$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/b232adc7-2cd2-3502-b2a7-7b534ff320ab.roa File: b232adc7-2cd2-3502-b2a7-7b534ff320ab.roa (raw, json) Hash identifier: lKCzU6qHTYEzoG3wrrJfQ3wj7LF+nTxmbGXTH7r+tvY= Subject key identifier: 38:04:F2:D2:26:43:61:B4:EB:A7:65:35:EE:C7:C6:C4:1A:3A:87:60 Certificate issuer: /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Certificate serial: 010D0C9F43285849244E7CA948E4C51B865C3FC0 Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/b232adc7-2cd2-3502-b2a7-7b534ff320ab.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 20473 IP address blocks: 67.43.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7c:a9:48:e4:c5:1b:86:5c:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=33d5f37a-686d-4ea6-99b1-be2f420bcf90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:19:fc:02:d1:71:33:17:5b:77:87:06:a9:be: ef:e9:08:0a:b6:1a:6a:ce:10:fb:16:44:9c:26:53: 8f:3f:ee:b5:92:89:b8:46:16:50:ac:e0:12:bd:df: bb:25:d9:54:29:d8:88:63:23:3d:1a:5c:8d:c8:6c: d8:3a:d0:d2:d8:c5:c2:ee:36:6e:bc:cc:99:68:a8: 2a:8f:76:a7:45:75:e1:12:65:90:6b:21:0c:ce:7a: 6f:8b:9f:e3:8c:be:7f:f7:b1:28:5e:b4:83:23:bb: ed:fd:bc:d6:1e:ce:b5:aa:9a:a2:53:85:22:d2:75: 83:61:8d:8a:d3:f2:9f:57:ed:b7:43:0b:c0:16:64: a6:79:04:9a:b5:47:1d:bf:e2:38:20:ee:b5:34:c0: bc:20:28:e6:d3:6c:46:75:d7:a7:74:5c:4f:5f:85: f9:9c:e6:ec:54:f8:58:5a:f9:32:dc:e9:c7:6f:fc: 88:a4:dd:ad:ea:68:c0:13:53:47:fb:9d:24:8f:b3: b9:03:cd:ce:24:a4:e6:65:5a:c7:a0:3e:4d:45:07: f8:2d:c2:06:17:92:37:53:81:b0:e1:5a:64:f5:a1: 1c:ff:1f:84:92:af:a2:98:f2:bb:bc:c5:af:7c:56: fc:df:81:bf:3e:48:6b:a8:37:48:d9:25:86:02:a1: f6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:04:F2:D2:26:43:61:B4:EB:A7:65:35:EE:C7:C6:C4:1A:3A:87:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/b232adc7-2cd2-3502-b2a7-7b534ff320ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl X509v3 Authority Key Identifier: keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer sbgp-ipAddrBlock: critical IPv4: 67.43.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:92:54:fd:ca:1a:b9:3f:b4:2b:54:3c:f7:28:11:4c:40:48: 11:12:5e:30:44:c9:aa:63:2f:e8:ae:d2:c9:cf:2b:00:1c:41: e4:c6:9e:51:03:51:9e:e5:61:b9:6e:af:f0:0e:77:8b:c7:15: 29:6b:6a:24:3c:40:63:8b:93:fd:56:37:48:1b:88:5a:cb:e1: cd:7e:7b:32:9b:b7:89:29:78:ed:c9:25:b4:a1:3f:b0:1e:5c: b8:e7:24:e2:08:15:4f:12:83:f9:5d:f6:15:98:98:05:60:cd: 4f:ed:64:3d:95:27:63:96:a4:24:fb:57:12:3c:ab:88:21:29: 96:5d:42:cd:ac:9a:e0:01:0b:fd:ef:21:24:f2:94:fb:43:62: 87:a6:57:66:97:d6:da:db:23:00:3e:aa:f3:33:a9:b5:6e:9f: b4:7d:60:b7:3e:d0:f3:72:d7:ef:87:78:15:5d:62:c1:23:4c: c8:a3:67:da:cf:63:d5:b5:93:ba:68:c5:b9:21:c7:ae:64:58: 41:9b:00:b2:47:fc:c6:84:e3:d0:47:f8:c3:ce:85:fa:13:07: 8e:2e:23:61:bb:c2:4e:ce:07:3b:f6:3a:67:ab:de:da:ba:c1: 4d:2e:1a:14:93:89:ca:b3:b1:23:62:b2:5c:3e:f8:9a:8a:b5: b9:29:44:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnypSOTFG4ZcP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli NGU1MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MzNkNWYzN2EtNjg2ZC00ZWE2LTk5YjEtYmUyZjQyMGJjZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bn8AtFxMxdbd4cGqb7v6QgKthpqzhD7FkSc JlOPP+61kom4RhZQrOASvd+7JdlUKdiIYyM9GlyNyGzYOtDS2MXC7jZuvMyZaKgq j3anRXXhEmWQayEMznpvi5/jjL5/97EoXrSDI7vt/bzWHs61qpqiU4Ui0nWDYY2K 0/KfV+23QwvAFmSmeQSatUcdv+I4IO61NMC8ICjm02xGddendFxPX4X5nObsVPhY Wvky3OnHb/yIpN2t6mjAE1NH+50kj7O5A83OJKTmZVrHoD5NRQf4LcIGF5I3U4Gw 4Vpk9aEc/x+Ekq+imPK7vMWvfFb834G/PkhrqDdI2SWGAqH2IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgE8tImQ2G066dlNe7HxsQaOodgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvYjIzMmFkYzctMmNkMi0z NTAyLWIyYTctN2I1MzRmZjMyMGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3 ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5 YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3 N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQysqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeSVP3KGrk/tCtUPPcoEUxASBESXjBEyapjL+iu0snPKwAcQeTGnlED UZ7lYblur/AOd4vHFSlraiQ8QGOLk/1WN0gbiFrL4c1+ezKbt4kpeO3JJbShP7Ae XLjnJOIIFU8Sg/ld9hWYmAVgzU/tZD2VJ2OWpCT7VxI8q4ghKZZdQs2smuABC/3v ISTylPtDYoemV2aX1trbIwA+qvMzqbVun7R9YLc+0PNy1++HeBVdYsEjTMijZ9rP Y9W1k7poxbkhx65kWEGbALJH/MaE49BH+MPOhfoTB44uI2G7wk7OBzv2Omer3tq6 wU0uGhSTicqzsSNislw++JqKtbkpROo= -----END CERTIFICATE-----Generated at Tue May 20 10:28:31 2025 by rpki-client