$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df0066f0-ea12-3b59-9ae5-834d587fd60b.roa File: df0066f0-ea12-3b59-9ae5-834d587fd60b.roa (raw, json) Hash identifier: r9u+vGliItjs7DpoLZR8lxYdPel/tDgE9LXhDpnnOlE= Subject key identifier: 66:1B:EB:49:D0:92:A4:51:4D:62:B8:AD:83:A3:37:B3:A5:FB:62:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0C853246B8CDDD91626E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df0066f0-ea12-3b59-9ae5-834d587fd60b.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 67.163.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:c8:53:24:6b:8c:dd:d9:16:26:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=b27f0fde-8508-46ed-b97b-bb1c6f7e40d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4f:45:6f:cf:a7:b0:43:18:6f:b0:f6:21:1b: 68:4d:cc:a8:c8:c5:73:56:6d:09:83:ea:66:bf:a4: 85:f8:b5:d0:08:6f:3c:ef:18:29:47:c2:67:65:d7: 9a:52:65:88:d7:52:c8:7c:c4:a5:b0:e4:e4:73:e9: d9:79:96:16:9e:14:86:78:fa:58:b0:0e:aa:9f:cb: 25:63:9a:74:3b:eb:26:e3:b6:96:86:26:48:8c:7e: 64:5d:4b:4c:69:56:1b:4f:56:e0:6e:54:bc:24:22: e3:be:ec:a6:28:43:20:c5:ba:59:1a:79:e1:cc:c0: d0:9a:e6:cd:05:ff:2d:eb:af:62:43:c9:a0:21:ce: 8e:66:dc:91:48:d4:ed:f3:9b:42:c3:a5:da:23:aa: cf:9d:49:40:60:de:f4:6a:eb:c6:93:98:b3:9c:5f: 24:74:59:4a:b2:2d:1a:a2:e7:dc:10:b9:ed:df:f2: b3:02:c0:d7:54:f5:f7:6d:73:d5:ef:11:76:fa:c7: a1:8b:9d:1a:86:10:cf:47:99:ad:6f:74:08:86:62: e8:01:3e:32:99:f1:8f:66:68:88:fb:a3:05:1a:c7: 14:43:f5:43:21:7e:b9:80:37:2f:5f:c6:71:42:4e: 83:52:ea:31:64:47:ed:0e:c1:15:44:d6:6b:5e:7d: d8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1B:EB:49:D0:92:A4:51:4D:62:B8:AD:83:A3:37:B3:A5:FB:62:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df0066f0-ea12-3b59-9ae5-834d587fd60b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.163.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:dd:86:97:8b:fc:58:ff:51:9e:d4:15:0c:8e:26:e3:0c:bc: 02:49:76:ca:26:e9:14:53:d4:b4:25:c6:21:fc:97:ca:d3:67: f6:51:f5:60:7a:d6:51:d3:98:70:49:12:e6:2a:16:08:ce:1f: 97:ca:1b:f1:69:89:94:29:f0:99:1c:1b:e2:81:ce:c0:2e:b1: 25:02:53:8f:7b:d3:db:0b:d3:a1:12:ce:0d:b8:c1:a4:7f:6c: 05:52:2a:e4:dc:84:ee:8a:3e:ba:bb:b1:b1:8e:94:63:f0:cf: ca:c1:b6:07:2b:d2:41:fb:04:b7:01:39:05:0d:c9:f7:8d:f9: 7b:58:b2:f5:5e:ad:4f:89:27:f8:df:87:e3:eb:fd:fc:4b:f1: dc:c5:42:ca:f7:e3:fe:b3:96:1e:69:96:a6:bb:1b:85:42:15: fc:a5:4d:8d:88:09:3f:6f:7c:bf:af:66:5b:88:50:51:bd:93: 0f:c9:64:87:a7:a4:40:22:5e:7f:ef:15:9f:be:ea:7b:a8:a7: f7:90:f2:16:fb:84:24:67:2f:62:83:b4:07:1f:b2:20:5f:1a: ff:32:32:39:c6:d1:5e:4d:d5:0d:1e:f8:ab:c4:2e:4d:0a:73: 89:a3:7e:09:d9:75:61:80:9d:06:bd:33:63:5d:8f:18:32:37: 75:81:35:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssMhTJGuM3dkWJuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjI3ZjBmZGUtODUwOC00NmVkLWI5N2ItYmIxYzZmN2U0MGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU9Fb8+nsEMYb7D2IRtoTcyoyMVzVm0Jg+pm v6SF+LXQCG887xgpR8JnZdeaUmWI11LIfMSlsOTkc+nZeZYWnhSGePpYsA6qn8sl Y5p0O+sm47aWhiZIjH5kXUtMaVYbT1bgblS8JCLjvuymKEMgxbpZGnnhzMDQmubN Bf8t669iQ8mgIc6OZtyRSNTt85tCw6XaI6rPnUlAYN70auvGk5iznF8kdFlKsi0a oufcELnt3/KzAsDXVPX3bXPV7xF2+sehi50ahhDPR5mtb3QIhmLoAT4ymfGPZmiI +6MFGscUQ/VDIX65gDcvX8ZxQk6DUuoxZEftDsEVRNZrXn3YtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYb60nQkqRRTWK4rYOjN7Ol+2ImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGYwMDY2ZjAtZWExMi0z YjU5LTlhZTUtODM0ZDU4N2ZkNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6M8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3dhpeL/Fj/UZ7UFQyOJuMMvAJJdsom6RRT1LQlxiH8l8rTZ/ZR9WB6 1lHTmHBJEuYqFgjOH5fKG/FpiZQp8JkcG+KBzsAusSUCU49709sL06ESzg24waR/ bAVSKuTchO6KPrq7sbGOlGPwz8rBtgcr0kH7BLcBOQUNyfeN+XtYsvVerU+JJ/jf h+Pr/fxL8dzFQsr34/6zlh5plqa7G4VCFfylTY2ICT9vfL+vZluIUFG9kw/JZIen pEAiXn/vFZ++6nuop/eQ8hb7hCRnL2KDtAcfsiBfGv8yMjnG0V5N1Q0e+KvELk0K c4mjfgnZdWGAnQa9M2NdjxgyN3WBNRg= -----END CERTIFICATE-----Generated at Mon Apr 7 06:01:42 2025 by rpki-client