$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5ef41ac9-2800-38d4-8364-dfc724a3ce50.roa File: 5ef41ac9-2800-38d4-8364-dfc724a3ce50.roa (raw, json) Hash identifier: EjySKh+oAEsPFAMI5mmLjfXB4I5x5oizKonPWwCDr74= Subject key identifier: 3C:4F:6C:97:A1:30:F1:35:15:9A:DD:7E:19:0E:41:47:84:B3:FB:F8 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F432858497279AB2BA9D84862293AF080 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5ef41ac9-2800-38d4-8364-dfc724a3ce50.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 61317 IP address blocks: 67.43.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:ab:2b:a9:d8:48:62:29:3a:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=3a0a1fa4-0797-4549-9532-50dc902605df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:30:2e:fc:b0:ba:f4:21:5a:f1:2a:96:90:14: 6f:5b:49:a6:e9:41:2d:37:3a:0b:7d:18:d8:f7:d0: f6:a3:5e:d7:53:57:a2:d5:38:59:9d:d0:96:c6:e1: 93:5d:9f:cc:ad:37:44:bd:04:b2:da:42:ce:11:b5: 60:94:78:c2:3e:90:64:9a:6f:7e:73:f3:13:0e:16: da:16:70:3a:e8:d1:22:ae:15:9f:cf:be:52:90:91: a2:a1:1a:ea:01:2b:73:78:12:e1:05:4f:04:a2:01: 84:40:36:96:5b:a8:79:2e:b4:a3:84:93:79:e0:28: 04:c0:1b:9e:63:0d:f3:a2:e1:64:85:3d:16:22:2e: fd:61:1c:69:51:d4:14:dc:3a:85:4c:c6:33:f2:35: 4e:f9:be:7f:e5:39:c4:88:6a:7b:65:6f:8a:b1:d9: a9:a4:2b:4a:2d:03:60:ad:6b:86:8f:82:5c:4a:c3: 33:5b:6a:4e:51:8f:11:ff:98:69:5f:a7:54:76:67: e2:de:af:c2:90:53:e1:04:0e:3d:81:e0:a4:0e:7c: 02:ea:29:76:29:4c:38:1a:57:3f:99:b2:05:89:1e: 8f:0c:06:d5:86:3f:49:74:76:b7:fa:83:7a:a7:13: 5b:6a:20:a6:cd:8c:d9:9b:11:05:81:ae:3c:95:e1: 4e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4F:6C:97:A1:30:F1:35:15:9A:DD:7E:19:0E:41:47:84:B3:FB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5ef41ac9-2800-38d4-8364-dfc724a3ce50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:23:55:23:42:ef:33:22:32:f8:39:6e:a4:1c:c4:f5:bd:5f: f5:62:63:c9:37:63:c9:13:3a:5d:03:2c:23:e0:4f:97:ab:b7: 32:f0:4c:e3:01:a3:bc:06:c3:60:7c:74:dc:38:c4:a2:0e:f7: c5:e2:70:9f:66:18:76:66:c4:ee:83:d7:46:fc:df:ea:81:1e: 5a:6e:d6:7a:51:40:b2:9f:2b:67:13:f9:3e:e8:f7:fb:f5:53: a2:4f:f2:0e:ad:bb:7c:28:4f:5a:f5:8e:4b:4d:cb:24:7a:fc: 8e:83:3e:db:9e:36:cb:2b:79:5e:9c:59:8a:13:3a:27:87:9e: e2:cf:30:bf:eb:25:ff:8d:0a:16:5b:90:67:b8:52:f7:dc:cb: c5:4a:1e:f8:85:8b:62:aa:a4:c3:32:2f:de:8f:0f:df:fd:01: 06:ac:c6:07:f7:0f:07:8d:ae:c2:f4:37:d5:7c:6f:69:79:2b: 61:94:36:c9:be:e4:20:0d:5b:a8:1c:db:4e:c2:0c:c4:97:d5: bb:17:b8:61:ca:ac:81:97:53:31:5b:c1:1f:f6:71:f2:19:a4: 37:b3:54:27:a3:b8:9f:06:a2:3d:b6:63:95:f9:a7:69:59:0c: 42:42:61:4d:50:9a:8c:9b:99:b1:6a:f2:f1:d7:2b:89:31:1a: dc:4b:a2:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeasrqdhIYik68IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk M2EwYTFmYTQtMDc5Ny00NTQ5LTk1MzItNTBkYzkwMjYwNWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTAu/LC69CFa8SqWkBRvW0mm6UEtNzoLfRjY 99D2o17XU1ei1ThZndCWxuGTXZ/MrTdEvQSy2kLOEbVglHjCPpBkmm9+c/MTDhba FnA66NEirhWfz75SkJGioRrqAStzeBLhBU8EogGEQDaWW6h5LrSjhJN54CgEwBue Yw3zouFkhT0WIi79YRxpUdQU3DqFTMYz8jVO+b5/5TnEiGp7ZW+KsdmppCtKLQNg rWuGj4JcSsMzW2pOUY8R/5hpX6dUdmfi3q/CkFPhBA49geCkDnwC6il2KUw4Glc/ mbIFiR6PDAbVhj9JdHa3+oN6pxNbaiCmzYzZmxEFga48leFOAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxPbJehMPE1FZrdfhkOQUeEs/v4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNWVmNDFhYzktMjgwMC0z OGQ0LTgzNjQtZGZjNzI0YTNjZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQysgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwjVSNC7zMiMvg5bqQcxPW9X/ViY8k3Y8kTOl0DLCPgT5ertzLwTOMB o7wGw2B8dNw4xKIO98XicJ9mGHZmxO6D10b83+qBHlpu1npRQLKfK2cT+T7o9/v1 U6JP8g6tu3woT1r1jktNyyR6/I6DPtueNssreV6cWYoTOieHnuLPML/rJf+NChZb kGe4Uvfcy8VKHviFi2KqpMMyL96PD9/9AQasxgf3DweNrsL0N9V8b2l5K2GUNsm+ 5CANW6gc207CDMSX1bsXuGHKrIGXUzFbwR/2cfIZpDezVCejuJ8Goj22Y5X5p2lZ DEJCYU1QmoybmbFq8vHXK4kxGtxLoh4= -----END CERTIFICATE-----Generated at Thu Apr 17 06:06:25 2025 by rpki-client