$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7345fa5-b844-365c-a9d2-4eafa068ea91.roa File: a7345fa5-b844-365c-a9d2-4eafa068ea91.roa (raw, json) Hash identifier: 7e0pAgJ7VW0ho8YOa6dRRJ122MEfBZgGhlXEDB/JveU= Subject key identifier: 95:C5:1A:23:16:43:54:B8:4D:6F:94:80:25:BB:4C:37:F9:08:54:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B755B710D75232F4FAE40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7345fa5-b844-365c-a9d2-4eafa068ea91.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 67.187.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:75:5b:71:0d:75:23:2f:4f:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=e3611dbe-43eb-4ab8-9de8-dda3b2afc2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9b:88:8a:a7:7d:c2:fc:d8:01:a7:f5:37:aa: c1:4c:ed:ca:6f:ce:e0:92:ff:a8:57:aa:d3:e7:26: fe:ec:df:5b:72:ea:35:7f:96:f1:cf:60:a3:9a:a7: 2a:ba:68:92:d1:65:f6:60:b6:70:c4:0a:bf:73:9b: dc:30:69:6e:b6:8d:cc:30:26:56:57:96:af:c7:d8: 09:4f:d9:2c:a3:f0:60:b5:96:28:9b:79:54:ed:3e: 80:f1:69:e8:7f:d3:66:3c:60:f7:70:33:84:4d:f4: 18:9b:f6:56:97:6a:c7:b2:72:4f:8a:42:8e:00:5a: 9d:86:c6:99:a7:bb:5e:5e:59:53:e0:23:09:a2:8f: 4c:d0:6c:ce:18:80:e7:e5:3b:2c:e4:bf:51:c7:05: 27:0a:94:70:a1:fd:7f:d2:88:d9:21:d3:e6:68:7f: 3d:48:7d:2a:62:c9:82:53:f8:b7:96:a6:2f:0a:c1: ad:01:da:c3:d1:b9:d1:6b:3f:5a:f8:f1:79:94:d5: 8b:67:e9:a8:71:fa:59:fd:b0:01:51:78:7f:1f:e3: f0:33:b1:02:a7:0a:c8:35:d8:02:8a:09:7e:e9:d1: b7:b4:3f:d3:8f:8d:bd:1c:77:9f:65:11:59:fe:ae: 65:b0:6f:e7:79:cd:a1:a2:41:1a:39:a1:fa:3e:77: f7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C5:1A:23:16:43:54:B8:4D:6F:94:80:25:BB:4C:37:F9:08:54:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7345fa5-b844-365c-a9d2-4eafa068ea91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.187.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d8:e4:ef:88:b8:64:5c:d8:bf:33:88:08:ce:e8:06:00:7c: 5b:eb:a4:92:fd:33:16:ca:08:8e:d5:dd:d3:b2:ac:6b:65:4f: c2:5f:a5:cf:e8:3d:98:7e:88:38:16:2f:5d:6e:97:31:62:ec: 72:4f:b4:bc:45:2d:d7:a2:0f:af:d5:e2:4f:94:6a:1a:70:da: 7d:a6:27:45:27:dd:2f:b5:21:93:eb:3e:f4:80:f5:be:0e:60: 98:9c:5a:ad:5c:bb:aa:f5:1c:a2:e2:f1:49:b9:80:c7:a0:a9: 6a:b8:b8:1d:37:bf:71:e5:1d:0b:79:86:97:5c:fb:0e:23:17: 97:ba:a2:86:b9:f9:70:87:21:5c:17:96:e4:1c:ea:87:f7:9f: 68:3a:4e:73:9b:6f:b6:3f:c5:6e:03:ce:5e:a8:43:3b:08:98: 20:7a:68:5e:94:3b:07:c7:af:58:19:6c:c9:7c:9e:b0:68:54: f9:53:f1:a7:3d:af:55:b6:ed:fa:c1:39:10:a4:72:b1:23:b7: 41:a4:49:37:7b:d8:c7:9e:09:68:bb:a9:ca:4b:24:59:14:c7: 39:a2:a6:eb:87:e4:1d:a6:98:fc:75:e3:bb:9f:1b:77:3c:32: ff:b1:e1:a2:32:de:74:c9:3b:a9:18:09:85:fe:3b:4a:48:44: f3:ee:f0:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea3VbcQ11Iy9PrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZTM2MTFkYmUtNDNlYi00YWI4LTlkZTgtZGRhM2IyYWZjMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5uIiqd9wvzYAaf1N6rBTO3Kb87gkv+oV6rT 5yb+7N9bcuo1f5bxz2CjmqcqumiS0WX2YLZwxAq/c5vcMGluto3MMCZWV5avx9gJ T9kso/BgtZYom3lU7T6A8Wnof9NmPGD3cDOETfQYm/ZWl2rHsnJPikKOAFqdhsaZ p7teXllT4CMJoo9M0GzOGIDn5Tss5L9RxwUnCpRwof1/0ojZIdPmaH89SH0qYsmC U/i3lqYvCsGtAdrD0bnRaz9a+PF5lNWLZ+mocfpZ/bABUXh/H+PwM7ECpwrINdgC igl+6dG3tD/Tj429HHefZRFZ/q5lsG/nec2hokEaOaH6Pnf30wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXFGiMWQ1S4TW+UgCW7TDf5CFQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTczNDVmYTUtYjg0NC0z NjVjLWE5ZDItNGVhZmEwNjhlYTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7t8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvY5O+IuGRc2L8ziAjO6AYAfFvrpJL9MxbKCI7V3dOyrGtlT8Jfpc/o PZh+iDgWL11ulzFi7HJPtLxFLdeiD6/V4k+Uahpw2n2mJ0Un3S+1IZPrPvSA9b4O YJicWq1cu6r1HKLi8Um5gMegqWq4uB03v3HlHQt5hpdc+w4jF5e6ooa5+XCHIVwX luQc6of3n2g6TnObb7Y/xW4Dzl6oQzsImCB6aF6UOwfHr1gZbMl8nrBoVPlT8ac9 r1W27frBORCkcrEjt0GkSTd72MeeCWi7qcpLJFkUxzmipuuH5B2mmPx147ufG3c8 Mv+x4aIy3nTJO6kYCYX+O0pIRPPu8Jo= -----END CERTIFICATE-----Generated at Mon Apr 7 05:58:30 2025 by rpki-client