$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5ef41ac9-2800-38d4-8364-dfc724a3ce50.roa File: 5ef41ac9-2800-38d4-8364-dfc724a3ce50.roa (raw, json) Hash identifier: q9eNZwrydsObDLPw3tiRjnB+utvWG6Cj0MK6MJJIwCo= Subject key identifier: 91:9A:AE:F9:57:A8:30:BA:C0:53:86:00:7B:63:E8:B0:18:B2:70:E3 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F432858489340A59A07411E004D67BDC0 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5ef41ac9-2800-38d4-8364-dfc724a3ce50.roa Signing time: Fri 17 Jan 2025 14:00:53 +0000 ROA not before: Fri 17 Jan 2025 14:00:53 +0000 ROA not after: Thu 17 Apr 2025 13:00:53 +0000 asID: 61317 IP address blocks: 67.43.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:40:a5:9a:07:41:1e:00:4d:67:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Jan 17 14:00:53 2025 GMT Not After : Apr 17 13:00:53 2025 GMT Subject: CN=9eddee33-7498-4a98-b008-9fcc57c90a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5a:88:64:24:7b:16:41:a4:a8:e3:02:aa:39: 08:b4:2b:3e:30:c2:1a:df:1c:b5:ce:36:53:b1:c1: 42:af:35:f5:da:69:5e:60:92:05:95:bf:dd:c9:ed: eb:cb:f8:8c:2e:fe:5f:a7:f6:22:d5:b6:cd:64:d1: 00:13:44:19:64:d2:32:e8:50:09:39:95:94:97:25: bc:c5:c5:dc:6f:15:25:f0:99:22:90:c6:9f:b4:ec: b1:97:73:f0:da:e5:0c:01:ce:16:b0:4d:82:f1:b3: 8d:bd:df:95:e5:a3:35:b7:9e:9e:8d:e3:3c:bb:69: 7e:cb:06:5d:5a:b4:9f:06:9c:a7:f3:c8:1e:49:37: 2f:23:ca:11:14:b8:3d:04:57:4c:70:6d:eb:47:48: 71:92:31:23:c6:6e:9d:31:9b:f6:ce:3b:64:5c:15: 95:fa:2a:0f:03:49:1a:79:95:e6:29:7b:34:53:7e: 9f:70:68:bf:a7:63:0d:5e:48:d3:73:67:6f:45:02: da:f1:c8:24:17:83:2d:3d:41:71:17:7f:86:07:c7: 18:17:0e:e4:3b:38:01:3f:24:f0:94:80:49:27:85: e0:8c:66:0a:97:32:a3:a7:49:c9:53:91:a0:04:67: 7d:54:7d:0d:ab:4a:54:b3:09:c4:28:8e:29:b5:04: 04:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9A:AE:F9:57:A8:30:BA:C0:53:86:00:7B:63:E8:B0:18:B2:70:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/5ef41ac9-2800-38d4-8364-dfc724a3ce50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:07:f8:68:9c:6d:ca:2c:91:fe:67:ec:cd:f9:a4:97:9f:06: 68:5c:5c:03:0e:eb:9c:a1:cc:df:0c:d2:ec:5e:17:0f:27:8c: d1:ec:08:46:df:a8:93:78:46:5a:84:55:08:ba:70:fb:ae:5d: 67:9d:5a:a9:d2:30:77:7d:df:fc:62:c1:0e:9f:81:77:ed:f7: 7a:1b:d1:82:dc:a5:fd:d2:95:88:9b:cf:5c:29:41:ba:a0:c3: 8a:79:5b:4f:42:1c:a1:95:a8:fe:28:b1:36:73:76:57:e8:43: 9d:c7:31:2e:7d:94:71:e5:bc:6e:41:74:30:57:7f:c9:a6:61: b2:4a:4c:cb:c1:55:07:ac:b6:26:14:1c:c4:f5:4c:f1:c5:aa: 86:20:4a:20:80:0f:31:bd:25:77:a3:a3:ab:a9:d1:3d:10:1e: f7:97:58:6e:bd:bf:13:05:f0:2f:9e:c6:01:08:7f:be:af:1e: 2b:ee:3e:57:27:73:08:ca:e9:84:4e:4a:d3:12:50:01:bb:7d: 06:08:d3:24:38:03:30:24:e1:ba:a4:33:af:bc:ab:c5:a9:d5: 20:24:38:15:e6:db:06:a0:b4:d5:ec:79:ea:f1:ed:f3:ee:d4: ee:8d:dc:a5:28:97:3e:50:d5:3b:e2:8a:69:11:57:e1:1f:38: 4a:f3:d6:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQKWaB0EeAE1nvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk OWVkZGVlMzMtNzQ5OC00YTk4LWIwMDgtOWZjYzU3YzkwYTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFqIZCR7FkGkqOMCqjkItCs+MMIa3xy1zjZT scFCrzX12mleYJIFlb/dye3ry/iMLv5fp/Yi1bbNZNEAE0QZZNIy6FAJOZWUlyW8 xcXcbxUl8JkikMaftOyxl3Pw2uUMAc4WsE2C8bONvd+V5aM1t56ejeM8u2l+ywZd WrSfBpyn88geSTcvI8oRFLg9BFdMcG3rR0hxkjEjxm6dMZv2zjtkXBWV+ioPA0ka eZXmKXs0U36fcGi/p2MNXkjTc2dvRQLa8cgkF4MtPUFxF3+GB8cYFw7kOzgBPyTw lIBJJ4XgjGYKlzKjp0nJU5GgBGd9VH0Nq0pUswnEKI4ptQQEzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGarvlXqDC6wFOGAHtj6LAYsnDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvNWVmNDFhYzktMjgwMC0z OGQ0LTgzNjQtZGZjNzI0YTNjZTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQysgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYH+Gicbcoskf5n7M35pJefBmhcXAMO65yhzN8M0uxeFw8njNHsCEbf qJN4RlqEVQi6cPuuXWedWqnSMHd93/xiwQ6fgXft93ob0YLcpf3SlYibz1wpQbqg w4p5W09CHKGVqP4osTZzdlfoQ53HMS59lHHlvG5BdDBXf8mmYbJKTMvBVQestiYU HMT1TPHFqoYgSiCADzG9JXejo6up0T0QHveXWG69vxMF8C+exgEIf76vHivuPlcn cwjK6YROStMSUAG7fQYI0yQ4AzAk4bqkM6+8q8Wp1SAkOBXm2wagtNXseerx7fPu 1O6N3KUolz5Q1TviimkRV+EfOErz1n0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:21 2025 by rpki-client