn90MLLzlqmc2Qed0PzO XaoyQoC1NRnW55IKIQ9VuR4LQVqAPNt2kSon7/q40doPO7ckU1jDDnqlLcamc+Vw 0R6Fg/+04tHt4MS0gOOhP1XoAUUQKLQ9U2KMmOu4luzDoT9y+xzMKLS6neD5qM3F fXAQZisH6WStkDc4gZrewiHiMR46we90CTjFm41QcDJWGAbH3YfCkNPKlFaVKNHB FnevV8hXj8I9hCaGX7srqQiosPIZaeW69A3iVnxPHf0mMRwrxNiWfLkAPAI8WA5T 0N9MthEo5+4tX60ArbVJgbESnt/xlCA= -----END CERTIFICATE-----Generated at Mon Apr 7 09:35:49 2025 by rpki-client