$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa File: 42972859-eb24-3402-bd6b-51e9207a7162.roa (raw, json) Hash identifier: 3f4zqCWrIqxkM+ZpcQiLMN7yPGWtEkgTlyY+x+FurFk= Subject key identifier: 41:AF:8A:C3:8A:2B:60:1D:86:AE:7D:06:4C:90:7D:A8:D5:FD:BA:07 Certificate issuer: /CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Certificate serial: 010D0C9F43285848BE86300920D2F0B302462A80 Authority key identifier: D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 11067 IP address blocks: 67.219.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:30:09:20:d2:f0:b3:02:46:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=a7a68eb0-add6-4f01-87c2-b345239f47a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:44:fd:93:b6:68:67:06:7b:4f:9d:fa:b1:c5: f1:2a:bc:20:50:2a:9e:36:03:e7:b2:a4:8d:1b:38: 37:6f:bf:ec:c9:0e:0e:58:06:f8:eb:b2:16:d2:e3: da:f6:fc:88:d1:f5:ef:18:8a:3c:cd:08:23:0c:9f: ec:80:9d:f4:60:07:e9:1f:e8:36:60:1e:62:7b:33: 98:49:d6:e1:37:5a:31:0f:55:e7:cc:2b:7c:d6:cd: 2b:2b:08:a1:99:88:b2:b5:a2:98:62:f6:1a:a6:2e: a5:d1:82:26:da:63:82:71:a1:3b:af:8a:43:dc:10: 81:d3:36:5b:e4:37:3e:be:b6:1e:8a:d4:87:4a:c8: 3b:85:d4:ca:6e:9d:4e:4d:de:45:e0:01:ad:dc:00: ea:5a:2b:89:6a:f7:62:d4:7f:05:14:8a:cc:da:44: aa:f5:b5:5f:79:57:c4:aa:08:eb:b8:59:e6:e5:0d: fa:9a:c1:7c:87:8f:06:3a:eb:ff:56:a6:53:a3:b9: 8f:51:f4:bb:ec:6b:d8:15:c7:c6:5a:0e:f0:32:27: 95:6c:35:57:d0:48:4f:46:4f:e8:bb:65:75:16:c0: d5:dc:fc:d4:50:43:9f:81:39:a8:88:e9:b2:7e:d4: 39:d1:7f:a7:bb:cb:bd:37:fe:c8:88:dc:62:1c:e1: 74:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AF:8A:C3:8A:2B:60:1D:86:AE:7D:06:4C:90:7D:A8:D5:FD:BA:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/42972859-eb24-3402-bd6b-51e9207a7162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.crl X509v3 Authority Key Identifier: keyid:D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer sbgp-ipAddrBlock: critical IPv4: 67.219.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:03:de:11:21:10:23:c2:fd:a7:50:c2:a6:85:c1:bc:d0:99: 1e:03:4a:36:cc:56:55:13:d9:37:86:26:3f:94:3b:93:2f:7d: d4:47:32:86:bb:fb:cb:4f:74:fa:8d:e1:c3:88:0e:ca:a6:6d: 5f:05:91:0e:69:57:21:e4:f9:fc:a2:ba:df:a2:6f:f0:2c:26: 3e:ce:25:2a:77:bc:3e:68:f4:6b:db:4d:cd:1a:56:a5:d4:b0: 00:93:b5:55:0a:51:75:9d:df:30:36:be:f6:b1:b3:99:1f:2b: 8b:f5:f2:51:29:72:2b:a3:17:5f:bf:ac:91:7b:26:6f:9e:1c: 48:68:60:c2:97:ec:62:8d:7a:5c:5b:19:c0:51:94:ff:28:d2: ac:e2:71:80:40:6c:4b:02:e1:d1:af:5e:c6:74:46:1e:24:72: c0:d4:af:4b:2f:69:7a:df:31:ca:4e:d0:46:fc:c1:d8:44:31: 13:56:52:18:2a:0b:94:c3:6f:27:bb:55:c6:28:8a:34:6c:2c: c2:22:8e:31:e1:ed:19:e9:59:4b:97:78:82:84:ff:fc:3d:4a: af:00:29:ea:f5:76:90:ab:89:2b:db:37:2d:fe:3f:b4:bb:0a: 5a:18:4b:e0:af:00:8e:13:f1:b8:c4:02:40:d8:4c:fe:ca:6f: 95:a9:f7:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjAJINLwswJGKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkzNTgtNDljMWUzYzJk NmIxMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk YTdhNjhlYjAtYWRkNi00ZjAxLTg3YzItYjM0NTIzOWY0N2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUT9k7ZoZwZ7T536scXxKrwgUCqeNgPnsqSN Gzg3b7/syQ4OWAb467IW0uPa9vyI0fXvGIo8zQgjDJ/sgJ30YAfpH+g2YB5iezOY SdbhN1oxD1XnzCt81s0rKwihmYiytaKYYvYapi6l0YIm2mOCcaE7r4pD3BCB0zZb 5Dc+vrYeitSHSsg7hdTKbp1OTd5F4AGt3ADqWiuJavdi1H8FFIrM2kSq9bVfeVfE qgjruFnm5Q36msF8h48GOuv/VqZTo7mPUfS77GvYFcfGWg7wMieVbDVX0EhPRk/o u2V1FsDV3PzUUEOfgTmoiOmyftQ50X+nu8u9N/7IiNxiHOF0hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGvisOKK2Adhq59BkyQfajV/boHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRj YjRjNS02YzcyLTRlNDktOTM1OC00OWMxZTNjMmQ2YjEvNDI5NzI4NTktZWIyNC0z NDAyLWJkNmItNTFlOTIwN2E3MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTI0Y2I0YzUtNmM3Mi00ZTQ5LTkz NTgtNDljMWUzYzJkNmIxLzEyNGNiNGM1LTZjNzItNGU0OS05MzU4LTQ5YzFlM2My ZDZiMS5jcmwwHwYDVR0jBBgwFoAU1XD4CuxNjGtO/RxEg97FD7fArYIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xMjRjYjRjNS02YzcyLTRlNDktOTM1OC00OWMx ZTNjMmQ2YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9ugMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoD3hEhECPC/adQwqaFwbzQmR4DSjbMVlUT2TeGJj+UO5MvfdRHMoa7 +8tPdPqN4cOIDsqmbV8FkQ5pVyHk+fyiut+ib/AsJj7OJSp3vD5o9GvbTc0aVqXU sACTtVUKUXWd3zA2vvaxs5kfK4v18lEpciujF1+/rJF7Jm+eHEhoYMKX7GKNelxb GcBRlP8o0qzicYBAbEsC4dGvXsZ0Rh4kcsDUr0svaXrfMcpO0Eb8wdhEMRNWUhgq C5TDbye7VcYoijRsLMIijjHh7RnpWUuXeIKE//w9Sq8AKer1dpCriSvbNy3+P7S7 CloYS+CvAI4T8bjEAkDYTP7Kb5Wp9+A= -----END CERTIFICATE-----Generated at Fri Apr 4 20:16:41 2025 by rpki-client