$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b220137e-aafb-3ab8-9a09-63c5415ab2f5.roa File: b220137e-aafb-3ab8-9a09-63c5415ab2f5.roa (raw, json) Hash identifier: yOa0mohrB/25TBJZkpGgn0V9cJmFjqitzawLvtGX0gs= Subject key identifier: 6F:6C:2A:94:1C:AF:EA:41:74:AF:DF:12:88:73:08:88:35:35:2D:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CDBBDB0152BEC9A3C2870 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b220137e-aafb-3ab8-9a09-63c5415ab2f5.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 67.187.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:db:bd:b0:15:2b:ec:9a:3c:28:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=cfc2330f-8e97-42aa-a400-cc1649d1cdec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1f:15:ef:f5:d7:ed:9c:94:c6:fe:fb:b6:07: 82:7f:14:eb:69:87:d6:c2:ff:b6:59:83:75:0f:e2: e9:59:44:ae:62:df:47:26:16:74:39:54:fd:83:aa: 6b:f9:6b:5f:ca:fc:c9:5b:17:68:d8:f8:50:86:d0: 8b:70:f0:7d:bf:fd:09:93:06:33:3f:69:4f:61:22: c6:94:da:28:8f:f8:3e:5d:ac:b0:6e:b2:6a:42:35: 77:aa:23:0f:43:08:42:c7:1e:25:03:e1:82:33:73: 37:da:e6:94:51:0a:ac:51:3c:67:11:32:2a:74:fc: 87:d3:86:01:c1:c0:f4:8d:c4:49:a2:f5:46:e4:2e: 53:fd:30:c3:5f:8e:fe:f9:c9:38:fd:89:5c:0a:0d: a5:a9:35:1d:4c:b1:6e:c0:52:8d:b3:79:5a:44:c8: f1:3c:0d:ee:6c:a4:df:be:b9:f6:46:83:9b:cd:a1: 1d:35:37:0d:34:2a:95:c3:b4:0d:e2:41:1b:bb:53: 2d:29:e9:b5:dd:e6:d2:d8:27:a1:79:33:58:2b:3e: 18:a7:cd:5c:27:56:ab:3c:45:72:c1:18:df:d3:32: f6:e9:e4:2b:46:9d:6e:59:2a:99:ed:47:1b:f5:06: c4:b3:5c:15:35:81:be:4c:6e:ef:c9:57:39:32:17: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6C:2A:94:1C:AF:EA:41:74:AF:DF:12:88:73:08:88:35:35:2D:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b220137e-aafb-3ab8-9a09-63c5415ab2f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.187.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:4e:7f:01:07:de:f5:66:30:35:35:29:31:0d:f4:2d:ee:f0: c2:f7:0a:ad:27:58:b7:46:b3:ee:81:3b:33:50:af:e3:f2:ad: 58:d0:cb:42:12:f9:6c:b8:ff:ff:12:96:73:4e:d4:fd:e9:8d: 62:67:1e:a8:0a:21:9f:7a:f6:38:46:26:28:ec:2e:24:6b:d0: 21:b5:70:16:e5:99:85:a2:28:8e:b2:c0:71:f1:9e:7a:99:76: db:7d:b0:4a:ca:22:77:19:f7:c7:00:03:ed:00:af:0e:49:08: bc:22:d1:b0:fd:f2:66:c7:cb:ac:ef:a9:91:67:33:0c:33:53: ed:b4:81:b4:0f:07:a6:27:ef:a7:a6:f9:89:00:2f:cc:29:a7: 60:d0:69:dd:4a:16:a5:8d:74:69:c4:dc:c8:5b:1d:66:72:e9: 19:52:8b:45:38:3c:f2:15:92:5a:5a:ec:79:65:15:2d:88:39: f6:e1:36:74:53:db:dd:1f:5f:6a:d1:e3:ef:59:da:fc:12:f3: 27:5f:bc:22:a6:a6:c3:74:3e:97:7b:2f:4c:05:ea:f0:b9:6a: 3f:dd:56:e1:81:35:84:c8:86:d8:e6:11:28:87:38:64:65:73: 77:2c:8f:5a:75:8c:ff:aa:d1:0a:a6:bd:e5:d5:29:0a:a9:4a: 0c:e0:ea:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebNu9sBUr7Jo8KHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Y2ZjMjMzMGYtOGU5Ny00MmFhLWE0MDAtY2MxNjQ5ZDFjZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB8V7/XX7ZyUxv77tgeCfxTraYfWwv+2WYN1 D+LpWUSuYt9HJhZ0OVT9g6pr+WtfyvzJWxdo2PhQhtCLcPB9v/0JkwYzP2lPYSLG lNooj/g+XaywbrJqQjV3qiMPQwhCxx4lA+GCM3M32uaUUQqsUTxnETIqdPyH04YB wcD0jcRJovVG5C5T/TDDX47++ck4/YlcCg2lqTUdTLFuwFKNs3laRMjxPA3ubKTf vrn2RoObzaEdNTcNNCqVw7QN4kEbu1MtKem13ebS2CeheTNYKz4Yp81cJ1arPEVy wRjf0zL26eQrRp1uWSqZ7Ucb9QbEs1wVNYG+TG7vyVc5MhevjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9sKpQcr+pBdK/fEohzCIg1NS2DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjIyMDEzN2UtYWFmYi0z YWI4LTlhMDktNjNjNTQxNWFiMmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7t0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBOfwEH3vVmMDU1KTEN9C3u8ML3Cq0nWLdGs+6BOzNQr+PyrVjQy0IS +Wy4//8SlnNO1P3pjWJnHqgKIZ969jhGJijsLiRr0CG1cBblmYWiKI6ywHHxnnqZ dtt9sErKIncZ98cAA+0Arw5JCLwi0bD98mbHy6zvqZFnMwwzU+20gbQPB6Yn76em +YkAL8wpp2DQad1KFqWNdGnE3MhbHWZy6RlSi0U4PPIVklpa7HllFS2IOfbhNnRT 290fX2rR4+9Z2vwS8ydfvCKmpsN0Ppd7L0wF6vC5aj/dVuGBNYTIhtjmESiHOGRl c3csj1p1jP+q0QqmveXVKQqpSgzg6k4= -----END CERTIFICATE-----Generated at Mon Apr 7 06:00:14 2025 by rpki-client