$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/980945dd-f171-369b-b6fd-f8cbe64ece89.roa File: 980945dd-f171-369b-b6fd-f8cbe64ece89.roa (raw, json) Hash identifier: KFB3mI9RvJLIv+Xv1ULqmx1Dg+2JiaVHH3yxO5/rS2A= Subject key identifier: 60:A7:F9:CA:C7:6C:6F:CE:9C:1C:C6:E4:16:1A:91:96:87:A2:52:30 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFE7571B83C3CEDADA4C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/980945dd-f171-369b-b6fd-f8cbe64ece89.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 67.170.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:e7:57:1b:83:c3:ce:da:da:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=66ca9935-dea3-42b9-a5e4-889426d597b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dc:30:ca:d5:ec:7e:ee:8d:38:3f:f2:3c:04: 67:bc:9a:c3:06:33:f4:0e:d8:de:2a:69:45:ac:4e: 8a:78:c5:27:d5:05:8e:36:e2:73:af:eb:50:2e:51: 7e:2b:c9:eb:6a:ce:52:d9:d8:a0:86:c7:f4:98:b1: 12:2b:a3:b7:78:ab:01:81:cb:7a:9d:24:3d:13:7e: d9:7d:d0:fd:32:2f:4a:f6:fd:fd:8f:69:b3:c4:56: 8b:7c:d8:35:1c:1e:71:bb:8f:ee:67:8e:fa:68:37: bc:d6:ad:b8:ad:55:58:bc:83:83:ac:2d:c1:2a:5a: 3c:7b:10:08:55:08:f1:eb:5d:73:b6:f5:9f:a8:63: 55:08:31:45:88:0d:b3:ff:d0:92:3a:db:4d:d0:2b: 8d:db:c1:27:d3:45:8c:99:9c:0f:7b:88:63:3e:f0: 2a:95:a2:45:2c:4c:94:e0:3f:11:75:ed:84:34:22: 12:5d:27:87:cc:05:2e:4d:cc:d1:41:a2:6d:e4:ec: 74:2a:2a:43:fd:91:36:33:08:fe:97:77:04:0a:7f: 02:a9:c4:ff:4b:12:bc:1a:ec:17:fa:12:00:1e:9f: f9:39:84:e5:45:b4:6c:54:fe:db:2b:60:42:c9:87: 12:a5:63:e4:28:99:ea:a8:91:56:fa:43:5c:55:08: 5b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A7:F9:CA:C7:6C:6F:CE:9C:1C:C6:E4:16:1A:91:96:87:A2:52:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/980945dd-f171-369b-b6fd-f8cbe64ece89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:7b:28:ce:01:ec:9a:cd:b8:78:85:b6:9a:22:14:91:9f:28: a5:c9:1e:bf:65:90:26:4e:88:8d:76:85:8b:6c:3e:70:69:ec: a8:3e:b9:fc:6c:30:0f:9a:92:4b:d3:73:43:ac:fb:58:c8:d9: fe:f8:c0:44:af:32:78:fe:63:4f:92:24:0c:26:cd:5b:d0:7a: e2:42:94:58:e4:e8:26:88:b5:93:55:03:ef:3b:15:14:71:df: c1:d2:b7:0b:fa:2b:e9:d0:01:f4:da:fa:64:01:61:c0:c2:b6: 0d:e9:c0:2c:ee:4d:a6:6f:44:99:11:24:28:2c:4f:53:cb:68: e2:07:b1:6b:1e:73:28:e3:da:ca:3c:72:79:fc:5a:e2:0b:89: 39:8c:03:20:c0:c8:18:c3:9b:ce:d3:11:d9:46:ad:21:8e:33: ab:a6:f8:b2:6c:bd:bf:85:db:3d:76:0f:ae:1d:5d:99:75:72: 12:dd:7c:db:00:29:e8:a3:94:26:49:93:48:ef:50:39:f3:aa: 3f:9d:e2:37:ee:4d:8b:0c:03:d2:5b:63:1b:96:48:27:c7:41: 42:9c:e5:61:4e:d9:f9:b8:b0:13:b0:92:f7:65:47:8c:05:17: e5:11:dd:e7:9d:cf:15:d8:19:b9:ae:ed:ee:ec:34:46:df:c8: e0:9a:a0:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr+dXG4PDztraTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NjZjYTk5MzUtZGVhMy00MmI5LWE1ZTQtODg5NDI2ZDU5N2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9wwytXsfu6NOD/yPARnvJrDBjP0DtjeKmlF rE6KeMUn1QWONuJzr+tQLlF+K8nras5S2dighsf0mLESK6O3eKsBgct6nSQ9E37Z fdD9Mi9K9v39j2mzxFaLfNg1HB5xu4/uZ476aDe81q24rVVYvIODrC3BKlo8exAI VQjx611ztvWfqGNVCDFFiA2z/9CSOttN0CuN28En00WMmZwPe4hjPvAqlaJFLEyU 4D8Rde2ENCISXSeHzAUuTczRQaJt5Ox0KipD/ZE2Mwj+l3cECn8CqcT/SxK8GuwX +hIAHp/5OYTlRbRsVP7bK2BCyYcSpWPkKJnqqJFW+kNcVQhbIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCn+crHbG/OnBzG5BYakZaHolIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTgwOTQ1ZGQtZjE3MS0z NjliLWI2ZmQtZjhjYmU2NGVjZTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ6rcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ57KM4B7JrNuHiFtpoiFJGfKKXJHr9lkCZOiI12hYtsPnBp7Kg+ufxs MA+akkvTc0Os+1jI2f74wESvMnj+Y0+SJAwmzVvQeuJClFjk6CaItZNVA+87FRRx 38HStwv6K+nQAfTa+mQBYcDCtg3pwCzuTaZvRJkRJCgsT1PLaOIHsWsecyjj2so8 cnn8WuILiTmMAyDAyBjDm87TEdlGrSGOM6um+LJsvb+F2z12D64dXZl1chLdfNsA KeijlCZJk0jvUDnzqj+d4jfuTYsMA9JbYxuWSCfHQUKc5WFO2fm4sBOwkvdlR4wF F+UR3eedzxXYGbmu7e7sNEbfyOCaoP0= -----END CERTIFICATE-----Generated at Mon Apr 7 06:15:33 2025 by rpki-client