$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b441ed8b-6937-348e-bc75-12a5785f2020.roa File: b441ed8b-6937-348e-bc75-12a5785f2020.roa (raw, json) Hash identifier: Oby32BPQ5GsZ8G1ba0cHx1UbxYa6wBRjNZxEXTamxOg= Subject key identifier: EE:78:28:6C:38:94:35:4D:1E:FD:D8:03:98:51:CC:08:1E:C1:1E:AB Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858495ABEE192FE693E7BCE940880 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b441ed8b-6937-348e-bc75-12a5785f2020.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 55044 IP address blocks: 65.125.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e1:92:fe:69:3e:7b:ce:94:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=049ca8a7-5307-4675-8b8f-d9920c9c5325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:b9:ea:ea:ad:e6:b2:cd:f2:32:90:2b:06: 35:c9:50:1a:9a:87:a6:7f:0c:f3:9d:fc:cc:b8:a7: 4b:7c:be:d6:a8:18:ef:f2:f5:4f:6d:35:ae:f6:5e: c8:22:20:5d:c6:27:8f:16:ef:4d:36:b4:4e:ef:b5: a2:02:d9:95:37:b9:3a:3d:a2:b6:84:72:f3:a3:04: e2:41:33:95:cd:1c:06:96:a2:e2:32:35:e4:61:a0: 3f:5f:d0:f9:e0:50:35:e1:d0:6d:c6:a5:6a:62:85: 49:bc:15:70:d5:4b:6b:fa:31:7e:2d:bd:5a:86:50: 41:66:4b:45:15:3b:60:c2:33:ad:69:36:97:cc:af: cc:73:0e:56:48:e2:6d:18:cc:d7:6d:12:92:2d:55: 8f:0d:4a:d2:fc:d3:c0:31:d1:8d:f3:28:b0:f8:5c: e3:58:91:36:ca:c5:71:64:46:04:2f:cd:63:f7:22: 9d:e5:46:bf:99:8f:66:40:53:b7:8f:1f:11:e7:62: 41:67:1c:37:8a:ca:4a:29:28:78:ee:a8:34:b9:02: f3:5d:49:98:9c:0a:24:d4:a7:49:93:34:d8:91:c7: 30:0f:0e:6b:ee:7e:73:20:5e:56:11:7a:5a:1d:80: 39:c4:e9:a6:19:3d:bf:84:b7:08:f1:d5:c1:8b:a5: 5b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:78:28:6C:38:94:35:4D:1E:FD:D8:03:98:51:CC:08:1E:C1:1E:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b441ed8b-6937-348e-bc75-12a5785f2020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 65.125.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f4:9f:cd:27:49:8a:23:df:ba:4a:7d:00:20:8e:ac:3e:f5: 6a:1a:cd:b9:13:10:ef:50:d0:13:3e:60:da:d3:96:c1:ab:4e: 91:d3:60:af:a1:ab:48:b5:9c:65:0c:a7:eb:63:96:44:fb:73: f4:4e:5b:89:7c:cd:a3:b2:58:46:a7:fd:cf:10:0a:7e:49:b4: 01:9e:d8:29:11:3a:71:3e:a4:95:e8:1b:0c:5f:bb:ff:b1:93: 81:7e:f7:74:47:0b:b9:78:4c:5a:b7:d7:12:e6:ac:7a:f8:e1: 5b:41:e8:e4:d3:15:25:19:0b:9c:e9:7e:56:fa:ef:ba:a3:4c: dd:26:2a:6e:23:0b:24:da:5f:d2:e6:8f:67:22:26:05:82:ba: aa:d5:fd:e3:ca:4f:07:39:54:22:51:b5:35:1b:f4:07:7c:f2: bf:59:68:1c:16:f7:64:3d:b1:93:9e:b7:c0:b0:8c:b5:de:98: ac:91:be:6a:c8:37:52:1a:0a:f1:37:26:76:05:42:c4:81:0e: 05:83:35:6b:bf:89:45:26:3c:42:e0:f2:00:0f:00:53:d7:85: b6:b6:20:83:e2:92:61:0e:ed:b1:cd:ea:d9:cc:a8:92:8c:1d: 9a:e2:6f:9e:77:fe:82:a9:94:cd:6c:6c:61:34:cc:af:f6:8b: 2a:87:b4:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuGS/mk+e86UCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MDQ5Y2E4YTctNTMwNy00Njc1LThiOGYtZDk5MjBjOWM1MzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWa56uqt5rLN8jKQKwY1yVAamoemfwzznfzM uKdLfL7WqBjv8vVPbTWu9l7IIiBdxiePFu9NNrRO77WiAtmVN7k6PaK2hHLzowTi QTOVzRwGlqLiMjXkYaA/X9D54FA14dBtxqVqYoVJvBVw1Utr+jF+Lb1ahlBBZktF FTtgwjOtaTaXzK/Mcw5WSOJtGMzXbRKSLVWPDUrS/NPAMdGN8yiw+FzjWJE2ysVx ZEYEL81j9yKd5Ua/mY9mQFO3jx8R52JBZxw3ispKKSh47qg0uQLzXUmYnAok1KdJ kzTYkccwDw5r7n5zIF5WEXpaHYA5xOmmGT2/hLcI8dXBi6VbewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO54KGw4lDVNHv3YA5hRzAgewR6rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYjQ0MWVkOGItNjkzNy0z NDhlLWJjNzUtMTJhNTc4NWYyMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQX3dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI30n80nSYoj37pKfQAgjqw+9WoazbkTEO9Q0BM+YNrTlsGrTpHTYK+h q0i1nGUMp+tjlkT7c/ROW4l8zaOyWEan/c8QCn5JtAGe2CkROnE+pJXoGwxfu/+x k4F+93RHC7l4TFq31xLmrHr44VtB6OTTFSUZC5zpflb677qjTN0mKm4jCyTaX9Lm j2ciJgWCuqrV/ePKTwc5VCJRtTUb9Ad88r9ZaBwW92Q9sZOet8CwjLXemKyRvmrI N1IaCvE3JnYFQsSBDgWDNWu/iUUmPELg8gAPAFPXhba2IIPikmEO7bHN6tnMqJKM HZrib553/oKplM1sbGE0zK/2iyqHtAc= -----END CERTIFICATE-----Generated at Sun May 11 22:20:49 2025 by rpki-client