$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d91a7fa3-f2e7-366b-93f8-ce723fd67031.roa File: d91a7fa3-f2e7-366b-93f8-ce723fd67031.roa (raw, json) Hash identifier: TSbVupMn1jEtNbWkPKK7hhU815B9VM1a/UWskhur4kM= Subject key identifier: 9F:34:CD:72:6B:A2:DC:83:E2:19:A6:FE:3B:39:02:25:09:1A:5F:2E Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb Certificate serial: 010D0C9F43285848C2B64AE4AF88FFEC72832680 Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d91a7fa3-f2e7-366b-93f8-ce723fd67031.roa Signing time: Mon 03 Feb 2025 14:00:52 +0000 ROA not before: Mon 03 Feb 2025 14:00:52 +0000 ROA not after: Sun 04 May 2025 13:00:52 +0000 asID: 397373 IP address blocks: 185.167.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c2:b6:4a:e4:af:88:ff:ec:72:83:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb Validity Not Before: Feb 3 14:00:52 2025 GMT Not After : May 4 13:00:52 2025 GMT Subject: CN=0501b5f3-10fa-4aeb-9c9d-0718e37dac04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:62:d0:be:08:be:c0:a4:cc:d0:61:fe:ba: 6a:fa:83:dd:a5:62:8c:c3:d2:34:ac:ab:a7:6b:a4: 76:0c:75:db:9d:7e:3f:94:4a:fe:4c:24:75:1d:40: 11:65:ed:bf:24:2c:bd:37:20:f1:ef:59:c2:4e:a9: 92:4d:e1:45:64:e8:ee:d7:d4:b1:ad:06:c2:25:10: f7:77:56:64:b4:38:fd:ad:38:0b:22:8f:33:ac:b8: 70:ff:92:51:d4:03:16:09:c4:1a:35:ea:c5:10:a6: f1:68:b2:01:2a:00:8c:17:a1:23:ce:db:b3:4c:81: ac:24:a5:5f:f6:54:fb:08:73:66:1c:d6:5e:33:4e: d6:88:49:9e:19:67:82:3c:f9:cf:36:e7:c2:54:16: 3e:1b:15:37:75:c6:25:80:a3:88:01:5d:4d:b2:ec: b4:5b:d7:22:a0:02:cc:e3:d0:c3:ab:e3:2e:ec:3e: a2:7a:c3:d8:d6:45:30:c9:d1:7a:13:94:9c:7b:19: 03:33:1a:31:4e:bc:1b:91:5d:e2:f0:bb:c2:ad:64: a3:ca:26:f0:d7:c0:61:0b:9e:1b:5a:6a:85:5c:85: 04:f1:b2:60:75:eb:ff:05:5c:28:63:f3:e9:f6:27: 7d:c3:56:7f:0c:c0:88:c9:f8:5f:bb:ed:a7:e3:3b: 11:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:34:CD:72:6B:A2:DC:83:E2:19:A6:FE:3B:39:02:25:09:1A:5F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d91a7fa3-f2e7-366b-93f8-ce723fd67031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl X509v3 Authority Key Identifier: keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer sbgp-ipAddrBlock: critical IPv4: 185.167.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:75:86:8a:33:51:3b:68:8c:47:52:b5:cf:d6:28:2f:ba:03: 04:2a:eb:9b:b9:f6:f7:8c:70:e4:cf:d6:1d:08:6a:db:cb:61: 8e:28:8f:24:df:04:9e:a2:bd:de:bd:64:da:ce:03:ee:ab:2b: ac:a4:21:7e:32:80:32:b1:ba:6f:16:32:45:ee:00:7c:40:c7: bf:7f:fd:5b:0b:3e:19:99:69:37:97:b1:19:96:96:1b:ba:59: 04:86:0c:08:a1:a3:d6:5d:69:f9:17:5e:e1:d7:bf:84:36:33: c8:43:02:d5:93:49:f0:08:10:3e:96:b3:89:6b:92:f6:55:38: b8:b9:cc:7d:c6:5b:6e:1f:d6:ca:de:d5:df:fa:d8:53:66:2e: 0b:67:64:83:94:c1:04:db:78:1c:38:bd:38:df:45:fe:27:61: 06:8e:2c:4a:a4:91:d4:d7:63:25:24:15:61:1e:6d:eb:de:20: 8e:15:d7:43:79:43:30:96:9d:1d:5d:fc:35:e1:fe:1c:b0:38: 32:e1:71:0c:c2:27:07:8c:20:5a:c0:96:9d:8c:5d:50:3a:ba: 4f:58:39:33:2d:ee:bc:7d:dd:c3:0c:9b:02:83:67:9d:e9:0d: 58:93:69:a1:dc:69:46:a7:96:c4:59:65:0a:be:d4:59:36:b5: d7:24:9c:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtkrkr4j/7HKDJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx ZWViMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk MDUwMWI1ZjMtMTBmYS00YWViLTljOWQtMDcxOGUzN2RhYzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApORi0L4IvsCkzNBh/rpq+oPdpWKMw9I0rKun a6R2DHXbnX4/lEr+TCR1HUARZe2/JCy9NyDx71nCTqmSTeFFZOju19SxrQbCJRD3 d1ZktDj9rTgLIo8zrLhw/5JR1AMWCcQaNerFEKbxaLIBKgCMF6EjztuzTIGsJKVf 9lT7CHNmHNZeM07WiEmeGWeCPPnPNufCVBY+GxU3dcYlgKOIAV1Nsuy0W9cioALM 49DDq+Mu7D6iesPY1kUwydF6E5ScexkDMxoxTrwbkV3i8LvCrWSjyibw18BhC54b WmqFXIUE8bJgdev/BVwoY/Pp9id9w1Z/DMCIyfhfu+2n4zsRKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ80zXJrotyD4hmm/js5AiUJGl8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvZDkxYTdmYTMtZjJlNy0z NjZiLTkzZjgtY2U3MjNmZDY3MDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5 YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuac8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF51hoozUTtojEdStc/WKC+6AwQq65u59veMcOTP1h0IatvLYY4ojyTf BJ6ivd69ZNrOA+6rK6ykIX4ygDKxum8WMkXuAHxAx79//VsLPhmZaTeXsRmWlhu6 WQSGDAiho9ZdafkXXuHXv4Q2M8hDAtWTSfAIED6Ws4lrkvZVOLi5zH3GW24f1sre 1d/62FNmLgtnZIOUwQTbeBw4vTjfRf4nYQaOLEqkkdTXYyUkFWEebeveII4V10N5 QzCWnR1d/DXh/hywODLhcQzCJweMIFrAlp2MXVA6uk9YOTMt7rx93cMMmwKDZ53p DViTaaHcaUanlsRZZQq+1Fk2tdcknGA= -----END CERTIFICATE-----Generated at Tue Apr 8 13:13:27 2025 by rpki-client