$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f4595c-4623-31ad-82af-aa6e7a6922e3.roa File: a2f4595c-4623-31ad-82af-aa6e7a6922e3.roa (raw, json) Hash identifier: 7PeR78a576WKp1xHaqPi8fVP+AkbOLWzDwx3zUg8hoY= Subject key identifier: 76:B2:77:06:AA:67:63:11:AA:65:7D:E4:1C:28:87:4F:4E:C3:55:46 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C95805F8CEA53A535B900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f4595c-4623-31ad-82af-aa6e7a6922e3.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 67.191.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:95:80:5f:8c:ea:53:a5:35:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=f298246d-f827-4aeb-9510-a4c5381252d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:52:57:c2:68:a7:d8:03:2c:94:fc:49:4d:ce: 3d:c9:1d:b1:2a:bf:5b:24:f1:d7:98:c9:58:8b:a3: 6e:62:ab:02:ac:b9:8b:5c:46:37:fd:b6:bd:d1:11: 59:8c:f0:d5:d1:01:86:52:ae:5e:70:0c:2b:b0:38: 44:9d:7f:2a:5f:2e:ad:aa:38:3d:c1:00:9c:9e:47: e6:bb:f0:66:34:99:9c:0b:ae:49:ac:eb:80:56:24: 4f:1e:bc:6a:4b:de:f8:9a:31:b9:1d:f4:74:06:65: 6b:9d:8e:98:c8:68:a5:db:6c:ed:db:8c:5f:4f:f7: a4:d9:56:24:5d:55:44:84:78:db:ba:e6:60:83:ea: 9a:a5:87:fe:c2:75:79:44:dc:8f:ad:b5:10:a9:a8: 06:63:33:f0:8b:95:c7:3b:75:86:e5:35:f7:86:ae: 36:f0:be:8b:16:a1:db:73:b5:68:cf:41:77:00:61: f6:eb:d0:60:8b:2b:7b:53:5b:90:50:c3:62:f8:d2: 26:1b:87:32:6a:4a:79:a6:7c:83:ec:4c:19:24:c6: 0f:0e:28:69:5f:98:f5:15:ce:08:dc:24:a6:ff:e0: d0:88:61:fe:d7:25:02:22:97:eb:11:b7:3b:90:de: c9:ae:b4:d3:8e:d7:8a:2e:9e:c2:cc:4d:47:c5:d0: c8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B2:77:06:AA:67:63:11:AA:65:7D:E4:1C:28:87:4F:4E:C3:55:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f4595c-4623-31ad-82af-aa6e7a6922e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.191.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b1:b1:85:f1:96:38:bd:71:70:34:f9:c2:42:11:4c:8a:93: 48:6d:63:2c:cf:3e:b7:5b:49:b4:8b:96:59:14:97:6b:8f:b8: 7d:3b:9f:6c:6a:1d:6e:23:5f:45:04:66:43:92:fb:cc:4e:fe: 11:12:6e:f9:10:eb:ea:60:a8:00:3a:e4:a3:ae:73:ec:1e:57: da:7f:a9:e0:ab:13:64:6a:d7:94:55:69:af:7e:47:0a:40:5d: 37:e1:24:44:40:ed:f6:7e:ff:72:5f:b3:a9:b0:95:53:42:ae: aa:37:a9:bc:78:ff:2f:f2:0d:b6:92:5f:59:9c:03:d4:41:4e: 7a:e2:1f:c2:77:88:49:b9:3b:56:67:55:bf:38:4c:7f:86:93: 7a:6c:68:f9:11:f3:cf:a1:20:17:95:e9:ff:80:d4:ca:ec:8f: fb:a8:55:28:33:87:56:f4:6d:16:73:5f:92:42:d2:bf:b8:80: 3c:45:57:d6:10:6d:92:ef:3f:a5:22:cb:28:39:cc:1f:81:8f: bc:67:54:62:17:b7:b6:e5:dd:4e:00:15:ed:bf:22:b0:5c:6a: 5c:0e:8e:97:ef:fa:e9:10:a3:2e:32:f0:57:f8:13:38:2a:9c: ec:9d:d5:98:94:3d:7b:82:6a:ba:32:e9:3e:5b:18:26:ef:be: e7:38:6e:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPJWAX4zqU6U1uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk ZjI5ODI0NmQtZjgyNy00YWViLTk1MTAtYTRjNTM4MTI1MmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FJXwmin2AMslPxJTc49yR2xKr9bJPHXmMlY i6NuYqsCrLmLXEY3/ba90RFZjPDV0QGGUq5ecAwrsDhEnX8qXy6tqjg9wQCcnkfm u/BmNJmcC65JrOuAViRPHrxqS974mjG5HfR0BmVrnY6YyGil22zt24xfT/ek2VYk XVVEhHjbuuZgg+qapYf+wnV5RNyPrbUQqagGYzPwi5XHO3WG5TX3hq428L6LFqHb c7Voz0F3AGH269Bgiyt7U1uQUMNi+NImG4cyakp5pnyD7EwZJMYPDihpX5j1Fc4I 3CSm/+DQiGH+1yUCIpfrEbc7kN7JrrTTjteKLp7CzE1HxdDIfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaydwaqZ2MRqmV95Bwoh09Ow1VGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTJmNDU5NWMtNDYyMy0z MWFkLTgyYWYtYWE2ZTdhNjkyMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyxsYXxlji9cXA0+cJCEUyKk0htYyzPPrdbSbSLllkUl2uPuH07n2xq HW4jX0UEZkOS+8xO/hESbvkQ6+pgqAA65KOuc+weV9p/qeCrE2Rq15RVaa9+RwpA XTfhJERA7fZ+/3Jfs6mwlVNCrqo3qbx4/y/yDbaSX1mcA9RBTnriH8J3iEm5O1Zn Vb84TH+Gk3psaPkR88+hIBeV6f+A1Mrsj/uoVSgzh1b0bRZzX5JC0r+4gDxFV9YQ bZLvP6Uiyyg5zB+Bj7xnVGIXt7bl3U4AFe2/IrBcalwOjpfv+ukQoy4y8Ff4Ezgq nOyd1ZiUPXuCaroy6T5bGCbvvuc4bm4= -----END CERTIFICATE-----Generated at Mon Apr 7 06:13:25 2025 by rpki-client