$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa File: 08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa (raw, json) Hash identifier: FvZrhz8pKTy2Ke1zBWOFs6psdkoBGXCm+PAkLp3Kp5U= Subject key identifier: F8:DD:89:65:11:5B:68:B7:93:06:65:3E:8D:33:8A:42:CA:03:BF:00 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285848EC967F03149B69C38098B200 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 42 IP address blocks: 67.21.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:7f:03:14:9b:69:c3:80:98:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=3c6fdcdb-f737-4a71-aa88-464ef10982a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7a:7a:81:ce:bf:f3:0e:0f:1c:47:27:88:a9: fc:2b:93:5d:f1:c0:5a:07:18:19:a5:19:88:53:21: 36:99:4c:0e:ca:63:f4:87:d4:b1:fc:88:31:b6:8c: 46:4f:9e:3d:0d:fe:02:49:ab:94:f0:36:7d:87:75: 9a:b5:cd:44:e2:e9:7b:b9:a9:b4:b6:2d:d4:27:92: 5a:77:4f:ae:ea:7c:54:fa:22:58:f6:1a:0f:3d:08: 7e:e2:07:5b:98:aa:a1:48:fc:98:0a:4a:d5:ad:f0: ce:ee:8d:1e:d8:5b:c8:60:4d:7d:d9:f9:b0:c8:de: 44:a0:70:1c:d9:3e:e0:33:d8:14:dc:d0:45:a4:8a: 48:75:45:37:7c:43:4f:94:ac:f1:b8:d8:28:bf:83: 62:ac:73:ec:41:45:1b:15:e7:05:b4:03:8c:65:bb: 62:0c:5a:6b:3a:9b:03:5f:50:e5:f1:2f:4a:58:c4: fe:c2:e7:39:0c:29:ab:c0:c2:06:f6:be:08:eb:08: 4b:7a:d0:c1:2e:8a:35:b9:94:d0:61:a8:14:1e:f9: d4:0b:15:5f:c0:55:a0:27:14:d1:03:f1:11:59:2d: 9d:60:d2:61:02:66:59:45:a1:48:a3:28:de:93:04: fb:54:5f:00:06:4a:aa:67:58:76:31:38:bd:e5:e5: a8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DD:89:65:11:5B:68:B7:93:06:65:3E:8D:33:8A:42:CA:03:BF:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/08cfbc8f-ad4b-3bde-9029-1164f0b530da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 67.21.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:8a:54:a5:67:a6:d3:b4:09:e2:e8:77:7c:54:5d:eb:af:95: 2d:e3:78:7d:81:7e:ee:df:ac:0f:6b:38:10:2d:26:75:e3:14: 7c:80:47:65:bd:dc:51:6c:90:a3:d0:8f:44:be:2e:78:ca:9b: 57:2a:5c:ca:5f:29:09:32:69:2a:4f:03:11:43:f2:0d:e6:e9: 5f:8b:2d:f0:8e:5e:5b:8d:ec:35:2d:1a:6b:a6:ba:fb:62:7e: 70:c8:cd:b8:df:03:2c:71:31:60:49:d3:b5:a5:36:f7:b7:c2: 24:be:ad:3f:53:5a:36:17:de:bc:72:a6:ef:52:23:87:1d:44: 4a:c7:43:6a:57:1e:de:99:6f:81:da:83:49:27:eb:8c:1f:13: 58:d1:61:8f:78:57:f8:c7:bb:31:53:2d:a6:d8:15:bb:5b:66: d8:89:61:86:9f:b6:c8:db:a6:7b:58:3a:ea:ae:36:f4:dd:06: 08:26:56:18:e7:4d:95:d9:32:33:6c:1c:b8:4f:90:eb:23:44: c2:29:6f:31:f8:25:08:d5:a5:39:d1:22:7d:a8:6b:21:1b:c6: 0e:0a:f7:39:c2:32:c5:fd:7b:cf:7b:2b:49:79:ba:fc:e6:b8: 36:ba:c5:e5:c4:ba:8a:2b:84:bf:f2:d9:f9:f6:4b:e4:f0:b7: 7b:0b:06:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjsln8DFJtpw4CYsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk M2M2ZmRjZGItZjczNy00YTcxLWFhODgtNDY0ZWYxMDk4MmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHp6gc6/8w4PHEcniKn8K5Nd8cBaBxgZpRmI UyE2mUwOymP0h9Sx/IgxtoxGT549Df4CSauU8DZ9h3Watc1E4ul7uam0ti3UJ5Ja d0+u6nxU+iJY9hoPPQh+4gdbmKqhSPyYCkrVrfDO7o0e2FvIYE192fmwyN5EoHAc 2T7gM9gU3NBFpIpIdUU3fENPlKzxuNgov4NirHPsQUUbFecFtAOMZbtiDFprOpsD X1Dl8S9KWMT+wuc5DCmrwMIG9r4I6whLetDBLoo1uZTQYagUHvnUCxVfwFWgJxTR A/ERWS2dYNJhAmZZRaFIoyjekwT7VF8ABkqqZ1h2MTi95eWouQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjdiWURW2i3kwZlPo0zikLKA78AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvMDhjZmJjOGYtYWQ0Yi0z YmRlLTkwMjktMTE2NGYwYjUzMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQxUlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALGKVKVnptO0CeLod3xUXeuvlS3jeH2Bfu7frA9rOBAtJnXjFHyAR2W9 3FFskKPQj0S+LnjKm1cqXMpfKQkyaSpPAxFD8g3m6V+LLfCOXluN7DUtGmumuvti fnDIzbjfAyxxMWBJ07WlNve3wiS+rT9TWjYX3rxypu9SI4cdRErHQ2pXHt6Zb4Ha g0kn64wfE1jRYY94V/jHuzFTLabYFbtbZtiJYYaftsjbpntYOuquNvTdBggmVhjn TZXZMjNsHLhPkOsjRMIpbzH4JQjVpTnRIn2oayEbxg4K9znCMsX9e897K0l5uvzm uDa6xeXEuoorhL/y2fn2S+Twt3sLBqo= -----END CERTIFICATE-----Generated at Sat Apr 5 21:38:07 2025 by rpki-client