$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afaa99ac-9444-373b-8b95-8e74320c2b99.roa File: afaa99ac-9444-373b-8b95-8e74320c2b99.roa (raw, json) Hash identifier: lVgE//X9Xe06gAgdlaaiKKSs+ibcigWxz5tlfMkG5mE= Subject key identifier: B3:7D:22:A8:13:40:04:B0:87:A7:AF:BF:BB:CE:07:72:EA:E8:2C:9C Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F432858488AE0B7D4DB26A6A8B0D01580 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afaa99ac-9444-373b-8b95-8e74320c2b99.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 54113 IP address blocks: 167.82.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:b7:d4:db:26:a6:a8:b0:d0:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=66a71bea-33a4-421f-a2da-696135b4a0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:94:ae:3c:ad:b9:2d:9e:19:70:82:28:d6:63: 70:3b:2b:7b:18:b0:73:78:6c:ba:3f:c7:22:5c:18: 20:56:77:29:75:a9:19:a2:ce:19:77:9d:a3:c8:41: 64:d0:db:1e:4a:dd:21:ce:27:94:e9:8c:c4:2a:8f: 80:71:24:48:de:a4:ea:c9:49:af:cf:b7:82:e7:28: 99:90:94:0d:4d:e8:96:eb:c5:b5:a6:37:21:83:ef: 69:3d:93:81:e3:30:b5:d3:cd:cf:d6:a4:4b:74:33: cc:4f:50:3e:de:02:10:30:d8:83:b6:21:57:76:46: 1b:4d:cc:b2:ae:e2:7a:e7:bb:b8:42:9e:dc:47:a2: 4c:f9:56:3f:a5:5d:e1:0c:a7:7e:05:6b:de:f9:86: 21:8d:2f:2a:b8:be:9b:11:a0:08:c0:fa:6f:57:a2: db:b6:89:13:75:22:1f:23:33:44:46:37:e8:45:e4: c2:02:80:17:9a:33:73:8d:07:8a:39:de:44:0f:c2: 5f:22:3a:b2:5f:be:cd:c7:3b:4d:ab:99:f1:6e:b6: 69:17:21:7c:32:6b:87:96:e3:d8:2f:0c:5a:16:ea: 51:d9:60:63:b2:0d:14:8c:f4:1d:6d:41:af:66:0f: 40:4d:78:a0:1d:18:c9:e2:40:37:38:31:a5:45:4c: 91:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7D:22:A8:13:40:04:B0:87:A7:AF:BF:BB:CE:07:72:EA:E8:2C:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/afaa99ac-9444-373b-8b95-8e74320c2b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 167.82.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:7f:fa:6a:f4:68:19:d0:b6:2e:73:cc:ec:2f:5f:e8:ea:ff: 98:d3:3f:f3:05:34:84:7a:8b:13:e2:a7:6c:66:94:9a:83:b4: 3b:17:c6:be:f8:bf:19:5c:cc:02:1b:de:33:70:73:54:64:b1: 63:62:60:d0:4c:e5:d4:b8:dd:55:11:bc:7c:37:1f:d3:b8:da: cc:b8:1a:fc:e9:e1:1c:40:fa:e8:51:c0:cf:88:97:f9:74:fb: 9d:d5:d4:5d:1e:51:48:03:7c:44:75:9f:d6:f6:18:85:bf:26: 71:ef:07:4f:f6:f3:ec:6b:44:91:1a:59:d9:cc:3e:16:9f:b4: 70:cf:7d:e8:87:a4:bf:42:3f:76:3e:17:55:bb:35:21:51:8e: 0f:f7:af:00:06:ba:c5:3f:9e:79:28:71:b7:0b:c9:d1:3c:5d: 75:12:16:76:8b:27:cf:83:3a:c0:65:00:eb:3e:da:70:5b:d3: 30:8b:7d:15:42:1a:b2:f5:ba:c9:ff:8a:d3:3d:ce:d8:12:93: 7f:77:d9:07:b1:ee:bc:99:61:b6:26:f0:af:89:e4:0a:3f:63: ec:3a:96:57:6b:23:4e:c4:95:e2:8f:81:d5:7c:00:47:11:8b: 93:6a:2c:55:87:93:0d:2c:fe:38:9a:28:c6:ff:b3:2b:bc:f3: 31:c6:f8:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4LfU2yamqLDQFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk NjZhNzFiZWEtMzNhNC00MjFmLWEyZGEtNjk2MTM1YjRhMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5SuPK25LZ4ZcIIo1mNwOyt7GLBzeGy6P8ci XBggVncpdakZos4Zd52jyEFk0NseSt0hzieU6YzEKo+AcSRI3qTqyUmvz7eC5yiZ kJQNTeiW68W1pjchg+9pPZOB4zC1083P1qRLdDPMT1A+3gIQMNiDtiFXdkYbTcyy ruJ657u4Qp7cR6JM+VY/pV3hDKd+BWve+YYhjS8quL6bEaAIwPpvV6LbtokTdSIf IzNERjfoReTCAoAXmjNzjQeKOd5ED8JfIjqyX77NxztNq5nxbrZpFyF8MmuHluPY LwxaFupR2WBjsg0UjPQdbUGvZg9ATXigHRjJ4kA3ODGlRUyRQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLN9IqgTQASwh6evv7vOB3Lq6CycMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWZhYTk5YWMtOTQ0NC0z NzNiLThiOTUtOGU3NDMyMGMyYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp1IkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALh/+mr0aBnQti5zzOwvX+jq/5jTP/MFNIR6ixPip2xmlJqDtDsXxr74 vxlczAIb3jNwc1RksWNiYNBM5dS43VURvHw3H9O42sy4Gvzp4RxA+uhRwM+Il/l0 +53V1F0eUUgDfER1n9b2GIW/JnHvB0/28+xrRJEaWdnMPhaftHDPfeiHpL9CP3Y+ F1W7NSFRjg/3rwAGusU/nnkocbcLydE8XXUSFnaLJ8+DOsBlAOs+2nBb0zCLfRVC GrL1usn/itM9ztgSk3932Qex7ryZYbYm8K+J5Ao/Y+w6lldrI07EleKPgdV8AEcR i5NqLFWHkw0s/jiaKMb/syu88zHG+Bg= -----END CERTIFICATE-----Generated at Thu Apr 3 03:01:18 2025 by rpki-client