$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1a781c28-0942-31de-bd94-cb1c908194c5.roa File: 1a781c28-0942-31de-bd94-cb1c908194c5.roa (raw, json) Hash identifier: mbcZc11L5SVxF3zsUpTFw0xv0x1S4FhR03oxSVaMhMI= Subject key identifier: 77:28:9B:F0:6F:9E:78:B2:C1:E7:79:48:E6:1E:0D:DF:BC:B1:97:ED Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F43285848ADC60329B5FFF5DD9F4B1E00 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1a781c28-0942-31de-bd94-cb1c908194c5.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 397373 IP address blocks: 67.21.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:03:29:b5:ff:f5:dd:9f:4b:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=cb176f91-56b1-4366-ac6a-c489f67cc0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:00:19:6d:b5:74:c5:89:0c:82:96:26:da: f8:8c:b3:2b:cd:3d:05:18:c4:51:23:85:3f:30:e7: 0c:5c:44:9f:1d:d3:2b:eb:f2:1f:f8:3c:f5:2c:c2: a4:60:6c:fa:69:fe:85:80:26:b4:fe:6f:32:dc:ec: a1:2e:f7:60:1d:9a:7c:cc:55:a7:c5:8f:60:37:e7: 16:88:29:ea:43:31:59:c5:e5:9b:1c:e6:be:1a:91: 38:89:2b:4d:e9:bf:05:a5:24:77:3b:48:0c:70:a0: 93:77:fd:99:de:9d:d5:2f:11:bd:5f:bf:5a:32:62: 88:dd:34:f9:cf:12:c1:72:31:18:47:46:18:51:71: 61:3f:c2:f5:bd:f0:cb:58:d9:a7:14:72:bf:27:b2: 63:e5:74:42:96:9a:4d:86:c6:af:31:1b:ba:c2:ab: bf:ec:a0:52:36:1b:04:a6:3c:62:d7:be:84:6c:3c: 83:84:63:66:90:68:6c:c7:da:08:0e:04:22:21:d5: d6:5a:ef:a9:17:8a:c5:ef:56:c5:b1:52:e5:7d:59: 13:87:4d:ad:d8:2d:2a:e7:d5:8f:b2:f7:b5:67:eb: 1e:2b:66:ee:0b:35:e3:46:fa:55:8b:b2:d4:4f:fe: eb:87:57:f7:3e:d1:c9:02:4d:7b:90:8b:9d:4c:52: e0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:28:9B:F0:6F:9E:78:B2:C1:E7:79:48:E6:1E:0D:DF:BC:B1:97:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/1a781c28-0942-31de-bd94-cb1c908194c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 67.21.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a4:38:b9:0a:40:a7:db:0f:ec:c9:04:81:08:1a:64:1b:92: 78:f2:e9:58:8f:5e:da:d9:44:5f:fb:39:93:f4:2d:09:44:1a: 27:e4:bc:00:8e:2b:c9:1d:3e:e7:58:53:28:cc:00:06:79:68: 1b:67:23:56:03:83:1d:2d:e1:e7:db:38:65:62:ed:30:cd:d8: 82:bb:44:d2:71:e9:1d:62:93:36:f0:9a:76:7b:22:fe:23:31: 6b:83:95:c7:5c:38:5d:3b:bd:b3:1a:2a:11:43:85:ea:7e:4e: be:54:13:5d:39:af:06:22:4b:58:5d:dd:af:6b:e4:ab:65:17: 61:b4:f6:40:1b:c6:c2:b0:7b:e2:70:21:09:eb:c5:3e:64:40: a4:ec:a6:5a:d8:4c:4c:f2:a2:b8:d7:27:a4:e1:f0:b1:04:ba: 98:43:2e:ee:b7:38:3f:5f:c4:5a:d6:5a:fd:25:ef:77:d5:b1: ae:9a:36:97:7f:1e:8a:07:7f:86:c6:a0:bc:4a:9c:12:2e:b4: e5:45:a5:bd:18:5a:d6:25:b8:8a:bf:d1:1e:19:6d:03:5e:1e: d6:08:4c:e0:d8:19:b2:ff:60:e1:e5:c1:c2:81:09:8e:47:4c: 2d:35:95:59:d5:3b:36:0f:0d:3f:1c:90:dc:71:3c:c4:ae:83: a4:4c:42:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxgMptf/13Z9LHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk Y2IxNzZmOTEtNTZiMS00MzY2LWFjNmEtYzQ4OWY2N2NjMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEQAGW21dMWJDIKWJtr4jLMrzT0FGMRRI4U/ MOcMXESfHdMr6/If+Dz1LMKkYGz6af6FgCa0/m8y3OyhLvdgHZp8zFWnxY9gN+cW iCnqQzFZxeWbHOa+GpE4iStN6b8FpSR3O0gMcKCTd/2Z3p3VLxG9X79aMmKI3TT5 zxLBcjEYR0YYUXFhP8L1vfDLWNmnFHK/J7Jj5XRClppNhsavMRu6wqu/7KBSNhsE pjxi176EbDyDhGNmkGhsx9oIDgQiIdXWWu+pF4rF71bFsVLlfVkTh02t2C0q59WP sve1Z+seK2buCzXjRvpVi7LUT/7rh1f3PtHJAk17kIudTFLgOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcom/Bvnniywed5SOYeDd+8sZftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvMWE3ODFjMjgtMDk0Mi0z MWRlLWJkOTQtY2IxYzkwODE5NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQxUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSkOLkKQKfbD+zJBIEIGmQbknjy6ViPXtrZRF/7OZP0LQlEGifkvACO K8kdPudYUyjMAAZ5aBtnI1YDgx0t4efbOGVi7TDN2IK7RNJx6R1ikzbwmnZ7Iv4j MWuDlcdcOF07vbMaKhFDhep+Tr5UE105rwYiS1hd3a9r5KtlF2G09kAbxsKwe+Jw IQnrxT5kQKTsplrYTEzyorjXJ6Th8LEEuphDLu63OD9fxFrWWv0l73fVsa6aNpd/ HooHf4bGoLxKnBIutOVFpb0YWtYluIq/0R4ZbQNeHtYITODYGbL/YOHlwcKBCY5H TC01lVnVOzYPDT8ckNxxPMSug6RMQtc= -----END CERTIFICATE-----Generated at Tue Apr 8 13:20:39 2025 by rpki-client