$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/04ca4493-92f5-337d-b186-db2cfa6ac49b.roa File: 04ca4493-92f5-337d-b186-db2cfa6ac49b.roa (raw, json) Hash identifier: pGv503T2Q1kft2EnvSqwaJZkmfw+MCcq2gCuZIzQvoE= Subject key identifier: A0:61:FB:11:EF:22:9A:57:1D:1A:96:A4:FB:07:F2:D0:DF:75:69:91 Certificate issuer: /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Certificate serial: 010D0C9F43285849B9A9FF75181182EF8B30C580 Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/04ca4493-92f5-337d-b186-db2cfa6ac49b.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 397422 IP address blocks: 67.210.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a9:ff:75:18:11:82:ef:8b:30:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=33bcca68-2114-4273-b135-315a682d268c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:93:45:7b:e9:c3:0f:9c:b4:e9:64:77:e6:97: 8d:54:02:1e:ef:ff:ad:db:b6:f8:8d:d1:0d:1a:d9: 2e:43:2f:65:e3:15:12:31:35:ec:88:cd:73:62:ce: f0:ef:09:51:74:fb:77:5c:cc:95:df:e8:a6:c5:1f: 0c:7e:b5:5a:5d:cd:8a:c4:d5:c4:fe:32:53:3d:9f: e4:9b:24:0f:53:cb:73:fc:8a:b1:94:fe:18:71:16: 4b:70:aa:43:83:14:c6:83:c8:1d:ac:bd:b4:48:68: cc:f3:40:e3:16:63:90:ca:a1:68:4a:93:8f:b3:a7: 1c:00:87:a5:8c:14:56:78:07:55:97:7b:a5:f1:cd: a3:82:09:3d:12:39:f9:4c:85:52:b3:bf:6b:24:32: 58:c2:1b:e2:1e:35:47:43:50:0c:1b:a3:54:36:95: 34:07:05:7a:db:3d:dc:82:75:a0:da:b9:ac:44:44: 38:e5:b5:1c:ab:c7:fd:4c:f9:90:3a:66:b4:0a:7b: 63:b4:9c:28:b9:5b:3b:50:07:cc:c5:ce:d8:17:07: 2f:03:a2:fc:3d:c2:24:13:c5:12:0a:63:0e:59:4c: 37:c1:30:b2:a9:d1:5c:5a:ef:65:37:cb:90:89:9f: e2:cc:9a:37:84:ac:a3:1c:43:ab:ad:ee:c2:a0:51: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:61:FB:11:EF:22:9A:57:1D:1A:96:A4:FB:07:F2:D0:DF:75:69:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/04ca4493-92f5-337d-b186-db2cfa6ac49b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl X509v3 Authority Key Identifier: keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer sbgp-ipAddrBlock: critical IPv4: 67.210.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d4:20:42:04:a6:76:6b:fb:16:cf:49:10:56:b4:2a:e6:2f: 10:7f:33:6f:54:06:87:5f:0d:0e:0c:86:b8:62:95:9c:53:8d: 39:21:17:30:eb:71:eb:2d:78:94:5a:91:e6:d5:79:44:14:3a: 21:83:a9:db:93:44:6a:b3:db:14:92:70:72:a9:bf:18:d7:3f: bf:d8:46:8d:f8:6f:15:bb:c8:1e:15:0f:76:e6:e8:c7:a6:2f: 73:3d:61:7c:2f:97:05:13:1b:e8:4e:39:7b:bf:cd:cc:b3:55: 34:bd:37:59:88:d2:a2:06:05:ad:25:1d:19:55:52:84:3b:06: 42:ae:00:8e:ee:1e:73:90:a6:67:a5:eb:b1:d3:71:3e:40:92: 7b:47:c1:68:65:2c:7e:2a:3f:7d:3a:fe:aa:10:00:4f:ea:a6: 96:6e:70:24:65:36:6d:7c:28:19:5d:27:33:08:e3:12:da:96: 82:bf:11:79:8a:8b:fd:7e:3d:63:b2:56:e5:1b:99:b5:8e:39: de:44:82:b9:aa:68:46:54:1f:f7:60:06:d2:dc:e5:f3:89:49: 68:57:0c:e5:78:4f:c4:d2:b6:a2:6a:6f:d2:f8:6a:32:80:f2: 59:a2:31:e7:35:44:5b:c4:22:cd:e1:f7:37:62:33:b3:ac:3f: 83:ca:76:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qf91GBGC74swxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz ZmY0MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk MzNiY2NhNjgtMjExNC00MjczLWIxMzUtMzE1YTY4MmQyNjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZNFe+nDD5y06WR35peNVAIe7/+t27b4jdEN GtkuQy9l4xUSMTXsiM1zYs7w7wlRdPt3XMyV3+imxR8MfrVaXc2KxNXE/jJTPZ/k myQPU8tz/IqxlP4YcRZLcKpDgxTGg8gdrL20SGjM80DjFmOQyqFoSpOPs6ccAIel jBRWeAdVl3ul8c2jggk9Ejn5TIVSs79rJDJYwhviHjVHQ1AMG6NUNpU0BwV62z3c gnWg2rmsREQ45bUcq8f9TPmQOma0CntjtJwouVs7UAfMxc7YFwcvA6L8PcIkE8US CmMOWUw3wTCyqdFcWu9lN8uQiZ/izJo3hKyjHEOrre7CoFElCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBh+xHvIppXHRqWpPsH8tDfdWmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3 MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvMDRjYTQ0OTMtOTJmNS0z MzdkLWIxODYtZGIyY2ZhNmFjNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ9LIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLUIEIEpnZr+xbPSRBWtCrmLxB/M29UBodfDQ4MhrhilZxTjTkhFzDr cesteJRakebVeUQUOiGDqduTRGqz2xSScHKpvxjXP7/YRo34bxW7yB4VD3bm6Mem L3M9YXwvlwUTG+hOOXu/zcyzVTS9N1mI0qIGBa0lHRlVUoQ7BkKuAI7uHnOQpmel 67HTcT5AkntHwWhlLH4qP306/qoQAE/qppZucCRlNm18KBldJzMI4xLaloK/EXmK i/1+PWOyVuUbmbWOOd5EgrmqaEZUH/dgBtLc5fOJSWhXDOV4T8TStqJqb9L4ajKA 8lmiMec1RFvEIs3h9zdiM7OsP4PKdhE= -----END CERTIFICATE-----Generated at Tue Jun 10 09:23:34 2025 by rpki-client