$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/7015b68a-8eb8-39c6-bddc-d9ee8fe349a4.roa File: 7015b68a-8eb8-39c6-bddc-d9ee8fe349a4.roa (raw, json) Hash identifier: 9oqL8A/3DOJyCbuQGoIjczg2R1s1eosoGlYfcMFFM4k= Subject key identifier: 88:47:8F:0D:2D:7E:A4:88:5D:9C:5E:15:C7:36:DF:4E:E3:14:3E:26 Certificate issuer: /CN=6457bd98-4cd5-4766-a190-844b93a354f2 Certificate serial: 010D0C9F4328584944693C188937145AC9DB6DA0 Authority key identifier: C2:05:CE:FE:36:D2:DC:A6:D9:0A:D3:E6:25:6B:11:7C:D2:0E:78:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/7015b68a-8eb8-39c6-bddc-d9ee8fe349a4.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 46088 IP address blocks: 67.209.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3c:18:89:37:14:5a:c9:db:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6457bd98-4cd5-4766-a190-844b93a354f2 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=e79a18b2-bd16-4afa-a3ef-9eb1390a4bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f4:6e:b7:28:d6:3e:e5:9c:64:36:93:8d:94: 45:49:a8:f8:89:f7:63:1b:d8:17:15:5f:0d:75:5f: 83:a6:0e:93:d0:fb:a7:8b:e2:e9:4b:35:1c:31:6b: 85:42:06:9d:67:61:52:40:3e:ee:2b:2f:12:25:b1: 37:8e:2f:1e:39:54:4b:0a:a6:44:20:fe:da:ab:cc: 22:77:10:05:c8:65:56:f2:d8:a2:a9:0f:ed:59:5f: c4:8b:bd:6f:3d:61:f8:b1:b8:4a:b7:33:a9:df:1e: 6d:86:ad:df:80:90:6b:c0:fa:94:68:53:26:a6:a0: 5b:ef:d4:5c:7f:65:da:85:66:85:4c:7c:94:22:13: 47:e2:50:c5:15:c5:82:2a:0d:14:07:60:e7:e3:1d: 60:e0:14:8f:be:45:0f:3d:24:cc:6a:8a:3a:60:40: 24:0d:3b:1c:d0:14:0a:25:6c:7d:49:8a:64:4f:17: 60:17:2a:f0:3a:51:87:56:a4:ed:37:48:3a:bd:b3: 0b:5a:59:f5:e5:ac:9b:60:14:38:03:67:35:38:bf: e0:a4:e5:fa:0d:20:5d:d5:4c:5f:bd:e3:9c:ec:63: 55:cb:c1:b1:a8:7e:07:43:65:4c:97:d5:50:0f:0e: 35:24:67:5d:10:0d:2d:f5:0e:94:6d:1c:be:77:d1: 8b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:47:8F:0D:2D:7E:A4:88:5D:9C:5E:15:C7:36:DF:4E:E3:14:3E:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/7015b68a-8eb8-39c6-bddc-d9ee8fe349a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2/6457bd98-4cd5-4766-a190-844b93a354f2.crl X509v3 Authority Key Identifier: keyid:C2:05:CE:FE:36:D2:DC:A6:D9:0A:D3:E6:25:6B:11:7C:D2:0E:78:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6457bd98-4cd5-4766-a190-844b93a354f2.cer sbgp-ipAddrBlock: critical IPv4: 67.209.