$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa File: 7957af23-cbb4-36ed-805f-7806f26e4b02.roa (raw, json) Hash identifier: wYmLWoXALvxcIf6yWmLUvan46vgm7W652VdPqZTDQUU= Subject key identifier: 45:65:D1:62:0D:3A:84:B5:7A:98:01:13:3B:7E:39:FB:47:D6:8F:45 Certificate issuer: /CN=65a28276-f493-4a9f-9824-c9717c1cf6fd Certificate serial: 010D0C9F43285848E2D1076CBB65A5F87FD8CD00 Authority key identifier: 0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 16385 IP address blocks: 67.43.86.0/24 maxlen: 24 67.43.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:07:6c:bb:65:a5:f8:7f:d8:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a28276-f493-4a9f-9824-c9717c1cf6fd Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=8f590bc5-fb38-4401-92b8-824aa8075ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b9:4b:68:1d:84:b3:86:b6:ae:f7:91:5b:0c: d2:7c:34:1e:87:8e:0d:d9:39:8c:5e:59:cc:9f:4f: a4:1b:86:d2:5a:8d:5d:e9:dd:bd:18:71:68:73:39: 47:24:18:b7:25:c7:29:2a:b3:c3:7a:c0:79:09:e5: e3:ec:36:e0:92:60:1b:61:80:d1:5e:16:3a:1a:48: 0b:83:26:cf:0d:f4:e5:8b:7b:69:1e:d1:f7:64:52: 1c:de:6e:d3:0e:c4:4b:38:6a:73:05:b2:a2:0c:9c: 4f:47:81:a3:c1:39:d6:7f:07:3e:59:40:91:72:9e: 3c:84:fd:9d:2c:8c:d4:e7:1e:c5:46:df:63:29:72: bc:74:a7:f2:89:01:cd:08:63:49:15:a7:f6:6d:a3: 6c:f3:04:97:28:05:7a:aa:7d:e4:c9:3d:8b:dc:07: 52:0a:ab:b0:9f:21:1e:74:f8:4c:55:98:e5:2a:bb: be:89:ec:5a:fe:ff:87:18:82:5c:95:90:1b:7a:e2: d1:d3:69:b1:46:ec:28:ed:9c:e1:ef:34:71:57:e1: ad:56:ea:ba:3d:8c:57:ef:b5:5a:2e:e4:6d:d2:c3: e3:63:1d:b3:ad:41:08:8d:1f:b3:f6:bf:6d:12:41: 68:14:37:95:ec:c2:58:7d:6f:a1:57:cd:e4:fa:61: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:65:D1:62:0D:3A:84:B5:7A:98:01:13:3B:7E:39:FB:47:D6:8F:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl X509v3 Authority Key Identifier: keyid:0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer sbgp-ipAddrBlock: critical IPv4: 67.43.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:ce:7a:4c:0c:d7:40:a0:97:9e:fb:74:22:99:5f:18:b1:5f: 86:de:7a:d5:81:8d:cc:af:1b:ef:53:56:ef:98:db:62:34:99: fe:1c:e1:db:c3:62:b7:62:9d:86:b1:c5:b2:c0:37:22:57:bf: ea:80:32:72:07:c0:93:4e:fb:82:34:e1:30:e2:68:e4:6e:3d: 4f:6c:8a:91:a7:e0:2b:23:8f:2e:04:cc:a3:03:0f:96:10:bb: 97:c6:c8:05:a9:6c:c8:a7:40:b2:75:77:e9:be:07:e5:35:95: 6e:59:0a:52:72:00:75:31:69:4d:d6:c9:39:93:5d:2c:56:b5: 2c:31:ef:3d:d8:34:b8:9d:2a:7d:c0:78:52:ca:28:47:16:d7: f2:1e:53:e4:fd:1d:62:03:5c:9c:10:83:95:74:15:d8:36:c2: 61:e7:83:56:6a:48:9b:28:a5:51:fb:84:af:cd:d1:53:e6:ca: 82:de:19:e5:75:1e:f5:79:b7:59:f5:ac:75:1c:7c:24:85:27: 39:61:9a:a7:61:71:ea:e6:3c:a0:cb:9d:06:cd:6c:e7:2d:51: 27:fc:91:a3:6f:1f:8e:24:c8:3b:56:b9:f0:42:a6:8e:ea:e8: 5d:1c:4c:81:81:62:44:11:56:04:17:28:f3:2f:84:29:08:69: 95:30:e6:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Qdsu2Wl+H/YzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVhMjgyNzYtZjQ5My00YTlmLTk4MjQtYzk3MTdjMWNm NmZkMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk OGY1OTBiYzUtZmIzOC00NDAxLTkyYjgtODI0YWE4MDc1ZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLlLaB2Es4a2rveRWwzSfDQeh44N2TmMXlnM n0+kG4bSWo1d6d29GHFoczlHJBi3JccpKrPDesB5CeXj7DbgkmAbYYDRXhY6GkgL gybPDfTli3tpHtH3ZFIc3m7TDsRLOGpzBbKiDJxPR4GjwTnWfwc+WUCRcp48hP2d LIzU5x7FRt9jKXK8dKfyiQHNCGNJFaf2baNs8wSXKAV6qn3kyT2L3AdSCquwnyEe dPhMVZjlKru+iexa/v+HGIJclZAbeuLR02mxRuwo7Zzh7zRxV+GtVuq6PYxX77Va LuRt0sPjYx2zrUEIjR+z9r9tEkFoFDeV7MJYfW+hV83k+mF00QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVl0WINOoS1epgBEzt+OftH1o9FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82NWEy ODI3Ni1mNDkzLTRhOWYtOTgyNC1jOTcxN2MxY2Y2ZmQvNzk1N2FmMjMtY2JiNC0z NmVkLTgwNWYtNzgwNmYyNmU0YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjVhMjgyNzYtZjQ5My00YTlmLTk4 MjQtYzk3MTdjMWNmNmZkLzY1YTI4Mjc2LWY0OTMtNGE5Zi05ODI0LWM5NzE3YzFj ZjZmZC5jcmwwHwYDVR0jBBgwFoAUD2fY2H/CdCcfkm21Lnih2pcDNR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82NWEyODI3Ni1mNDkzLTRhOWYtOTgyNC1jOTcx N2MxY2Y2ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQytWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPOekwM10Cgl577dCKZXxixX4beetWBjcyvG+9TVu+Y22I0mf4c4dvD YrdinYaxxbLANyJXv+qAMnIHwJNO+4I04TDiaORuPU9sipGn4Csjjy4EzKMDD5YQ u5fGyAWpbMinQLJ1d+m+B+U1lW5ZClJyAHUxaU3WyTmTXSxWtSwx7z3YNLidKn3A eFLKKEcW1/IeU+T9HWIDXJwQg5V0Fdg2wmHng1ZqSJsopVH7hK/N0VPmyoLeGeV1 HvV5t1n1rHUcfCSFJzlhmqdhcermPKDLnQbNbOctUSf8kaNvH44kyDtWufBCpo7q 6F0cTIGBYkQRVgQXKPMvhCkIaZUw5jE= -----END CERTIFICATE-----Generated at Fri Mar 14 11:02:49 2025 by rpki-client