$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5a0fa44-3c51-38f7-a0a7-1a2b4900ec88.roa File: b5a0fa44-3c51-38f7-a0a7-1a2b4900ec88.roa (raw, json) Hash identifier: JRD40qP5JGBjmO/bdXsGGSfLC0ueCogLcvp8zCCZuOg= Subject key identifier: D9:CA:20:E1:C6:E8:73:0E:4F:27:C0:C7:BD:18:2A:40:4C:9F:E5:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BED41325A9E2FE9EC9EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5a0fa44-3c51-38f7-a0a7-1a2b4900ec88.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33650 IP address blocks: 67.168.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:ed:41:32:5a:9e:2f:e9:ec:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=66d20e5b-f7c7-4de3-9706-b3fa90e9872b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:41:68:73:b7:6e:c7:6d:8f:be:f5:8d:82:b2: c0:37:6a:ee:70:16:d1:97:fc:d8:ca:b1:3c:a8:4a: 43:b7:eb:fd:e2:ad:a5:2f:10:5c:77:85:8a:19:d3: bc:4e:ef:49:b3:2f:20:f5:af:01:d9:4d:81:82:46: d4:a2:96:3c:bc:78:93:d5:15:47:13:55:8e:fe:f7: 6e:13:2b:ed:0c:37:74:96:42:b6:bf:e3:92:04:9f: f5:93:75:d3:b1:c8:f8:55:30:d2:2b:83:61:65:8e: a9:1b:2d:60:60:12:0b:5e:e9:eb:6c:2e:64:b2:2b: ca:d4:93:b8:4f:11:1f:5d:c4:9f:38:75:92:71:58: a1:be:e1:6a:4a:16:1e:ad:2e:6d:06:96:c6:67:8e: be:f4:68:88:95:fc:62:73:b5:fa:05:83:16:68:12: 88:de:11:b7:df:da:50:58:61:77:4d:c3:b1:f4:ed: 0b:45:d4:cd:3c:43:f2:6c:9e:0a:bd:e0:2b:61:53: c0:83:52:0f:89:3a:2b:5c:8e:de:36:20:fe:c4:6d: eb:64:10:0c:e3:2b:90:e3:09:03:53:1b:bc:0e:54: f8:16:4d:13:1c:28:94:93:77:ba:e7:76:59:80:99: d0:3f:51:bd:55:16:94:9c:60:e7:f5:ce:f6:40:81: ec:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CA:20:E1:C6:E8:73:0E:4F:27:C0:C7:BD:18:2A:40:4C:9F:E5:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5a0fa44-3c51-38f7-a0a7-1a2b4900ec88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.168.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:06:81:91:9f:32:63:ef:58:8c:21:73:01:6d:36:18:86:b6: 19:8d:3d:04:4e:a8:0d:14:2f:d0:c5:75:cd:c8:d6:8a:59:90: a9:5f:19:e2:c6:4f:93:f3:19:1e:32:ee:b4:37:4a:fc:06:9d: 53:cf:69:13:6a:b1:72:1c:3f:17:07:b3:c9:55:ac:c4:78:02: a5:eb:d8:dd:5f:ed:48:1e:69:e5:5c:5f:92:9a:fa:24:81:8d: a0:ee:20:5d:9d:77:d2:9a:e6:19:c1:09:87:29:f6:05:61:6c: be:73:80:5e:2b:fc:ef:df:4f:84:fa:cd:a4:07:4b:4d:7e:dc: 54:50:8e:d1:9e:f2:27:df:0a:b3:b1:ae:c8:b0:f3:fc:91:18: 9e:b1:54:48:c4:72:08:84:f4:1e:e3:d8:9c:31:61:a5:ed:a5: 9d:e3:59:b3:ab:73:77:50:89:8d:6d:c4:a4:80:8d:26:f1:cc: 19:97:89:b4:c6:fe:63:0c:a1:bc:f2:74:2c:99:c0:3b:ad:99: c5:91:ef:f4:6f:f2:d5:b3:66:b8:45:e9:00:62:60:10:ff:aa: 00:79:30:b3:50:a1:a9:c9:20:9f:05:d1:63:5f:0f:8b:2c:b1: 76:69:a0:59:6a:ec:2c:28:17:04:50:ce:fc:da:dc:d0:8d:3f: fa:3f:5f:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea+1BMlqeL+nsnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NjZkMjBlNWItZjdjNy00ZGUzLTk3MDYtYjNmYTkwZTk4NzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEFoc7dux22PvvWNgrLAN2rucBbRl/zYyrE8 qEpDt+v94q2lLxBcd4WKGdO8Tu9Jsy8g9a8B2U2BgkbUopY8vHiT1RVHE1WO/vdu EyvtDDd0lkK2v+OSBJ/1k3XTscj4VTDSK4NhZY6pGy1gYBILXunrbC5ksivK1JO4 TxEfXcSfOHWScVihvuFqShYerS5tBpbGZ46+9GiIlfxic7X6BYMWaBKI3hG339pQ WGF3TcOx9O0LRdTNPEPybJ4KveArYVPAg1IPiTorXI7eNiD+xG3rZBAM4yuQ4wkD Uxu8DlT4Fk0THCiUk3e653ZZgJnQP1G9VRaUnGDn9c72QIHsiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnKIOHG6HMOTyfAx70YKkBMn+XdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjVhMGZhNDQtM2M1MS0z OGY3LWEwYTctMWEyYjQ5MDBlYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQ6gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUGgZGfMmPvWIwhcwFtNhiGthmNPQROqA0UL9DFdc3I1opZkKlfGeLG T5PzGR4y7rQ3SvwGnVPPaRNqsXIcPxcHs8lVrMR4AqXr2N1f7UgeaeVcX5Ka+iSB jaDuIF2dd9Ka5hnBCYcp9gVhbL5zgF4r/O/fT4T6zaQHS01+3FRQjtGe8iffCrOx rsiw8/yRGJ6xVEjEcgiE9B7j2JwxYaXtpZ3jWbOrc3dQiY1txKSAjSbxzBmXibTG /mMMobzydCyZwDutmcWR7/Rv8tWzZrhF6QBiYBD/qgB5MLNQoanJIJ8F0WNfD4ss sXZpoFlq7CwoFwRQzvza3NCNP/o/X8A= -----END CERTIFICATE-----Generated at Sun Apr 6 23:00:28 2025 by rpki-client