$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/7ea757a6-3e0f-3408-9ea2-aa7a7d9207e3.roa File: 7ea757a6-3e0f-3408-9ea2-aa7a7d9207e3.roa (raw, json) Hash identifier: ui7Plk/wHe+8vNlBj66WPS3vN6pHHyLVouuY2+8KGys= Subject key identifier: 17:04:61:08:A2:C9:29:BA:D8:33:7D:9E:83:D7:F1:DE:D1:E4:F9:5F Certificate issuer: /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939 Certificate serial: 010D0C9F43285848E59BC063E8AEB75C03995800 Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/7ea757a6-3e0f-3408-9ea2-aa7a7d9207e3.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 396140 IP address blocks: 67.226.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c0:63:e8:ae:b7:5c:03:99:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=1bfbdc26-61f9-4b35-9ac3-57de526f3e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d8:ae:b4:a0:d4:39:95:da:b1:ac:bf:54:18: 16:55:91:58:fe:8a:3c:4f:8d:8f:d4:50:29:8d:40: 3c:b0:5d:72:6c:ed:76:50:aa:78:99:62:9c:d2:de: 9b:f1:a1:c1:2c:16:84:0a:74:4e:3c:80:bf:3d:aa: d4:a8:1c:34:56:ce:60:d4:b3:fe:be:74:63:aa:8b: 09:98:63:0f:37:8f:90:f1:d4:95:17:f1:5b:93:e0: 10:81:2c:c8:e8:fc:2e:49:5f:21:1b:59:1c:0c:7d: 6b:90:6e:71:39:c4:58:55:1a:90:62:27:85:75:c3: ef:b0:e5:22:54:e5:ae:84:65:fa:d0:a9:25:89:59: 89:da:bb:3e:e8:4b:5b:58:9f:3a:b4:7c:71:0a:56: 80:33:57:50:95:58:fb:7c:17:c8:92:20:6d:4c:c9: b6:10:6f:17:4b:bb:09:4d:5f:37:09:28:ae:4f:99: dc:b4:91:ac:34:22:db:2d:f5:97:32:18:c7:c1:71: 1a:56:7f:91:2e:f3:7e:44:0e:7c:51:b3:8a:23:0d: 77:59:26:93:28:a4:58:16:24:6b:7b:91:82:2e:00: 11:df:2e:3c:32:98:03:7d:a1:9e:57:90:d7:61:cf: b9:7f:97:5c:b9:08:a2:13:37:5e:e7:de:87:b2:39: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:04:61:08:A2:C9:29:BA:D8:33:7D:9E:83:D7:F1:DE:D1:E4:F9:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/7ea757a6-3e0f-3408-9ea2-aa7a7d9207e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl X509v3 Authority Key Identifier: keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer sbgp-ipAddrBlock: critical IPv4: 67.226.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:90:ba:f2:d8:c1:cb:d8:4d:d2:b1:aa:35:f2:d6:25:3b:86: ea:8f:ba:38:c7:a5:72:e0:4d:94:1a:5e:83:f1:09:25:ff:88: c6:d1:fd:65:4c:78:6c:85:7c:15:78:04:b4:76:22:26:25:8d: 76:1d:eb:02:ad:9a:3c:11:b9:1c:88:99:0f:95:0c:31:e2:aa: 74:24:4c:09:63:61:83:7d:35:d2:2d:ee:69:6a:43:ca:eb:39: 2a:b2:1e:cb:3d:b9:4d:15:19:9c:c3:a7:2b:2a:69:d6:d8:ec: ce:fb:7f:a4:c4:ec:e6:86:89:18:3d:8f:48:7c:5e:d4:21:04: 3c:46:03:39:63:d3:d0:95:b0:34:48:3f:1c:e7:ee:b2:9c:35: dc:be:88:80:3a:df:e4:7e:31:f6:64:6e:e7:f4:03:03:15:8f: 0b:43:ba:84:74:38:23:d1:c8:4f:62:fd:a5:0a:ee:d2:3e:6e: 8f:27:5c:8a:e6:2a:3b:de:8c:8d:c7:f2:ea:b4:e8:cb:9d:56: a8:bf:49:bd:e9:e5:c5:51:1d:80:6d:2f:74:ce:30:37:8a:e5: e5:f6:65:7f:19:c8:69:bc:5e:ee:11:37:dd:56:e1:72:e1:0e: a9:10:69:34:b8:10:1b:c3:75:64:fe:ac:33:fc:5e:e9:c3:8a: c3:20:90:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm8Bj6K63XAOZWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI4Y2NjYzgtNGMxZC00NTdiLWE3MDktMmYyYzVkODNj OTM5MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MWJmYmRjMjYtNjFmOS00YjM1LTlhYzMtNTdkZTUyNmYzZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9iutKDUOZXasay/VBgWVZFY/oo8T42P1FAp jUA8sF1ybO12UKp4mWKc0t6b8aHBLBaECnROPIC/ParUqBw0Vs5g1LP+vnRjqosJ mGMPN4+Q8dSVF/Fbk+AQgSzI6PwuSV8hG1kcDH1rkG5xOcRYVRqQYieFdcPvsOUi VOWuhGX60KkliVmJ2rs+6EtbWJ86tHxxClaAM1dQlVj7fBfIkiBtTMm2EG8XS7sJ TV83CSiuT5nctJGsNCLbLfWXMhjHwXEaVn+RLvN+RA58UbOKIw13WSaTKKRYFiRr e5GCLgAR3y48MpgDfaGeV5DXYc+5f5dcuQiiEzde596HsjkT8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcEYQiiySm62DN9noPX8d7R5PlfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Mjhj Y2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJjNWQ4M2M5MzkvN2VhNzU3YTYtM2UwZi0z NDA4LTllYTItYWE3YTdkOTIwN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTI4Y2NjYzgtNGMxZC00NTdiLWE3 MDktMmYyYzVkODNjOTM5LzkyOGNjY2M4LTRjMWQtNDU3Yi1hNzA5LTJmMmM1ZDgz YzkzOS5jcmwwHwYDVR0jBBgwFoAU50jP7N+pFw+ueUr7PjNtsErFiKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MjhjY2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJj NWQ4M2M5MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ+LdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6QuvLYwcvYTdKxqjXy1iU7huqPujjHpXLgTZQaXoPxCSX/iMbR/WVM eGyFfBV4BLR2IiYljXYd6wKtmjwRuRyImQ+VDDHiqnQkTAljYYN9NdIt7mlqQ8rr OSqyHss9uU0VGZzDpysqadbY7M77f6TE7OaGiRg9j0h8XtQhBDxGAzlj09CVsDRI Pxzn7rKcNdy+iIA63+R+MfZkbuf0AwMVjwtDuoR0OCPRyE9i/aUK7tI+bo8nXIrm KjvejI3H8uq06MudVqi/Sb3p5cVRHYBtL3TOMDeK5eX2ZX8ZyGm8Xu4RN91W4XLh DqkQaTS4EBvDdWT+rDP8XunDisMgkOY= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:12 2025 by rpki-client