$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa File: 28986011-044d-3ddc-91d9-ea7ed00e5470.roa (raw, json) Hash identifier: bq+dkqBgBJn9tdzfieYSaZKKL7N8HI3rXpkxJjK9wA8= Subject key identifier: 25:4F:39:94:E0:34:3F:60:60:56:A8:63:99:D5:E9:D6:E1:A3:AE:78 Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Certificate serial: 010D0C9F432858486695C87BEC002AF1D595DD80 Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa Signing time: Wed 01 Jan 2025 14:00:53 +0000 ROA not before: Wed 01 Jan 2025 14:00:53 +0000 ROA not after: Tue 01 Apr 2025 13:00:53 +0000 asID: 36692 IP address blocks: 67.215.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:66:95:c8:7b:ec:00:2a:f1:d5:95:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Validity Not Before: Jan 1 14:00:53 2025 GMT Not After : Apr 1 13:00:53 2025 GMT Subject: CN=1eddfa4e-9489-4941-a696-7b3115d58c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:21:02:ba:db:a4:60:4d:3f:d3:2c:cc:ef: f9:a0:1a:d2:d0:58:68:4e:3e:7d:33:d5:52:6f:c6: e0:bd:ea:d8:fb:58:5f:15:dc:de:1d:61:d3:0a:7b: 97:d1:87:f9:42:24:50:28:43:28:65:9a:14:01:eb: 7d:fc:57:aa:66:ec:f3:13:04:bf:17:73:89:a0:d6: a3:13:7a:94:c3:12:29:9e:54:e4:57:52:3f:e4:ef: f9:c2:65:be:79:74:28:92:36:1a:17:c3:23:c0:97: e9:68:9b:af:10:fe:28:a4:f5:8c:98:1c:0b:7f:bb: 76:d1:89:62:2f:28:6e:2e:cc:df:20:70:c6:b2:f4: c3:21:c0:07:30:ad:94:52:f4:1f:58:b6:a9:8c:c3: f7:bd:a6:fa:31:bf:89:06:91:53:11:81:49:b3:e0: 88:7c:8f:df:43:d0:fc:9c:35:fc:02:c9:8e:04:21: e6:07:a3:9a:ef:a3:a7:f5:9d:3b:55:97:ed:68:20: 51:bb:9d:d5:4f:ea:fb:62:aa:f0:60:78:0b:8c:fa: 1e:4d:8d:1f:45:3d:87:f3:98:28:ef:05:17:d1:ff: e0:8e:f0:d7:a5:30:97:cd:6f:15:04:8a:43:1e:fc: 9f:62:60:9d:45:b4:a5:ea:9e:f9:34:d8:9e:d3:66: e5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4F:39:94:E0:34:3F:60:60:56:A8:63:99:D5:E9:D6:E1:A3:AE:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl X509v3 Authority Key Identifier: keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer sbgp-ipAddrBlock: critical IPv4: 67.215.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:6d:4e:f8:12:d3:14:fc:0b:19:f7:bc:36:ad:52:d8:b9:d8: e9:28:5d:4c:1e:ab:a9:0c:dc:d8:f9:4d:35:4f:a0:cc:77:95: 3d:b6:ae:52:20:84:8e:26:15:f7:0c:31:75:f5:d7:9d:02:be: 5d:15:40:78:7e:ae:b8:83:c8:82:16:9b:80:38:e5:95:71:49: 56:6c:1d:f3:ae:fb:11:3b:2a:36:e1:d7:b6:af:f6:1a:30:f1: 11:67:ca:07:27:77:ba:ac:de:28:c4:16:0d:5c:3e:59:05:36: b5:ea:12:c3:e1:4f:81:b2:50:11:72:9e:51:ba:de:ca:2c:37: 78:ea:78:f9:36:d1:9c:31:1a:4b:61:a0:b9:22:80:a5:68:6b: 14:5e:49:8b:69:16:79:2f:63:13:34:58:f4:7e:ed:bd:cd:ac: 5d:1d:23:3d:69:ec:28:6d:8a:f6:28:ee:cb:34:a2:55:dc:bb: 4f:bb:bf:b8:c8:9f:b5:1d:2b:3c:36:6a:c1:53:a1:20:94:53: 03:50:b3:a3:ad:9b:71:c1:76:45:eb:69:74:c8:19:9e:48:3c: ad:54:ea:10:ae:7b:a2:db:74:ec:b6:b4:ef:c2:1f:c0:d8:bc: ab:6e:90:09:f7:2f:ee:53:42:6d:84:be:cb:76:aa:4b:ca:d6: a8:cd:a7:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhmlch77AAq8dWV3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJk ZWZjMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk MWVkZGZhNGUtOTQ4OS00OTQxLWE2OTYtN2IzMTE1ZDU4YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKQhArrbpGBNP9MszO/5oBrS0FhoTj59M9VS b8bgverY+1hfFdzeHWHTCnuX0Yf5QiRQKEMoZZoUAet9/FeqZuzzEwS/F3OJoNaj E3qUwxIpnlTkV1I/5O/5wmW+eXQokjYaF8MjwJfpaJuvEP4opPWMmBwLf7t20Yli LyhuLszfIHDGsvTDIcAHMK2UUvQfWLapjMP3vab6Mb+JBpFTEYFJs+CIfI/fQ9D8 nDX8AsmOBCHmB6Oa76On9Z07VZftaCBRu53VT+r7YqrwYHgLjPoeTY0fRT2H85go 7wUX0f/gjvDXpTCXzW8VBIpDHvyfYmCdRbSl6p75NNie02blEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVPOZTgND9gYFaoY5nV6dbho654MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84OTFj YzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvMjg5ODYwMTEtMDQ0ZC0z ZGRjLTkxZDktZWE3ZWQwMGU1NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODkxY2MwMWEtMzdiZC00MWNhLThm MmEtMjNjMDYyYmJkZWZjLzg5MWNjMDFhLTM3YmQtNDFjYS04ZjJhLTIzYzA2MmJi ZGVmYy5jcmwwHwYDVR0jBBgwFoAUnjHotKY0A7BPCiCfMGrdCmC4kkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2Mw NjJiYmRlZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9dDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFtTvgS0xT8Cxn3vDatUti52OkoXUweq6kM3Nj5TTVPoMx3lT22rlIg hI4mFfcMMXX1150Cvl0VQHh+rriDyIIWm4A45ZVxSVZsHfOu+xE7Kjbh17av9how 8RFnygcnd7qs3ijEFg1cPlkFNrXqEsPhT4GyUBFynlG63sosN3jqePk20ZwxGkth oLkigKVoaxReSYtpFnkvYxM0WPR+7b3NrF0dIz1p7ChtivYo7ss0olXcu0+7v7jI n7UdKzw2asFToSCUUwNQs6Otm3HBdkXraXTIGZ5IPK1U6hCue6LbdOy2tO/CH8DY vKtukAn3L+5TQm2Evst2qkvK1qjNp64= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:28 2025 by rpki-client