$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4418db0a-1628-3c5d-b614-7de117f0a9fd.roa File: 4418db0a-1628-3c5d-b614-7de117f0a9fd.roa (raw, json) Hash identifier: AkY44pEF7dZP/wcAlPWmwHNSBFIVlCLoRMP2lhu/Rog= Subject key identifier: 11:B3:36:0D:A6:2F:60:27:E4:ED:E4:C1:3E:DE:A4:30:E3:BF:69:98 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F432858491246A9281B81F94F4B3CF680 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4418db0a-1628-3c5d-b614-7de117f0a9fd.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 21866 IP address blocks: 67.217.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a9:28:1b:81:f9:4f:4b:3c:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=8df94d2d-754b-47a1-9ced-366803ede1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:e5:0b:22:14:fa:0c:d3:00:1d:e5:35:b3: 28:b9:f0:4f:fa:c4:0a:70:12:02:d8:61:f3:4c:aa: f8:c2:d3:90:2b:f7:93:96:24:8a:79:86:95:f0:24: 72:3d:0d:68:9b:16:a4:fc:59:ad:60:a2:fd:c3:38: 0a:0f:bc:97:fd:f1:fc:9d:be:5a:82:f9:e7:f3:68: 2a:c3:04:27:5e:69:76:29:c3:d8:bf:1c:75:f4:40: 3c:41:73:55:12:98:15:5d:61:63:b8:b1:7f:4a:3b: 5d:58:51:8c:19:6f:a2:41:4f:c2:44:d6:c7:01:a4: 6d:55:01:99:29:1c:79:b6:46:2a:cd:64:9e:5c:2d: e2:c2:9b:d1:07:a1:cd:36:78:a9:eb:1b:62:e9:5f: 7c:b5:67:6c:0c:e3:50:87:a8:ba:44:bf:d1:78:d3: 45:c2:ac:13:6e:aa:d6:f8:1f:29:43:4e:34:8d:0a: d1:1f:e2:e2:44:f2:12:ba:1e:e2:43:7c:a7:5d:1e: c4:fd:4c:a7:df:9a:27:b7:07:63:1f:02:77:f6:77: 8a:c1:77:96:51:50:e3:b1:62:ae:ef:16:c1:8b:b9: 1c:ef:15:2e:9c:ff:35:6a:cb:17:9d:17:7e:d0:2a: 47:fd:22:50:db:d5:e1:18:09:7a:d8:42:3e:f7:9b: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B3:36:0D:A6:2F:60:27:E4:ED:E4:C1:3E:DE:A4:30:E3:BF:69:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4418db0a-1628-3c5d-b614-7de117f0a9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 67.217.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:4b:8d:c0:38:5d:fb:8d:22:34:42:2e:43:58:96:9d:e3:fd: 3c:33:64:95:12:1c:5f:80:d3:c3:7d:74:17:56:3e:3b:43:2a: 01:2e:49:25:c0:98:36:60:e6:5d:1f:c4:a5:e3:f8:10:53:b0: 72:38:da:e9:94:a5:7f:cf:fb:5f:f8:91:a8:12:59:a8:64:dd: c1:8c:87:05:eb:77:44:78:36:0d:d8:63:e0:a8:df:45:a3:ee: bc:a9:db:23:6f:98:49:83:74:d4:62:4f:72:bf:ff:92:9c:c1: 0a:87:ea:1f:8c:c5:d4:2e:4e:05:af:bd:60:84:1d:81:ef:e9: 46:60:25:58:e0:a1:ce:58:6b:d5:5d:3b:10:24:f7:44:7a:df: 2d:22:5d:40:eb:69:e6:e6:da:30:b3:9d:ab:dd:e3:c6:a5:90: ce:01:b5:7a:25:59:f1:f3:54:71:b1:8a:cd:8a:5a:e0:2c:49: a3:85:61:cc:55:58:76:c8:1c:07:a0:8a:a2:cd:4b:97:a9:0c: 8d:e0:70:e6:d1:79:71:12:71:50:63:9e:36:55:a6:0a:02:b5: 09:70:c3:7a:79:60:e7:01:dc:cb:ed:06:67:f2:c4:66:61:ed: 56:26:c6:99:9e:89:07:75:03:6d:1d:6e:e4:e5:62:fa:ff:bf: eb:3f:2e:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqkoG4H5T0s89oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OGRmOTRkMmQtNzU0Yi00N2ExLTljZWQtMzY2ODAzZWRlMWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwTlCyIU+gzTAB3lNbMoufBP+sQKcBIC2GHz TKr4wtOQK/eTliSKeYaV8CRyPQ1omxak/FmtYKL9wzgKD7yX/fH8nb5agvnn82gq wwQnXml2KcPYvxx19EA8QXNVEpgVXWFjuLF/SjtdWFGMGW+iQU/CRNbHAaRtVQGZ KRx5tkYqzWSeXC3iwpvRB6HNNnip6xti6V98tWdsDONQh6i6RL/ReNNFwqwTbqrW +B8pQ040jQrRH+LiRPISuh7iQ3ynXR7E/Uyn35ontwdjHwJ39neKwXeWUVDjsWKu 7xbBi7kc7xUunP81assXnRd+0CpH/SJQ29XhGAl62EI+95tiqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGzNg2mL2An5O3kwT7epDDjv2mYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDQxOGRiMGEtMTYyOC0z YzVkLWI2MTQtN2RlMTE3ZjBhOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9laMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdLjcA4XfuNIjRCLkNYlp3j/TwzZJUSHF+A08N9dBdWPjtDKgEuSSXA mDZg5l0fxKXj+BBTsHI42umUpX/P+1/4kagSWahk3cGMhwXrd0R4Ng3YY+Co30Wj 7ryp2yNvmEmDdNRiT3K//5KcwQqH6h+MxdQuTgWvvWCEHYHv6UZgJVjgoc5Ya9Vd OxAk90R63y0iXUDraebm2jCznavd48alkM4BtXolWfHzVHGxis2KWuAsSaOFYcxV WHbIHAegiqLNS5epDI3gcObReXEScVBjnjZVpgoCtQlww3p5YOcB3MvtBmfyxGZh 7VYmxpmeiQd1A20dbuTlYvr/v+s/Lss= -----END CERTIFICATE-----Generated at Sat Apr 5 16:47:23 2025 by rpki-client