$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0258c06-107d-3fc4-9ee3-91ebc77eda29.roa File: d0258c06-107d-3fc4-9ee3-91ebc77eda29.roa (raw, json) Hash identifier: QhJDAo96FOoVnjPG1zzgSZVs16f1kffOo/yWiNbh7j4= Subject key identifier: A0:45:CC:97:1E:A4:09:C9:AA:48:BC:5E:8B:B2:EA:D4:50:E6:1F:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB178B5FEB6EE0174D6BD90 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0258c06-107d-3fc4-9ee3-91ebc77eda29.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 67.170.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:78:b5:fe:b6:ee:01:74:d6:bd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=09d976d8-e9fb-4455-ab41-4cc2d7f7a554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6d:d7:8a:a2:7c:13:d3:b9:a1:2e:7a:cf:00: 80:ce:26:01:60:09:bd:0a:ed:62:28:57:c0:f2:75: 05:a6:ea:7c:fd:65:aa:90:20:2b:f0:7e:39:78:3a: 0b:ae:f5:64:a3:e4:a6:a7:08:51:a0:10:c1:c0:b2: 38:ac:b6:e4:df:48:03:fa:70:6e:db:2d:c9:6f:ab: 82:b2:2f:18:0e:56:78:c0:ce:ee:06:01:88:66:ce: ae:c9:b4:ce:d8:be:5d:e1:e4:da:ff:01:c1:a1:21: 1f:6a:b0:8e:b8:66:10:40:e5:56:5f:fb:99:96:48: 7b:54:c7:b0:bc:8e:13:e5:15:11:3c:1c:29:dc:4e: c3:e2:e3:10:15:d0:2c:e6:0a:61:e4:40:bb:23:a6: b6:70:09:a4:46:23:9c:a8:87:67:b3:ad:ec:ce:30: 31:45:e1:d5:7f:86:1e:61:42:08:b6:ea:eb:88:e2: 54:9d:e2:4d:43:59:46:8d:17:20:5a:8f:ee:90:f0: f8:dc:d8:42:88:e1:e4:c5:e6:71:85:f5:c4:f6:8c: da:3c:ef:88:3d:33:39:ff:9b:2e:c6:e3:c1:d7:1b: e7:9c:b2:f5:a9:96:eb:0c:cc:50:7c:a1:0c:80:41: 72:fb:3d:dd:37:d4:cb:33:2b:49:2f:35:39:c5:05: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:45:CC:97:1E:A4:09:C9:AA:48:BC:5E:8B:B2:EA:D4:50:E6:1F:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0258c06-107d-3fc4-9ee3-91ebc77eda29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e2:88:fe:d6:bc:1a:f7:44:a3:b7:4f:58:74:f8:7d:c1:8f: e2:60:5c:39:b5:f1:b2:8f:fb:a7:94:37:9e:3d:97:6f:a5:78: 01:82:e9:f6:e1:19:69:f3:46:43:cc:24:14:02:75:91:b4:b7: 77:65:76:d0:12:66:ce:6d:0f:ea:7e:7e:93:77:ac:2c:6a:72: d5:cb:0f:a2:ea:70:60:7d:cf:7c:65:ee:71:ac:33:33:8e:46: e4:8b:94:a6:5e:f0:6d:31:35:b6:1f:0d:e0:db:0d:da:88:48: b3:bd:c7:5c:9e:91:fb:9b:42:97:61:ab:7e:c9:d1:4a:16:f9: 54:50:14:39:e5:fc:8e:3f:32:fe:0f:f4:b9:44:ce:b4:72:a6: 6b:b7:bf:7a:b4:6f:21:87:27:e9:e8:9c:c3:03:24:e1:f7:b9: fa:74:a7:2e:d6:77:d6:cd:70:8f:67:0e:2d:10:7b:42:8c:6a: 23:99:30:86:84:2e:cd:6e:77:4b:f7:dd:fb:18:ef:02:7d:d2: 16:a7:e9:ad:d7:8e:0a:06:de:d0:06:ad:48:b7:02:cd:b5:3b: 81:6c:b5:a0:fe:ee:9d:e9:4f:87:71:49:e8:5c:d5:12:b9:7e: c3:15:6b:34:79:42:8f:ac:39:fa:ff:13:80:c7:dc:d8:29:05: cf:1a:26:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssXi1/rbuAXTWvZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MDlkOTc2ZDgtZTlmYi00NDU1LWFiNDEtNGNjMmQ3ZjdhNTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG3XiqJ8E9O5oS56zwCAziYBYAm9Cu1iKFfA 8nUFpup8/WWqkCAr8H45eDoLrvVko+SmpwhRoBDBwLI4rLbk30gD+nBu2y3Jb6uC si8YDlZ4wM7uBgGIZs6uybTO2L5d4eTa/wHBoSEfarCOuGYQQOVWX/uZlkh7VMew vI4T5RURPBwp3E7D4uMQFdAs5gph5EC7I6a2cAmkRiOcqIdns63szjAxReHVf4Ye YUIIturriOJUneJNQ1lGjRcgWo/ukPD43NhCiOHkxeZxhfXE9ozaPO+IPTM5/5su xuPB1xvnnLL1qZbrDMxQfKEMgEFy+z3dN9TLMytJLzU5xQWu1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBFzJcepAnJqki8Xouy6tRQ5h9PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDAyNThjMDYtMTA3ZC0z ZmM0LTllZTMtOTFlYmM3N2VkYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ6rQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDiiP7WvBr3RKO3T1h0+H3Bj+JgXDm18bKP+6eUN549l2+leAGC6fbh GWnzRkPMJBQCdZG0t3dldtASZs5tD+p+fpN3rCxqctXLD6LqcGB9z3xl7nGsMzOO RuSLlKZe8G0xNbYfDeDbDdqISLO9x1yekfubQpdhq37J0UoW+VRQFDnl/I4/Mv4P 9LlEzrRypmu3v3q0byGHJ+nonMMDJOH3ufp0py7Wd9bNcI9nDi0Qe0KMaiOZMIaE Ls1ud0v33fsY7wJ90han6a3XjgoG3tAGrUi3As21O4FstaD+7p3pT4dxSehc1RK5 fsMVazR5Qo+sOfr/E4DH3NgpBc8aJnA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:05:08 2025 by rpki-client