$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/05d0b982-15ad-3aba-833b-bc79bffb9baf.roa File: 05d0b982-15ad-3aba-833b-bc79bffb9baf.roa (raw, json) Hash identifier: H7CtAm+f8fceTkAGWHzoa7oUbWr8lA9iFMpppH0HGWU= Subject key identifier: 22:98:40:9A:5D:55:F1:47:F5:4E:B2:4E:C6:52:FE:20:61:39:11:73 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584949FE916F6B94AB8E67581480 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/05d0b982-15ad-3aba-833b-bc79bffb9baf.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 393885 IP address blocks: 67.22.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:91:6f:6b:94:ab:8e:67:58:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=e6f79e4b-0828-4fd4-9336-0d9617caeedc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e0:10:cd:00:8d:05:c4:73:8c:46:13:22:c9: bc:7a:5a:c6:3a:13:9c:1a:a7:b8:5f:df:88:ac:b8: b1:b9:08:76:6b:39:85:27:7f:3c:0e:1b:c2:b5:95: 18:01:99:60:18:ff:2d:7f:41:9d:e9:af:5e:9b:a5: b0:bd:39:f3:21:c8:04:1d:70:e4:00:d2:6e:a7:1d: 88:03:7b:ae:26:29:21:f8:d4:f1:ac:87:a9:d5:cf: 6a:94:a9:45:40:e7:a7:13:6d:86:dc:b2:a0:c1:5b: c1:58:14:c2:73:27:05:51:7a:29:9e:ca:98:81:ca: 16:30:5b:2d:78:5c:94:c0:39:78:fb:9d:92:c6:49: ad:37:6e:b6:a7:f6:c0:f4:ff:0b:66:37:a2:30:3b: 2c:f3:a3:9c:9b:64:e1:11:59:1d:52:24:6d:0f:ee: ca:22:75:44:81:95:91:4d:c1:e3:28:0e:e8:27:d2: 50:36:3a:6c:62:51:1c:d1:17:4f:0b:3f:ba:76:75: 1b:7b:02:e4:6b:4f:e2:7a:13:b6:67:b2:02:f4:30: 55:dc:02:40:d9:ec:e7:78:d7:9e:e0:68:4d:fa:89: 25:65:b4:9f:08:ff:b5:04:a1:96:17:d8:18:f7:55: b3:fb:13:47:06:ca:c3:ff:87:89:16:99:4a:79:14: fc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:98:40:9A:5D:55:F1:47:F5:4E:B2:4E:C6:52:FE:20:61:39:11:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/05d0b982-15ad-3aba-833b-bc79bffb9baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv4: 67.22.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:13:b9:40:38:31:04:0a:6f:fa:8d:aa:73:92:ea:7a:ca:ce: 15:62:04:c3:3f:5a:2e:43:eb:34:aa:34:1d:97:88:72:27:de: 5b:0f:a5:a0:30:ec:9a:27:b7:3c:07:ab:e5:e9:32:2b:4a:d7: 3b:81:c5:81:f1:8f:0e:80:96:b5:a8:08:44:a3:02:f0:0c:2e: fa:b2:38:ef:bd:8d:4e:f7:85:e0:f5:6d:5d:d0:85:28:52:e9: bf:47:0b:84:d6:44:35:06:6a:1d:54:02:04:35:36:19:bf:4b: 18:2a:97:a6:fa:65:6f:41:35:1e:e6:46:71:a8:d0:54:48:a7: 53:a2:95:94:5f:3f:19:41:54:81:3c:97:b9:28:ce:88:47:f2: 8b:64:00:04:b5:10:92:e2:0d:95:e4:38:b7:97:59:ea:ca:73: ff:b7:a7:73:db:f5:c9:10:48:9e:de:7b:c0:e0:51:77:a0:93: 47:21:5c:00:bd:e2:11:ec:30:b9:70:c1:31:bb:d2:23:28:36: 25:0b:53:c2:de:1a:28:4e:23:0c:2e:69:68:fe:4c:39:27:a8: 57:bb:c7:46:88:03:58:59:fb:f3:47:8c:e6:a5:13:de:c6:25: 14:40:11:cc:27:70:f4:6c:cd:f4:de:90:30:40:fb:90:10:39: a0:6c:8a:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pFva5SrjmdYFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZTZmNzllNGItMDgyOC00ZmQ0LTkzMzYtMGQ5NjE3Y2FlZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOAQzQCNBcRzjEYTIsm8elrGOhOcGqe4X9+I rLixuQh2azmFJ388DhvCtZUYAZlgGP8tf0Gd6a9em6WwvTnzIcgEHXDkANJupx2I A3uuJikh+NTxrIep1c9qlKlFQOenE22G3LKgwVvBWBTCcycFUXopnsqYgcoWMFst eFyUwDl4+52SxkmtN262p/bA9P8LZjeiMDss86Ocm2ThEVkdUiRtD+7KInVEgZWR TcHjKA7oJ9JQNjpsYlEc0RdPCz+6dnUbewLka0/iehO2Z7IC9DBV3AJA2ezneNee 4GhN+oklZbSfCP+1BKGWF9gY91Wz+xNHBsrD/4eJFplKeRT8NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKYQJpdVfFH9U6yTsZS/iBhORFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvMDVkMGI5ODItMTVhZC0z YWJhLTgzM2ItYmM3OWJmZmI5YmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQxaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4TuUA4MQQKb/qNqnOS6nrKzhViBMM/Wi5D6zSqNB2XiHIn3lsPpaAw 7JontzwHq+XpMitK1zuBxYHxjw6AlrWoCESjAvAMLvqyOO+9jU73heD1bV3QhShS 6b9HC4TWRDUGah1UAgQ1Nhm/Sxgql6b6ZW9BNR7mRnGo0FRIp1OilZRfPxlBVIE8 l7kozohH8otkAAS1EJLiDZXkOLeXWerKc/+3p3Pb9ckQSJ7ee8DgUXegk0chXAC9 4hHsMLlwwTG70iMoNiULU8LeGihOIwwuaWj+TDknqFe7x0aIA1hZ+/NHjOalE97G JRRAEcwncPRszfTekDBA+5AQOaBsiiY= -----END CERTIFICATE-----Generated at Sat Apr 12 10:08:23 2025 by rpki-client