$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/457d63bd-1b71-323a-a54b-ee6030546945.roa File: 457d63bd-1b71-323a-a54b-ee6030546945.roa (raw, json) Hash identifier: oT7Lk4EzYfmQwkFFuGzjczHPiQE/4jgdZ1x2z9RRAL0= Subject key identifier: 34:77:40:15:01:4B:95:17:82:BC:A3:CC:4C:D1:EC:BC:D4:1A:B5:31 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858493C092CCDE1788224A9934B80 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/457d63bd-1b71-323a-a54b-ee6030546945.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 4213 IP address blocks: 67.229.252.0/23 maxlen: 24 67.229.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:2c:cd:e1:78:82:24:a9:93:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=121c5aa6-508b-47b0-be0d-800021400c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:89:bf:6c:af:13:bd:f9:8b:0f:3b:98:47: 0d:d2:05:59:c4:10:0a:73:a3:30:46:53:73:8e:ef: cf:91:07:2c:ab:16:55:21:a1:68:b9:f3:c5:dd:73: e5:96:41:fb:7b:38:af:37:d5:52:02:d9:5f:3a:67: ae:1c:d4:7f:ac:79:aa:6d:cc:c7:e4:67:6f:bb:6d: e0:1d:54:41:89:60:89:8e:5f:be:37:db:65:ec:3f: 97:29:7c:b5:91:76:e9:12:8e:bf:4c:70:b9:7b:64: f4:cb:ce:1a:dd:99:4f:3f:d2:83:ce:4c:8c:94:dc: db:e8:71:1d:75:ed:32:b3:91:a6:18:09:a7:37:66: b3:4c:12:39:75:99:d3:04:7b:49:8d:16:c3:ac:fb: e5:b5:6e:12:f9:de:2a:24:63:10:f8:98:35:c8:f6: 5b:5f:dd:58:1a:66:5e:07:64:3f:f6:46:fd:63:20: 07:5d:26:75:5d:43:58:25:cf:5e:89:e5:f6:73:cf: f3:96:fc:91:6b:8e:78:81:37:9a:c8:bb:51:7b:a9: 32:9e:47:35:a2:2d:9e:6d:f7:0c:3f:e8:6d:d7:5a: 80:8c:96:76:df:85:f6:b8:52:a0:84:d9:c0:54:ef: 1e:ee:9d:47:94:3a:b7:e2:0c:56:cf:99:75:71:80: 7b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:77:40:15:01:4B:95:17:82:BC:A3:CC:4C:D1:EC:BC:D4:1A:B5:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/457d63bd-1b71-323a-a54b-ee6030546945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 67.229.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:df:81:41:30:a0:d2:8a:57:ff:7f:76:02:ec:09:f9:67:15: 61:69:60:24:6d:31:a6:97:55:9e:bc:06:d9:43:de:97:08:12: f8:d2:3d:07:f2:c6:56:de:3e:65:69:8d:e2:72:7f:00:30:90: dc:28:1f:72:81:6e:bd:e4:7e:4f:86:32:85:ec:fd:28:87:da: 68:9c:ce:95:03:64:aa:8a:8e:57:e7:70:e9:12:c1:fa:be:69: 0f:77:bc:72:75:37:35:84:d9:cc:5e:0c:56:f9:5e:24:bc:44: 02:da:13:a4:89:c0:e5:1f:6f:aa:60:d1:38:2b:73:2e:d7:10: 78:52:2b:4e:02:95:a0:73:e4:57:30:55:65:0b:8f:c1:30:20: 4a:95:5a:cc:0c:cf:e6:47:ff:3c:70:21:1a:5c:94:b2:8d:28: 18:a4:7d:b2:1e:6e:10:02:fc:07:55:3f:7f:b7:cd:60:87:37: 15:18:9f:eb:49:82:a4:b4:2e:13:0b:26:42:53:95:7d:0b:36: 76:e6:30:8c:ea:2b:45:a4:43:6c:26:5a:fb:41:eb:5c:86:8b: 4c:89:ed:c5:9f:91:f6:49:40:8b:9c:7a:0a:0b:37:d8:b8:fc: 52:8d:f9:b9:91:37:17:2d:cf:ea:00:84:01:64:ec:1b:ee:60: 4b:5a:ae:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSzN4XiCJKmTS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MTIxYzVhYTYtNTA4Yi00N2IwLWJlMGQtODAwMDIxNDAwYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC2Jv2yvE735iw87mEcN0gVZxBAKc6MwRlNz ju/PkQcsqxZVIaFoufPF3XPllkH7ezivN9VSAtlfOmeuHNR/rHmqbczH5Gdvu23g HVRBiWCJjl++N9tl7D+XKXy1kXbpEo6/THC5e2T0y84a3ZlPP9KDzkyMlNzb6HEd de0ys5GmGAmnN2azTBI5dZnTBHtJjRbDrPvltW4S+d4qJGMQ+Jg1yPZbX91YGmZe B2Q/9kb9YyAHXSZ1XUNYJc9eieX2c8/zlvyRa454gTeayLtRe6kynkc1oi2ebfcM P+ht11qAjJZ234X2uFKghNnAVO8e7p1HlDq34gxWz5l1cYB7EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR3QBUBS5UXgryjzEzR7LzUGrUxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNDU3ZDYzYmQtMWI3MS0z MjNhLWE1NGItZWU2MDMwNTQ2OTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ+X8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7fgUEwoNKKV/9/dgLsCflnFWFpYCRtMaaXVZ68BtlD3pcIEvjSPQfy xlbePmVpjeJyfwAwkNwoH3KBbr3kfk+GMoXs/SiH2miczpUDZKqKjlfncOkSwfq+ aQ93vHJ1NzWE2cxeDFb5XiS8RALaE6SJwOUfb6pg0Tgrcy7XEHhSK04ClaBz5Fcw VWULj8EwIEqVWswMz+ZH/zxwIRpclLKNKBikfbIebhAC/AdVP3+3zWCHNxUYn+tJ gqS0LhMLJkJTlX0LNnbmMIzqK0WkQ2wmWvtB61yGi0yJ7cWfkfZJQIucegoLN9i4 /FKN+bmRNxctz+oAhAFk7BvuYEtarv8= -----END CERTIFICATE-----Generated at Fri Apr 4 16:05:49 2025 by rpki-client