$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa File: 9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa (raw, json) Hash identifier: t/gxGcimMJkbX0GBnuT29i+uOiJgqTBBnDtxrOz3/IQ= Subject key identifier: 92:8E:4E:88:FD:97:16:93:3B:6B:6C:72:16:71:10:02:05:93:B6:88 Certificate issuer: /CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Certificate serial: 010D0C9F4328584908815610542A3916F2A09900 Authority key identifier: CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 397127 IP address blocks: 67.218.1.0/24 maxlen: 24 2620:13d:e000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:56:10:54:2a:39:16:f2:a0:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=fec07585-bd91-47e2-ba5f-d506905717aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d3:ac:6f:f0:29:e4:92:21:18:14:09:95:39: 22:89:d0:57:b9:f7:1a:6b:8e:c8:b2:eb:55:7e:c2: ea:18:88:79:42:06:ae:59:ed:fe:c8:5b:ed:f0:e4: 46:41:06:df:61:11:10:29:98:a6:5b:76:dc:f1:72: ce:f0:f8:77:70:d0:05:da:ad:2c:cd:7e:7b:39:0b: fe:a7:a3:81:df:bd:6f:ca:8f:6b:1b:6f:33:5f:6d: 2d:87:3f:bd:02:47:70:54:3d:5e:58:19:1c:70:1c: 3a:a3:29:9b:3f:fb:9d:a9:58:4f:c9:7d:57:0d:c5: b6:4e:46:0b:15:4a:45:ee:68:43:58:87:de:53:f6: 5c:b4:fd:a0:9d:b8:35:6d:25:8c:c7:8a:b9:d3:94: 6a:51:fa:85:9b:9e:b5:c5:fe:8c:61:e3:17:8e:98: ec:95:c2:d4:da:90:56:99:b8:9a:51:d9:53:9e:d4: 9b:cf:35:94:ba:40:dc:df:e3:88:1e:4c:e2:66:d2: 50:82:7a:59:a3:bb:f4:c1:03:55:49:f1:d7:0b:d2: 11:be:bf:e7:14:16:12:71:38:e4:19:0d:da:b6:f0: 23:95:64:a7:c3:30:f4:ea:08:1b:5e:1e:4b:c0:39: f4:c6:93:8d:6e:e6:31:53:61:aa:00:d7:6d:57:63: 7f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8E:4E:88:FD:97:16:93:3B:6B:6C:72:16:71:10:02:05:93:B6:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl X509v3 Authority Key Identifier: keyid:CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer sbgp-ipAddrBlock: critical IPv4: 67.218.1.0/24 IPv6: 2620:13d:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3e:19:27:ca:ac:7b:1b:df:5b:08:29:65:00:cb:5e:fe:f1: a3:cf:8a:7b:0f:d8:dd:e4:bf:55:ec:7b:8f:62:6a:24:f3:7c: 95:3a:53:d9:fe:52:33:40:64:64:08:8e:2e:c5:56:01:68:d3: 75:8b:39:74:ff:52:7d:3d:70:24:13:70:09:69:7b:f1:33:8d: c6:53:85:e2:58:cf:8c:9b:f8:b5:27:da:81:72:a8:84:14:26: cc:4c:dc:59:eb:68:cd:86:6c:11:04:93:e7:7c:e3:eb:af:b3: 01:da:b3:4a:06:59:9e:9d:ee:49:82:c0:a1:14:b1:63:98:d2: b3:f1:f4:bd:d3:b3:bb:f4:2d:78:01:a3:be:89:cf:06:ec:ea: 11:6e:9c:de:e9:ac:fe:63:2a:7b:2b:96:2e:ee:91:17:4f:80: 8e:00:a7:94:0f:c9:4d:c2:15:19:85:94:13:22:04:13:0f:1b: 9d:c1:f1:de:cd:96:1f:7a:45:c7:53:d0:a9:15:fb:c0:c7:0b: 3b:00:ba:e0:80:93:e3:bd:59:2e:85:02:fd:47:84:ab:5d:99: 28:60:d8:8c:cb:5e:75:c5:e2:9d:6b:bd:e5:8b:6e:58:b5:5b: 88:a6:ab:6d:a8:c3:bd:34:33:d3:41:a2:9d:2c:12:a1:92:63: 23:77:23:01 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkIgVYQVCo5FvKgmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU4ZjI3OTctYjZmYS00YzQ5LWEzZTItODExZDBjNDg0 NjE1MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZmVjMDc1ODUtYmQ5MS00N2UyLWJhNWYtZDUwNjkwNTcxN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNOsb/Ap5JIhGBQJlTkiidBXufcaa47IsutV fsLqGIh5QgauWe3+yFvt8ORGQQbfYREQKZimW3bc8XLO8Ph3cNAF2q0szX57OQv+ p6OB371vyo9rG28zX20thz+9AkdwVD1eWBkccBw6oymbP/udqVhPyX1XDcW2TkYL FUpF7mhDWIfeU/ZctP2gnbg1bSWMx4q505RqUfqFm561xf6MYeMXjpjslcLU2pBW mbiaUdlTntSbzzWUukDc3+OIHkziZtJQgnpZo7v0wQNVSfHXC9IRvr/nFBYScTjk GQ3atvAjlWSnwzD06ggbXh5LwDn0xpONbuYxU2GqANdtV2N/FQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJKOToj9lxaTO2tschZxEAIFk7aIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZThm Mjc5Ny1iNmZhLTRjNDktYTNlMi04MTFkMGM0ODQ2MTUvOWJkODkzZDctYWY2ZS0z NGM2LWIzMTEtOTRhNzdkMWU0MmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU4ZjI3OTctYjZmYS00YzQ5LWEz ZTItODExZDBjNDg0NjE1L2FlOGYyNzk3LWI2ZmEtNGM0OS1hM2UyLTgxMWQwYzQ4 NDYxNS5jcmwwHwYDVR0jBBgwFoAUz7ik/uhMqXTUbgBNZMs+DoEvxugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZThmMjc5Ny1iNmZhLTRjNDktYTNlMi04MTFk MGM0ODQ2MTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQ9oBMA8E AgACMAkDBwQmIAE94AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADz4ZJ8qsexvfWwgpZQDLXv7xo8+Kew/Y 3eS/Vex7j2JqJPN8lTpT2f5SM0BkZAiOLsVWAWjTdYs5dP9SfT1wJBNwCWl78TON xlOF4ljPjJv4tSfagXKohBQmzEzcWetozYZsEQST53zj66+zAdqzSgZZnp3uSYLA oRSxY5jSs/H0vdOzu/QteAGjvonPBuzqEW6c3ums/mMqeyuWLu6RF0+AjgCnlA/J TcIVGYWUEyIEEw8bncHx3s2WH3pFx1PQqRX7wMcLOwC64ICT471ZLoUC/UeEq12Z KGDYjMtedcXinWu95YtuWLVbiKarbajDvTQz00GinSwSoZJjI3cjAQ== -----END CERTIFICATE-----Generated at Fri Mar 14 10:39:33 2025 by rpki-client