$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa File: d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa (raw, json) Hash identifier: 7fXDIUAmNqxYJIG2TgaG41Zf+uCZ3ffGVL2HJKBS42c= Subject key identifier: CD:FE:CC:05:36:1A:27:63:FB:90:AA:9D:0B:8C:51:36:2F:A8:9C:53 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584957F4197D40C9091085120D80 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 11232 IP address blocks: 67.217.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:19:7d:40:c9:09:10:85:12:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=7a8c0bad-cb3d-489f-abf9-2072384c6826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bb:8d:9f:72:35:1d:c6:b1:d5:6b:dd:3d:37: 13:7f:f6:d9:69:f1:a6:74:7e:cd:4b:ae:5d:47:7d: 22:67:aa:4b:24:50:f0:57:87:52:90:0e:da:76:a1: 6e:32:98:42:76:09:64:ec:81:44:d7:23:71:0e:31: 0b:3f:9f:a9:ab:5c:dc:f6:ba:e0:19:20:bc:51:ca: ea:19:e3:52:37:10:2d:21:a9:2a:14:81:8e:84:28: 49:d1:5a:0d:8f:3e:a9:c4:05:d2:b1:f1:e7:0a:35: eb:11:0b:bb:cf:65:41:47:d7:9d:13:24:d9:d9:66: db:dc:c2:2e:a5:bc:5f:6d:f1:01:04:63:46:c5:52: 6f:1b:1d:1d:45:f3:ac:e0:cc:af:82:16:f5:5f:b5: c5:b0:6a:e7:59:0f:44:1b:d4:af:05:6e:01:44:03: 99:de:9f:d6:87:6e:90:28:23:fb:c0:71:6a:8a:5a: f7:9d:29:20:a1:a3:45:68:cc:87:da:2f:9f:63:f8: 25:19:53:48:d8:43:66:a9:a2:6f:a5:32:9c:29:a6: ca:ab:04:e3:01:98:24:86:a1:95:66:c9:72:4f:f4: a1:a3:11:34:11:c3:3b:11:04:33:20:8b:18:d4:94: 44:ce:30:50:80:d0:aa:f8:d8:4a:9d:74:d4:de:ca: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FE:CC:05:36:1A:27:63:FB:90:AA:9D:0B:8C:51:36:2F:A8:9C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 67.217.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c9:11:65:2c:05:77:5c:45:48:05:1f:6d:c3:3b:74:47:c8: d5:49:56:ff:ba:c7:c5:f6:cc:27:f1:3d:f2:9d:41:53:d0:e6: 96:c2:f1:de:e7:01:48:4f:fe:c0:04:b3:c8:1f:4f:3a:80:40: d1:02:44:05:3b:fb:3f:b8:01:d4:e5:ba:05:81:f0:bd:50:9d: ef:4e:36:4c:9a:26:0d:5f:66:71:b7:81:bf:38:4c:21:41:d2: 72:41:aa:0c:78:44:db:28:9f:6e:07:6d:b6:0f:b7:37:92:ee: d3:5d:bf:b7:d3:1a:57:cf:8e:62:f6:49:87:55:06:82:c8:96: 7d:ef:ff:24:cd:2b:f5:5d:1b:cf:9c:48:c9:b2:8b:f2:fe:18: 19:25:3d:3b:9e:1e:9a:12:08:ab:61:0a:46:e4:25:3e:7d:e2: f9:28:97:d0:da:d3:67:36:94:28:68:8b:e5:cb:0c:bc:15:39: 6c:14:1b:99:dd:b0:28:e1:7a:f1:41:97:96:ff:54:b2:4f:4f: 06:38:4e:b5:a9:bc:37:cd:3d:a6:0b:90:03:04:0f:1f:56:1b: 32:2b:3c:a5:2b:e2:0f:b3:ba:a2:95:13:8d:ea:ea:10:b7:39: 18:e1:d0:41:62:ec:90:ea:8d:c3:1f:64:55:7c:fd:f4:02:f2: c3:b8:e9:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9Bl9QMkJEIUSDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk N2E4YzBiYWQtY2IzZC00ODlmLWFiZjktMjA3MjM4NGM2ODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLuNn3I1Hcax1WvdPTcTf/bZafGmdH7NS65d R30iZ6pLJFDwV4dSkA7adqFuMphCdglk7IFE1yNxDjELP5+pq1zc9rrgGSC8Ucrq GeNSNxAtIakqFIGOhChJ0VoNjz6pxAXSsfHnCjXrEQu7z2VBR9edEyTZ2Wbb3MIu pbxfbfEBBGNGxVJvGx0dRfOs4Myvghb1X7XFsGrnWQ9EG9SvBW4BRAOZ3p/Wh26Q KCP7wHFqilr3nSkgoaNFaMyH2i+fY/glGVNI2ENmqaJvpTKcKabKqwTjAZgkhqGV ZslyT/ShoxE0EcM7EQQzIIsY1JREzjBQgNCq+NhKnXTU3srkrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3+zAU2Gidj+5CqnQuMUTYvqJxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZDQxMjdmNDMtYWRiYy0z MzU4LTg4YWYtYTlhZTliMGE2M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9kUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfJEWUsBXdcRUgFH23DO3RHyNVJVv+6x8X2zCfxPfKdQVPQ5pbC8d7n AUhP/sAEs8gfTzqAQNECRAU7+z+4AdTlugWB8L1Qne9ONkyaJg1fZnG3gb84TCFB 0nJBqgx4RNson24HbbYPtzeS7tNdv7fTGlfPjmL2SYdVBoLIln3v/yTNK/VdG8+c SMmyi/L+GBklPTueHpoSCKthCkbkJT594vkol9Da02c2lChoi+XLDLwVOWwUG5nd sCjhevFBl5b/VLJPTwY4TrWpvDfNPaYLkAMEDx9WGzIrPKUr4g+zuqKVE43q6hC3 ORjh0EFi7JDqjcMfZFV8/fQC8sO46Qs= -----END CERTIFICATE-----Generated at Fri Apr 11 23:30:16 2025 by rpki-client