$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe3a558-c412-364b-a184-227a89db9e7e.roa File: efe3a558-c412-364b-a184-227a89db9e7e.roa (raw, json) Hash identifier: NCrGh4tvXFXIBxUuvSeoLaT78H+ga5DKOcMk8FKJZNs= Subject key identifier: A6:C7:03:6E:F8:B2:12:2B:7C:D7:7F:49:BB:07:08:70:3F:8B:EE:2D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAEA13135F29504AF1B2EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe3a558-c412-364b-a184-227a89db9e7e.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33660 IP address blocks: 67.161.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:a1:31:35:f2:95:04:af:1b:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=75de0d5d-9b43-4013-b63e-a62204051b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:28:4f:a2:67:89:84:39:4d:e1:ba:d5:28:9a: 2b:d3:66:2b:69:ec:e2:7b:17:fb:a0:52:20:69:68: 2e:f9:c4:d8:6e:83:ed:81:91:3f:20:53:f6:1a:57: 97:e2:8c:0b:10:d9:b4:80:a5:0c:be:60:93:49:fb: 07:41:dd:f4:ca:f9:ec:b8:0e:28:51:76:08:bf:d1: 47:4d:7d:31:c8:bc:a7:c5:ba:13:6c:c4:d9:2d:3a: c9:65:c6:59:49:ae:1f:c9:08:0b:b7:ff:c6:47:4a: a5:f1:66:5e:ef:75:d5:08:ee:24:2d:9d:49:ba:2d: 28:2f:87:fc:22:67:94:f7:2e:d0:64:0f:64:2e:43: 75:88:f1:1b:72:31:6c:24:74:e8:e4:45:51:2c:92: 49:b4:c5:fe:ce:f5:be:8e:3a:99:db:cd:f1:40:e9: fa:8d:05:ff:94:14:e3:45:f5:3b:e3:a8:8d:68:84: 83:31:57:d7:f6:e1:9b:81:a6:40:db:a3:1f:8d:3a: 75:87:5f:09:b6:3d:53:04:81:5b:1d:c5:4d:78:dd: e7:e8:eb:6c:bf:c0:02:64:d8:41:43:a5:ed:bc:aa: b0:12:e3:38:9d:53:a3:dd:99:58:b3:31:54:e2:23: f7:3b:f7:cf:56:c4:55:f1:e7:3e:06:0f:43:70:05: 8a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C7:03:6E:F8:B2:12:2B:7C:D7:7F:49:BB:07:08:70:3F:8B:EE:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe3a558-c412-364b-a184-227a89db9e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.161.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:cc:c9:9f:33:58:13:5b:7f:3f:6f:e0:6a:a9:f3:cd:31:3e: dc:9d:59:2c:16:25:10:81:13:b0:f0:c5:ed:6a:b5:55:ca:cc: 02:6e:bc:99:15:3b:23:c0:22:a2:73:f6:71:ea:c1:9a:ae:f0: 0a:14:50:e8:93:ac:03:fc:84:01:cb:f7:f7:35:f7:3d:f4:c3: 32:66:4a:27:71:75:6e:3e:63:77:a8:38:78:34:0b:25:35:8f: 82:d3:7b:c3:8f:5d:01:6c:4d:8b:f4:2f:3a:7a:f3:85:8b:78: c6:12:fd:08:7a:d5:dc:77:ac:b9:88:eb:b6:7d:6e:78:d2:84: 78:71:bb:34:f2:2b:69:cc:0f:29:a0:83:09:e0:cf:fa:d2:96: a0:74:dc:a9:26:58:9f:a9:be:8e:20:38:a9:68:87:b3:b6:4b: a5:f1:57:85:93:d8:03:b4:76:ca:df:b4:9e:1d:87:c3:2a:96: 2a:e8:a3:38:d3:25:64:60:01:c7:cf:0d:04:d1:d7:4b:19:33: a5:1f:03:59:f1:1c:0f:f1:aa:8e:a9:2b:e2:d0:fb:c8:fa:c9: d4:1e:5e:5f:37:5c:88:a5:99:09:ce:f3:c1:9b:71:f7:ff:24: a6:b4:c0:02:11:a9:4c:48:d0:e6:a4:d8:67:e3:73:66:31:f0: 5e:01:99:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrqExNfKVBK8bLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NzVkZTBkNWQtOWI0My00MDEzLWI2M2UtYTYyMjA0MDUxYjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yhPomeJhDlN4brVKJor02Yraeziexf7oFIg aWgu+cTYboPtgZE/IFP2GleX4owLENm0gKUMvmCTSfsHQd30yvnsuA4oUXYIv9FH TX0xyLynxboTbMTZLTrJZcZZSa4fyQgLt//GR0ql8WZe73XVCO4kLZ1Jui0oL4f8 ImeU9y7QZA9kLkN1iPEbcjFsJHTo5EVRLJJJtMX+zvW+jjqZ283xQOn6jQX/lBTj RfU746iNaISDMVfX9uGbgaZA26MfjTp1h18Jtj1TBIFbHcVNeN3n6Otsv8ACZNhB Q6XtvKqwEuM4nVOj3ZlYszFU4iP3O/fPVsRV8ec+Bg9DcAWK6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbHA274shIrfNd/SbsHCHA/i+4tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWZlM2E1NTgtYzQxMi0z NjRiLWExODQtMjI3YTg5ZGI5ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/MyZ8zWBNbfz9v4Gqp880xPtydWSwWJRCBE7Dwxe1qtVXKzAJuvJkV OyPAIqJz9nHqwZqu8AoUUOiTrAP8hAHL9/c19z30wzJmSidxdW4+Y3eoOHg0CyU1 j4LTe8OPXQFsTYv0Lzp684WLeMYS/Qh61dx3rLmI67Z9bnjShHhxuzTyK2nMDymg gwngz/rSlqB03KkmWJ+pvo4gOKloh7O2S6XxV4WT2AO0dsrftJ4dh8MqliroozjT JWRgAcfPDQTR10sZM6UfA1nxHA/xqo6pK+LQ+8j6ydQeXl83XIilmQnO88Gbcff/ JKa0wAIRqUxI0Oak2Gfjc2Yx8F4Bmdc= -----END CERTIFICATE-----Generated at Mon Apr 7 06:20:03 2025 by rpki-client