$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa File: 67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa (raw, json) Hash identifier: gEmhPVOI/n7D57C36nRIhEMJULJFbktU9kDjPJK6CKI= Subject key identifier: AB:E2:A2:FC:36:E3:D9:15:B3:31:3B:7F:19:A9:EB:05:E9:5C:2D:B5 Certificate issuer: /CN=54a220d5-4ac8-4e34-bec0-5a555376e674 Certificate serial: 010D0C9F4328584898D605DFC1496DB47CB6BC38 Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 19381 IP address blocks: 67.212.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:05:df:c1:49:6d:b4:7c:b6:bc:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=81b3f560-0cbb-4c07-990c-dfd5050c7951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ca:91:f1:ae:1f:88:b0:b2:e7:10:32:db:2c: 96:6d:c5:4d:d3:f5:2a:1b:42:26:ae:89:62:ed:ce: 61:d7:53:ce:e9:09:58:c7:de:86:2d:d6:ba:96:85: 3c:5a:8a:1f:e9:23:1c:2d:07:a4:e6:42:f1:a5:52: 0e:2a:1f:ea:d7:49:69:03:de:f3:9b:02:ad:d3:1f: 5e:f6:5e:2c:b9:37:c9:f6:dd:23:0a:3a:3d:4f:3a: 7d:bc:a3:bc:e8:71:49:7d:8b:75:de:bb:cf:7a:ad: a2:31:8f:df:98:04:88:8c:88:88:d7:63:c4:02:f7: 81:e3:05:df:05:44:20:4d:53:d9:0d:4d:21:b8:8a: 9b:9c:0a:7d:63:0e:d4:c3:25:3c:5c:c6:3e:cd:6b: 40:10:c3:05:a5:9e:d7:a9:34:4f:cb:eb:89:0b:54: f5:2a:52:64:b2:26:22:20:bd:f0:58:2e:b9:9d:95: b5:f4:49:e7:70:e8:05:6d:90:d9:2a:93:39:86:d2: c3:0d:b2:a7:97:b7:f9:4d:96:e3:01:d6:3f:a4:00: d5:5c:b7:0b:07:a5:44:74:ad:ef:d7:a3:e9:3c:e0: 14:23:fb:e7:73:fb:54:42:d9:3b:d6:34:a7:27:c7: dd:62:a6:c6:98:5f:a5:18:a4:58:14:ce:98:0d:35: 29:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E2:A2:FC:36:E3:D9:15:B3:31:3B:7F:19:A9:EB:05:E9:5C:2D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl X509v3 Authority Key Identifier: keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer sbgp-ipAddrBlock: critical IPv4: 67.212.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:21:5c:98:79:03:b3:47:cb:93:9e:ea:32:c6:1d:c3:69:96: 1d:84:fa:81:41:b0:9a:d9:f0:6f:5d:25:dd:06:7c:88:f0:28: 04:73:91:77:82:2a:05:32:ca:92:29:12:b8:e6:bd:90:56:82: dc:e4:2a:8f:87:98:f0:2d:ed:75:2d:5c:36:c5:25:b7:a8:5f: 0a:c6:ae:20:c8:56:a8:a7:42:07:73:40:10:89:7d:ab:3c:47: 3c:58:36:b6:73:d9:fd:9c:0b:63:33:36:2f:8a:d0:5e:6f:4f: 9f:f7:00:ab:f9:59:fd:8c:7e:a2:01:e8:97:83:5e:fb:28:48: bb:52:85:a2:8c:2e:9d:7a:98:ad:a9:dd:13:24:6a:a0:96:6f: 6d:c2:d2:69:17:05:cd:2b:49:25:83:17:6b:13:4d:3e:04:d7: 79:49:a8:61:7e:9c:ee:f8:af:33:95:8e:bd:a7:d9:ea:f3:af: e2:0f:73:f9:af:55:9a:6d:61:e1:84:d6:02:ff:e7:42:a1:6e: 3f:11:27:66:15:63:b0:05:a3:f3:4d:39:7e:26:02:5e:0f:a2: cf:a3:5b:bd:7c:53:d6:9e:30:14:dd:99:21:67:68:8a:6f:b8: 2c:a8:a3:4e:da:a0:b5:34:75:03:61:a4:e2:04:0d:68:e2:9a: 76:3f:49:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gXfwUlttHy2vDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRhMjIwZDUtNGFjOC00ZTM0LWJlYzAtNWE1NTUzNzZl Njc0MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk ODFiM2Y1NjAtMGNiYi00YzA3LTk5MGMtZGZkNTA1MGM3OTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MqR8a4fiLCy5xAy2yyWbcVN0/UqG0Imroli 7c5h11PO6QlYx96GLda6loU8Woof6SMcLQek5kLxpVIOKh/q10lpA97zmwKt0x9e 9l4suTfJ9t0jCjo9Tzp9vKO86HFJfYt13rvPeq2iMY/fmASIjIiI12PEAveB4wXf BUQgTVPZDU0huIqbnAp9Yw7UwyU8XMY+zWtAEMMFpZ7XqTRPy+uJC1T1KlJksiYi IL3wWC65nZW19EnncOgFbZDZKpM5htLDDbKnl7f5TZbjAdY/pADVXLcLB6VEdK3v 16PpPOAUI/vnc/tUQtk71jSnJ8fdYqbGmF+lGKRYFM6YDTUp4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKviovw249kVszE7fxmp6wXpXC21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEy MjBkNS00YWM4LTRlMzQtYmVjMC01YTU1NTM3NmU2NzQvNjdlZTFhZmQtMTQzNC0z YTBmLThhYzYtNTUyNGY2ODk1Y2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTRhMjIwZDUtNGFjOC00ZTM0LWJl YzAtNWE1NTUzNzZlNjc0LzU0YTIyMGQ1LTRhYzgtNGUzNC1iZWMwLTVhNTU1Mzc2 ZTY3NC5jcmwwHwYDVR0jBBgwFoAUJfLGrILTbf2KIWdNGYMDZqEPl3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEyMjBkNS00YWM4LTRlMzQtYmVjMC01YTU1 NTM3NmU2NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9TAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFghXJh5A7NHy5Oe6jLGHcNplh2E+oFBsJrZ8G9dJd0GfIjwKARzkXeC KgUyypIpErjmvZBWgtzkKo+HmPAt7XUtXDbFJbeoXwrGriDIVqinQgdzQBCJfas8 RzxYNrZz2f2cC2MzNi+K0F5vT5/3AKv5Wf2MfqIB6JeDXvsoSLtShaKMLp16mK2p 3RMkaqCWb23C0mkXBc0rSSWDF2sTTT4E13lJqGF+nO74rzOVjr2n2erzr+IPc/mv VZptYeGE1gL/50Khbj8RJ2YVY7AFo/NNOX4mAl4Pos+jW718U9aeMBTdmSFnaIpv uCyoo07aoLU0dQNhpOIEDWjimnY/Sfo= -----END CERTIFICATE-----Generated at Fri Mar 14 11:16:40 2025 by rpki-client