$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa File: d859550a-458f-3e37-bf97-e6cd52ef8427.roa (raw, json) Hash identifier: lTjgFGb/axaQqehyz4SYqVRDllxEBEhlXfqqtGuz61k= Subject key identifier: 0E:89:04:ED:ED:17:13:98:0E:46:83:4A:EB:45:5B:7A:D2:A6:2F:BE Certificate issuer: /CN=a5e2d89d-6269-4405-9578-836517825b32 Certificate serial: 010D0C9F4328584953C40B03EAB4791853E82600 Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 13347 IP address blocks: 67.223.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:0b:03:ea:b4:79:18:53:e8:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=37669347-e25f-40bd-973a-35f0c88ffda6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c8:77:75:ba:33:a5:18:fd:c8:43:db:4d:dc: ad:c2:fb:c5:0d:03:86:a8:9e:48:6f:e0:57:a7:d5: 4b:85:dc:68:69:d1:af:a4:f5:cc:2a:d3:f4:34:b5: 0b:6e:62:56:6d:dc:f7:ef:b9:86:ae:7b:63:6c:1e: 26:7f:32:bd:a7:6f:e2:e4:2d:19:ff:41:64:c4:f3: 6f:75:ff:26:ab:24:0a:13:23:14:4a:13:44:c7:53: 8c:16:48:d1:9c:6b:44:96:1e:a1:47:3c:da:a4:c4: 4b:f8:c3:b4:98:13:cf:7e:f0:89:4e:c0:92:ba:d9: cc:b5:7f:a9:94:dd:2c:ec:07:c5:c7:95:d9:c9:93: 54:15:aa:7b:3e:dd:03:05:6a:12:56:7c:26:fc:0e: 82:15:49:60:5d:fe:e6:c7:51:d9:10:98:ab:a2:c0: 81:c9:ed:e6:c5:7c:b7:33:dc:b5:ef:c4:7c:0f:80: af:6b:8f:6d:b3:9d:03:0d:b9:ab:25:29:9d:6a:ad: 2d:e4:f2:52:ba:f6:77:40:0a:a2:41:93:6b:13:28: 76:2b:6b:50:dd:d1:ad:40:a7:95:e7:c7:5e:68:41: 22:78:eb:05:6a:88:28:65:82:26:82:6d:39:99:e7: fa:4d:0b:82:d5:e0:6c:9b:00:f8:89:c4:3e:6d:18: e6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:89:04:ED:ED:17:13:98:0E:46:83:4A:EB:45:5B:7A:D2:A6:2F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/d859550a-458f-3e37-bf97-e6cd52ef8427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl X509v3 Authority Key Identifier: keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer sbgp-ipAddrBlock: critical IPv4: 67.223.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:be:ba:7c:bd:98:76:03:57:fb:b3:2b:cb:df:eb:7f:ee:1f: 9e:ea:19:3b:8c:32:31:16:8f:fd:0b:f6:b4:9e:f7:03:53:89: 18:6c:a8:db:2a:aa:64:ba:cd:04:ed:4a:22:f3:ac:eb:18:6f: 81:aa:3f:3b:4b:5c:01:5d:54:68:7c:6e:1d:d0:e1:00:c9:6a: 5f:31:22:df:84:5c:55:dd:d5:a4:69:1c:9d:e9:72:fd:bc:46: 62:93:2d:e2:3b:d5:5d:7a:2b:a2:50:d2:93:f1:7e:72:a4:87: 4e:91:22:e1:93:d2:a2:7b:f0:ad:7f:c7:8e:e8:1e:26:9c:54: e3:7b:4b:9a:90:f7:76:5f:8f:b6:49:af:28:f2:98:78:17:30: 68:7d:2c:26:4a:bc:cf:ea:6a:b6:e6:34:56:61:cf:c7:f3:5f: 0f:ad:12:88:5e:61:8a:57:e0:26:b4:14:67:9c:84:6a:0b:4c: ee:94:6f:0a:c9:5f:ff:76:be:8d:5f:a2:a3:e7:7d:85:1e:47: bf:c3:97:fe:dc:f0:93:a0:cb:cf:ce:a3:0a:38:3a:be:06:57: b0:bb:3e:14:46:4f:37:f0:0e:08:df:87:ac:17:83:18:4b:1c: 68:8b:e7:0e:75:e3:ed:13:24:97:fa:09:01:a5:b8:a1:4c:5a: f9:66:ec:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxAsD6rR5GFPoJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMmQ4OWQtNjI2OS00NDA1LTk1NzgtODM2NTE3ODI1 YjMyMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk Mzc2NjkzNDctZTI1Zi00MGJkLTk3M2EtMzVmMGM4OGZmZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8h3dbozpRj9yEPbTdytwvvFDQOGqJ5Ib+BX p9VLhdxoadGvpPXMKtP0NLULbmJWbdz377mGrntjbB4mfzK9p2/i5C0Z/0FkxPNv df8mqyQKEyMUShNEx1OMFkjRnGtElh6hRzzapMRL+MO0mBPPfvCJTsCSutnMtX+p lN0s7AfFx5XZyZNUFap7Pt0DBWoSVnwm/A6CFUlgXf7mx1HZEJirosCBye3mxXy3 M9y178R8D4Cva49ts50DDbmrJSmdaq0t5PJSuvZ3QAqiQZNrEyh2K2tQ3dGtQKeV 58deaEEieOsFaogoZYImgm05mef6TQuC1eBsmwD4icQ+bRjmHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6JBO3tFxOYDkaDSutFW3rSpi++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUy ZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1MTc4MjViMzIvZDg1OTU1MGEtNDU4Zi0z ZTM3LWJmOTctZTZjZDUyZWY4NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTVlMmQ4OWQtNjI2OS00NDA1LTk1 NzgtODM2NTE3ODI1YjMyL2E1ZTJkODlkLTYyNjktNDQwNS05NTc4LTgzNjUxNzgy NWIzMi5jcmwwHwYDVR0jBBgwFoAU59BBfkHLFeCXHRtb1UGhvOtai84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUyZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1 MTc4MjViMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ99wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa+uny9mHYDV/uzK8vf63/uH57qGTuMMjEWj/0L9rSe9wNTiRhsqNsq qmS6zQTtSiLzrOsYb4GqPztLXAFdVGh8bh3Q4QDJal8xIt+EXFXd1aRpHJ3pcv28 RmKTLeI71V16K6JQ0pPxfnKkh06RIuGT0qJ78K1/x47oHiacVON7S5qQ93Zfj7ZJ ryjymHgXMGh9LCZKvM/qarbmNFZhz8fzXw+tEoheYYpX4Ca0FGechGoLTO6UbwrJ X/92vo1foqPnfYUeR7/Dl/7c8JOgy8/Oowo4Or4GV7C7PhRGTzfwDgjfh6wXgxhL HGiL5w514+0TJJf6CQGluKFMWvlm7PA= -----END CERTIFICATE-----Generated at Sun Apr 6 14:01:38 2025 by rpki-client