$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3e4faa23-8443-3d90-82ac-ccf2625a1375.roa File: 3e4faa23-8443-3d90-82ac-ccf2625a1375.roa (raw, json) Hash identifier: QKgE3odHZO410zYxf22nNXKPU08jsfOjTnCo063fy/w= Subject key identifier: 70:F3:4F:E2:62:22:A1:DC:4A:CA:F9:3F:0A:2A:FF:34:C6:39:BD:CB Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584949FE9765FA44311885D0F8C0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3e4faa23-8443-3d90-82ac-ccf2625a1375.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 14618 IP address blocks: 67.217.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:97:65:fa:44:31:18:85:d0:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=da11ada1-3cb8-4160-93bb-22824c48a578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2d:5b:b6:67:2e:3e:6b:eb:4e:8f:f6:6b:c5: c3:53:17:80:e9:a4:28:af:ee:d7:a5:36:7f:5a:60: 13:85:69:fc:3c:17:6a:f8:60:ad:5b:7c:c4:bc:bc: c0:c8:04:e3:f1:c7:cb:dd:c4:c9:43:3e:c2:b9:54: f4:0a:7b:aa:26:b7:68:90:c0:ba:7f:c0:5e:9f:8f: 0f:6f:9e:67:17:8a:70:66:d9:d6:13:70:0a:a6:68: 2b:fb:36:e2:be:d2:62:7f:8c:50:17:87:e6:b5:fe: e6:56:0e:71:c5:7f:bd:04:ea:26:35:83:45:57:6c: 8f:71:bb:3f:8e:f7:9b:bb:f6:7a:54:01:6d:57:5e: 50:be:d1:06:16:9c:99:ae:81:3b:c0:28:29:55:22: c5:14:3e:1b:c2:dc:a5:39:4a:a8:91:3b:7d:39:8a: 91:0a:8b:9a:50:09:dc:ba:7a:f7:16:3f:a4:c7:40: 32:96:49:a8:2e:1c:d8:07:9d:0a:7e:38:9d:be:fa: 67:88:f1:2e:c1:04:e1:38:72:aa:8a:b4:71:1c:43: ea:d0:9f:2c:32:1c:a5:b0:be:0f:be:56:4c:ee:a2: a8:6b:bc:d7:85:f8:6d:33:5a:ef:2b:49:f6:16:0f: 3f:ec:bb:df:ed:f6:f0:0e:0c:11:4a:e9:60:88:0a: 53:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F3:4F:E2:62:22:A1:DC:4A:CA:F9:3F:0A:2A:FF:34:C6:39:BD:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/3e4faa23-8443-3d90-82ac-ccf2625a1375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:8d:ad:01:e0:bb:36:34:05:cb:f0:14:bf:a4:b1:c6:dc:9e: 89:b9:84:15:25:6a:bf:74:42:08:0d:d9:94:91:8a:ff:a6:78: e9:7e:26:f0:ae:b0:c6:34:b0:b2:7c:dc:f8:29:d0:10:cc:91: 5c:f7:8f:c3:b1:e4:38:aa:b3:a7:d9:37:a1:1a:6a:43:15:e0: aa:dc:63:5a:3a:25:e2:2a:6b:98:5d:63:66:9a:bb:f5:64:b5: de:ac:42:c3:2b:3a:84:2f:0f:19:fe:d7:37:59:a7:da:a3:8c: 9a:23:9b:30:fd:48:36:d5:ff:5c:db:90:d7:1e:0f:c8:a7:04: ab:fe:80:50:f1:8d:55:09:2a:c6:69:fd:80:28:cb:8e:b5:cd: 56:d5:17:71:b8:67:3b:2f:ed:2c:ab:26:df:d7:ac:cb:a4:37: 1f:f7:0e:ac:8f:1a:bb:5f:17:5d:c0:02:5d:6d:02:82:10:dc: b9:32:68:14:36:8c:9b:bf:b8:6c:68:29:dc:00:f7:6e:f4:94: 37:e6:70:e2:fb:17:ba:c6:1b:45:9d:5b:76:15:5b:6e:da:e3: d5:0f:1c:04:ca:f4:aa:77:8a:fd:23:2e:85:3e:7a:48:4c:e9: 7f:8c:0d:0b:3c:1d:4a:5b:88:d4:41:e0:1c:ba:10:4b:32:fa: 8f:d9:c7:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pdl+kQxGIXQ+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZGExMWFkYTEtM2NiOC00MTYwLTkzYmItMjI4MjRjNDhhNTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki1btmcuPmvrTo/2a8XDUxeA6aQor+7XpTZ/ WmAThWn8PBdq+GCtW3zEvLzAyATj8cfL3cTJQz7CuVT0CnuqJrdokMC6f8Ben48P b55nF4pwZtnWE3AKpmgr+zbivtJif4xQF4fmtf7mVg5xxX+9BOomNYNFV2yPcbs/ jvebu/Z6VAFtV15QvtEGFpyZroE7wCgpVSLFFD4bwtylOUqokTt9OYqRCouaUAnc unr3Fj+kx0AylkmoLhzYB50KfjidvvpniPEuwQThOHKqirRxHEPq0J8sMhylsL4P vlZM7qKoa7zXhfhtM1rvK0n2Fg8/7Lvf7fbwDgwRSulgiApTlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDzT+JiIqHcSsr5Pwoq/zTGOb3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvM2U0ZmFhMjMtODQ0My0z ZDkwLTgyYWMtY2NmMjYyNWExMzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCNrQHguzY0BcvwFL+kscbcnom5hBUlar90QggN2ZSRiv+meOl+JvCu sMY0sLJ83Pgp0BDMkVz3j8Ox5Diqs6fZN6EaakMV4KrcY1o6JeIqa5hdY2aau/Vk td6sQsMrOoQvDxn+1zdZp9qjjJojmzD9SDbV/1zbkNceD8inBKv+gFDxjVUJKsZp /YAoy461zVbVF3G4Zzsv7SyrJt/XrMukNx/3DqyPGrtfF13AAl1tAoIQ3LkyaBQ2 jJu/uGxoKdwA9270lDfmcOL7F7rGG0WdW3YVW27a49UPHATK9Kp3iv0jLoU+ekhM 6X+MDQs8HUpbiNRB4By6EEsy+o/Zx3s= -----END CERTIFICATE-----Generated at Fri Apr 4 23:51:33 2025 by rpki-client