$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3e3f981-14ec-3a69-b431-be9069dd0548.roa File: b3e3f981-14ec-3a69-b431-be9069dd0548.roa (raw, json) Hash identifier: vdOiUloZcboqgCsR96AWZRmEq8D8mr9pNCOvnsGXyHM= Subject key identifier: 32:BB:AA:70:FC:18:68:51:3C:12:1F:94:96:4A:6B:0C:A2:46:49:E4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF3B2258A79786A00B4A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3e3f981-14ec-3a69-b431-be9069dd0548.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 67.173.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:3b:22:58:a7:97:86:a0:0b:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=dd252ff8-ffed-4c1c-90fe-9e0b93a0a350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c7:08:ae:02:a4:8e:39:3d:c3:a5:29:9e:37: 37:fd:a9:48:71:45:a7:32:1d:8d:e2:be:33:cd:f0: 84:09:f2:44:13:c0:f9:e3:81:ab:fd:52:f7:7e:58: c9:41:e8:b2:90:c5:ef:73:41:bb:7b:b9:7e:9d:31: 51:12:73:69:88:b7:0c:4c:3b:91:b9:53:ef:1d:c1: a0:c8:7a:85:3e:1b:21:9f:66:0f:f3:9d:28:ae:74: 02:2a:61:cb:7e:41:48:33:90:19:17:fb:15:cb:db: 12:0a:3e:aa:e6:05:13:c5:24:28:0e:40:a7:d7:c4: 74:35:ab:df:65:a1:a2:1b:71:54:57:34:f6:6e:33: 05:9a:70:c8:79:a6:e4:66:5c:c5:52:2e:4a:ec:71: e2:bc:37:e8:9b:fc:c8:2c:a0:41:5e:83:33:13:5a: 06:fc:27:79:13:c5:89:f7:bd:42:ee:e2:7c:3d:47: 6c:b0:d2:7d:83:94:71:00:9f:a2:a4:8e:56:2b:75: 59:2b:d8:49:77:88:cf:14:20:56:db:ef:48:57:ea: e6:cd:8b:2d:d6:9c:0d:82:ad:7a:b3:23:61:09:f3: a3:99:f9:7d:3d:e8:2d:70:ba:77:bc:ce:1a:5f:5a: 9b:58:a6:b9:8b:ab:1b:f8:c0:fe:7e:39:35:96:07: fd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BB:AA:70:FC:18:68:51:3C:12:1F:94:96:4A:6B:0C:A2:46:49:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3e3f981-14ec-3a69-b431-be9069dd0548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.173.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:cc:b6:52:e5:b6:0f:b8:e8:95:2b:52:54:8b:2b:22:c3:23: 3e:72:fb:ae:62:17:f2:75:cd:7b:2d:e0:1e:f7:16:c3:3c:db: a2:1f:03:d9:df:89:f2:42:f3:7c:2e:ef:48:45:01:d8:78:76: 54:1f:e4:f1:fb:f4:e9:21:5f:56:80:a0:6d:96:a0:73:79:0a: 14:fd:65:9b:8c:a6:2b:a2:d5:26:90:34:70:fd:0d:4d:51:d9: 8a:5a:18:02:0e:f4:09:f2:b0:73:62:8f:e3:af:4b:5d:d8:73: e1:55:77:7f:78:19:ed:27:6a:e3:1b:19:58:c2:c6:ab:29:19: 6e:dc:06:bc:69:87:74:91:1d:3b:3a:81:f0:65:42:0e:2e:dd: 22:bb:56:b6:7c:27:65:01:50:4d:56:00:26:5b:49:8a:d7:c7: b6:75:27:32:84:ad:29:ef:3d:f4:6c:2b:60:cb:67:46:71:0a: a4:01:10:5b:9f:db:a4:bd:2e:f8:0c:43:db:84:6b:0c:58:e9: 1e:08:d3:74:96:77:db:f6:16:33:6e:b3:41:0c:62:b0:ab:2e: c6:65:0e:45:b7:b8:d9:d0:f3:88:0d:54:f7:85:17:b6:2b:a8: 2f:6d:17:fd:76:9a:6c:99:89:a5:67:ce:c0:97:15:c8:e8:bd: bd:40:6f:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrzsiWKeXhqALSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZGQyNTJmZjgtZmZlZC00YzFjLTkwZmUtOWUwYjkzYTBhMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMcIrgKkjjk9w6Upnjc3/alIcUWnMh2N4r4z zfCECfJEE8D544Gr/VL3fljJQeiykMXvc0G7e7l+nTFREnNpiLcMTDuRuVPvHcGg yHqFPhshn2YP850ornQCKmHLfkFIM5AZF/sVy9sSCj6q5gUTxSQoDkCn18R0Navf ZaGiG3FUVzT2bjMFmnDIeabkZlzFUi5K7HHivDfom/zILKBBXoMzE1oG/Cd5E8WJ 971C7uJ8PUdssNJ9g5RxAJ+ipI5WK3VZK9hJd4jPFCBW2+9IV+rmzYst1pwNgq16 syNhCfOjmfl9PegtcLp3vM4aX1qbWKa5i6sb+MD+fjk1lgf9TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK7qnD8GGhRPBIflJZKawyiRknkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjNlM2Y5ODEtMTRlYy0z YTY5LWI0MzEtYmU5MDY5ZGQwNTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ60UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPMtlLltg+46JUrUlSLKyLDIz5y+65iF/J1zXst4B73FsM826IfA9nf ifJC83wu70hFAdh4dlQf5PH79OkhX1aAoG2WoHN5ChT9ZZuMpiui1SaQNHD9DU1R 2YpaGAIO9AnysHNij+OvS13Yc+FVd394Ge0nauMbGVjCxqspGW7cBrxph3SRHTs6 gfBlQg4u3SK7VrZ8J2UBUE1WACZbSYrXx7Z1JzKErSnvPfRsK2DLZ0ZxCqQBEFuf 26S9LvgMQ9uEawxY6R4I03SWd9v2FjNus0EMYrCrLsZlDkW3uNnQ84gNVPeFF7Yr qC9tF/12mmyZiaVnzsCXFcjovb1Ab+U= -----END CERTIFICATE-----Generated at Mon Apr 7 06:01:39 2025 by rpki-client