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d1:15:e7:e2:84:4e:c8:f0:6d:ba:c7:15:c6:20:d7:dd:9a: 14:42:a8:71:6f:47:88:af:48:2c:2e:10:fe:1d:c2:b7:db:35: 3f:0e:2f:ac:20:0a:a0:9c:e9:0b:06:86:97:7d:4a:58:05:6a: 9c:6e:1d:42:6e:84:5a:ea:3c:33:ec:06:a6:cc:eb:3b:d3:95: 14:19:ca:06:e3:17:9f:13:81:3a:fd:56:ce:21:2a:e5:31:67: 09:c5:4e:09:eb:f5:21:46:4c:a0:1a:4b:bc:65:9b:78:98:6b: 67:00:5a:5d:5b:03:6e:9f:0e:cc:da:a6:f5:03:76:45:32:dc: a5:a7:ef:6f:1e:ce:d2:20:d6:89:e1:8e:fb:77:d4:b7:d7:e3: 16:62:9f:ad:69:90:67:64:12:c0:90:70:58:8a:67:bc:18:e6: c2:c3:df:33:9b:58:fa:22:37:67:65:6e:ee:1c:14:e1:a7:f8: e5:12:e2:f4:8c:c0:5b:a5:aa:96:8f:4d:a9:ba:7c:d2:8a:a6: 04:fd:57:a9:cd:6d:11:3c:ff:a8:e3:60:05:6c:24:2d:42:b3: 20:66:c9:e8:cb:48:09:94:50:72:f0:ab:e2:5d:d5:f6:71:74: 98:fe:5d:bc:5d:07:cd:15:da:57:b3:7f:4d:f0:c1:13:d0:77: 51:95:cd:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTwYiTcUWsnbbaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1N2JkOTgtNGNkNS00NzY2LWExOTAtODQ0YjkzYTM1 NGYyMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ZTc5YTE4YjItYmQxNi00YWZhLWEzZWYtOWViMTM5MGE0YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPRutyjWPuWcZDaTjZRFSaj4ifdjG9gXFV8N dV+Dpg6T0Puni+LpSzUcMWuFQgadZ2FSQD7uKy8SJbE3ji8eOVRLCqZEIP7aq8wi dxAFyGVW8tiiqQ/tWV/Ei71vPWH4sbhKtzOp3x5thq3fgJBrwPqUaFMmpqBb79Rc f2XahWaFTHyUIhNH4lDFFcWCKg0UB2Dn4x1g4BSPvkUPPSTMaoo6YEAkDTsc0BQK JWx9SYpkTxdgFyrwOlGHVqTtN0g6vbMLWln15aybYBQ4A2c1OL/gpOX6DSBd1Uxf veOc7GNVy8GxqH4HQ2VMl9VQDw41JGddEA0t9Q6UbRy+d9GLCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhHjw0tfqSIXZxeFcc2307jFD4mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU3 YmQ5OC00Y2Q1LTQ3NjYtYTE5MC04NDRiOTNhMzU0ZjIvNzAxNWI2OGEtOGViOC0z OWM2LWJkZGMtZDllZThmZTM0OWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjQ1N2JkOTgtNGNkNS00NzY2LWEx OTAtODQ0YjkzYTM1NGYyLzY0NTdiZDk4LTRjZDUtNDc2Ni1hMTkwLTg0NGI5M2Ez NTRmMi5jcmwwHwYDVR0jBBgwFoAUwgXO/jbS3KbZCtPmJWsRfNIOeD0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU3YmQ5OC00Y2Q1LTQ3NjYtYTE5MC04NDRi OTNhMzU0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9GgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvRFefihE7I8G26xxXGINfdmhRCqHFvR4ivSCwuEP4dwrfbNT8OL6wg CqCc6QsGhpd9SlgFapxuHUJuhFrqPDPsBqbM6zvTlRQZygbjF58TgTr9Vs4hKuUx ZwnFTgnr9SFGTKAaS7xlm3iYa2cAWl1bA26fDszapvUDdkUy3KWn728eztIg1onh jvt31LfX4xZin61pkGdkEsCQcFiKZ7wY5sLD3zObWPoiN2dlbu4cFOGn+OUS4vSM wFulqpaPTam6fNKKpgT9V6nNbRE8/6jjYAVsJC1CsyBmyejLSAmUUHLwq+Jd1fZx dJj+XbxdB80V2lezf03wwRPQd1GVzUs= -----END CERTIFICATE-----Generated at Fri Apr 4 16:14:39 2025 by rpki-client