$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90afa9ff-cb3b-39c3-8e1a-3faa1ab07f5d.roa File: 90afa9ff-cb3b-39c3-8e1a-3faa1ab07f5d.roa (raw, json) Hash identifier: 3Rr5e05jdFDVIibpSv5uiDS3pEpgSyDiyTYicV77b20= Subject key identifier: 49:76:5F:CB:AF:31:E9:F6:C9:17:71:45:DE:C2:70:EB:E0:4A:16:CC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0CD9057CE19F244C32A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90afa9ff-cb3b-39c3-8e1a-3faa1ab07f5d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 67.176.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:cd:90:57:ce:19:f2:44:c3:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=bb500f62-83a0-4686-8dc6-0579d8b27c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3d:fc:50:90:fb:3a:ea:ba:b6:fd:59:1d:af: f3:65:15:16:04:73:0e:04:36:cd:dd:00:48:3d:ee: db:d3:aa:76:cc:3c:79:d3:46:4e:99:bb:d6:4e:fe: c4:8c:ca:8c:c1:22:9e:9f:df:e8:ec:c0:b8:e6:8e: 0e:bc:f5:7d:98:4f:5f:a8:c8:01:9e:e1:21:32:d8: f2:b4:09:3c:46:ad:f0:c5:9c:f6:a4:cd:a3:a4:a7: 3f:6d:76:23:69:b6:dd:c9:65:8d:fe:18:29:57:c0: 59:4f:e0:d9:f4:e1:93:3e:42:f0:a1:9e:90:92:77: 9b:20:2d:ec:d2:da:81:5d:c0:fe:3d:89:42:e8:48: 38:94:6e:d7:7f:82:6f:cc:35:22:e0:d0:ef:89:d8: 39:e6:dc:36:8d:34:6c:67:16:e3:d3:05:b6:68:40: e8:7b:03:b8:ae:f0:77:b7:ff:a2:32:51:a7:b1:69: 93:0a:30:cb:5e:e2:77:e3:6e:27:6f:86:92:f3:84: 0a:85:e7:a6:e8:9c:37:a7:0e:51:b5:9b:e0:33:e9: 12:45:e9:38:b1:83:5d:0c:21:c1:ef:35:a0:95:ce: e0:b2:c2:8c:c7:af:87:40:88:4f:63:d3:08:f0:6d: 43:34:03:81:29:6d:db:4b:15:22:91:96:b9:67:23: 92:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:76:5F:CB:AF:31:E9:F6:C9:17:71:45:DE:C2:70:EB:E0:4A:16:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90afa9ff-cb3b-39c3-8e1a-3faa1ab07f5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.176.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c7:89:d6:95:e8:2b:1a:54:60:0f:c3:77:d8:59:8b:8c:52: 39:37:0f:81:0b:c7:df:2d:18:64:b0:64:b3:3d:39:96:b5:23: 3c:b7:45:0e:f2:5b:58:74:4e:37:90:fd:37:7c:ec:62:56:39: 1c:81:00:f7:53:79:1a:de:37:ef:83:53:ff:1c:04:c5:ca:32: ff:95:ba:b3:36:ac:c7:6a:63:35:4f:57:e7:b1:40:b5:3d:1a: b6:cd:4a:b8:fc:34:f2:19:9c:3b:fd:fe:ce:f8:95:2f:d9:52: ec:c5:11:e5:37:20:e9:41:18:b2:6f:49:20:ec:da:ea:6e:a3: e3:1e:b2:64:2d:c9:5d:35:ac:22:ef:3c:7e:a9:d3:67:8e:77: be:d9:12:0c:a1:fa:43:3b:b5:cf:c7:33:89:d7:bd:7b:da:7b: a1:e8:a0:48:19:76:8d:5e:de:5c:28:f1:31:30:e7:51:f2:59: aa:e6:92:9a:ab:d8:a4:df:69:ff:da:c1:f1:cf:ef:5c:b9:d6: a6:ec:90:41:e5:e3:af:74:aa:1f:91:22:38:96:0b:e5:b5:7c: 2f:ea:d4:06:b9:e2:d6:d2:a0:9b:4c:67:18:b9:0d:4b:06:5f: a7:38:1a:70:55:5b:0c:6d:ad:e3:73:22:15:72:40:59:88:d1: 0d:73:e8:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssM2QV84Z8kTDKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YmI1MDBmNjItODNhMC00Njg2LThkYzYtMDU3OWQ4YjI3Yzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T38UJD7Ouq6tv1ZHa/zZRUWBHMOBDbN3QBI Pe7b06p2zDx500ZOmbvWTv7EjMqMwSKen9/o7MC45o4OvPV9mE9fqMgBnuEhMtjy tAk8Rq3wxZz2pM2jpKc/bXYjabbdyWWN/hgpV8BZT+DZ9OGTPkLwoZ6QknebIC3s 0tqBXcD+PYlC6Eg4lG7Xf4JvzDUi4NDvidg55tw2jTRsZxbj0wW2aEDoewO4rvB3 t/+iMlGnsWmTCjDLXuJ3424nb4aS84QKheem6Jw3pw5RtZvgM+kSRek4sYNdDCHB 7zWglc7gssKMx6+HQIhPY9MI8G1DNAOBKW3bSxUikZa5ZyOSbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl2X8uvMen2yRdxRd7CcOvgShbMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTBhZmE5ZmYtY2IzYi0z OWMzLThlMWEtM2ZhYTFhYjA3ZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ7DYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDHidaV6CsaVGAPw3fYWYuMUjk3D4ELx98tGGSwZLM9OZa1Izy3RQ7y W1h0TjeQ/Td87GJWORyBAPdTeRreN++DU/8cBMXKMv+VurM2rMdqYzVPV+exQLU9 GrbNSrj8NPIZnDv9/s74lS/ZUuzFEeU3IOlBGLJvSSDs2upuo+MesmQtyV01rCLv PH6p02eOd77ZEgyh+kM7tc/HM4nXvXvae6HooEgZdo1e3lwo8TEw51HyWarmkpqr 2KTfaf/awfHP71y51qbskEHl4690qh+RIjiWC+W1fC/q1Aa54tbSoJtMZxi5DUsG X6c4GnBVWwxtreNzIhVyQFmI0Q1z6Kk= -----END CERTIFICATE-----Generated at Mon Apr 7 06:34:42 2025 by rpki-client