$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd12f79-4984-3abb-8370-82a3b8e18508.roa File: bfd12f79-4984-3abb-8370-82a3b8e18508.roa (raw, json) Hash identifier: szAHt0gsp5WtdaM+Lb00cdio/ItZuT/UIJqCEMg4awc= Subject key identifier: E2:F5:05:0F:DE:52:41:CF:9F:2D:32:82:6A:93:C3:22:BD:2A:98:E3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6B680FB01AB1245F50400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd12f79-4984-3abb-8370-82a3b8e18508.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 67.170.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:b6:80:fb:01:ab:12:45:f5:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=2b67de25-1ff5-49f6-980c-fffa606e0a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8f:bb:4d:24:44:ad:f0:9e:a7:49:17:15:8d: 14:b2:04:14:b1:54:fa:fc:ba:1e:69:51:e2:99:c1: 20:1e:fc:5d:6c:61:05:11:76:b1:1b:15:65:34:3c: 66:82:93:1b:1d:dc:44:b3:ca:28:4d:94:e7:da:d5: e0:14:d2:79:e3:3b:3e:dc:80:ea:d7:b0:ec:52:e1: 18:ad:2d:8f:bc:91:90:7c:49:51:b0:86:be:b7:5f: ea:23:c6:61:4c:2e:58:3d:12:8c:ee:8d:0e:0c:e5: 69:b4:90:62:bc:07:3e:bc:e8:71:55:52:6e:82:9e: 69:96:8e:36:b3:02:a0:d9:51:cf:03:f4:65:42:f3: 65:5f:c5:d0:8a:8b:07:ad:b8:59:94:75:04:db:b1: d2:88:0c:0c:5b:4f:c5:1a:d7:67:bc:ea:4a:06:39: a5:61:3f:90:5c:16:c2:79:05:c5:16:1f:80:ea:00: e7:f8:78:ce:fe:a7:36:24:c7:4d:ab:ac:6d:58:30: da:1a:5c:37:91:55:79:bf:bc:5e:c3:54:1e:6b:ac: 3d:15:02:4a:3c:5d:b8:54:e4:a3:7d:c0:42:c9:d9: f1:79:c8:0c:f4:4a:2b:b0:7d:50:ad:94:d2:23:8c: 31:ac:b2:1c:90:77:f8:c2:6c:d5:c6:2a:e5:df:25: 4e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F5:05:0F:DE:52:41:CF:9F:2D:32:82:6A:93:C3:22:BD:2A:98:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd12f79-4984-3abb-8370-82a3b8e18508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:46:e2:74:20:c9:57:b3:c3:31:92:02:69:b7:6a:1e:4e:c2: 9d:6c:ba:18:e0:ec:5f:e2:c1:6e:d3:39:c6:09:c1:83:c0:cf: 61:c2:03:fa:3c:73:80:88:7f:d8:1e:e4:ed:df:e9:0b:fe:4c: 05:27:09:c3:50:29:be:9d:63:a8:84:4e:22:dd:58:55:17:ee: 96:30:bf:c4:62:c2:3b:b0:70:fc:8c:60:63:8a:58:21:cf:f4: 6c:98:86:34:c6:dd:a4:0d:fc:e5:25:01:ff:7c:7e:c3:25:79: d7:3d:1c:a6:9c:37:60:38:38:e9:02:b7:2c:91:37:75:3a:72: ca:ad:b9:b3:5c:f7:d8:d2:dd:de:72:6d:9f:aa:77:28:24:54: d6:c3:c6:a0:5a:bf:f1:19:42:1a:4f:05:2c:c9:58:f0:cb:7a: 69:7b:fc:c9:d2:39:79:2d:36:b7:c6:09:ef:dd:7b:a0:18:fb: 5c:0f:3e:53:3b:40:f7:c9:94:93:00:9b:5b:f0:c8:b4:7a:ba: b8:df:ca:36:7b:1f:2a:1d:0d:7c:42:03:25:49:f2:95:2b:d9: 5e:db:b3:da:aa:48:af:59:93:79:d0:a8:62:7f:33:d2:41:c7: da:2d:75:90:6a:2c:43:71:f9:2a:b2:91:6a:2f:74:40:dd:b5: e6:51:e3:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09raA+wGrEkX1BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MmI2N2RlMjUtMWZmNS00OWY2LTk4MGMtZmZmYTYwNmUwYTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo+7TSRErfCep0kXFY0UsgQUsVT6/LoeaVHi mcEgHvxdbGEFEXaxGxVlNDxmgpMbHdxEs8ooTZTn2tXgFNJ54zs+3IDq17DsUuEY rS2PvJGQfElRsIa+t1/qI8ZhTC5YPRKM7o0ODOVptJBivAc+vOhxVVJugp5plo42 swKg2VHPA/RlQvNlX8XQiosHrbhZlHUE27HSiAwMW0/FGtdnvOpKBjmlYT+QXBbC eQXFFh+A6gDn+HjO/qc2JMdNq6xtWDDaGlw3kVV5v7xew1Qea6w9FQJKPF24VOSj fcBCydnxecgM9EorsH1QrZTSI4wxrLIckHf4wmzVxirl3yVO+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOL1BQ/eUkHPny0ygmqTwyK9KpjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZkMTJmNzktNDk4NC0z YWJiLTgzNzAtODJhM2I4ZTE4NTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6q8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpG4nQgyVezwzGSAmm3ah5Owp1suhjg7F/iwW7TOcYJwYPAz2HCA/o8 c4CIf9ge5O3f6Qv+TAUnCcNQKb6dY6iETiLdWFUX7pYwv8RiwjuwcPyMYGOKWCHP 9GyYhjTG3aQN/OUlAf98fsMledc9HKacN2A4OOkCtyyRN3U6csqtubNc99jS3d5y bZ+qdygkVNbDxqBav/EZQhpPBSzJWPDLeml7/MnSOXktNrfGCe/de6AY+1wPPlM7 QPfJlJMAm1vwyLR6urjfyjZ7HyodDXxCAyVJ8pUr2V7bs9qqSK9Zk3nQqGJ/M9JB x9otdZBqLENx+SqykWovdEDdteZR4w0= -----END CERTIFICATE-----Generated at Mon Apr 7 06:22:38 2025 by rpki-client