$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa File: 58bb2d1c-10b2-3954-b73d-a493764205ed.roa (raw, json) Hash identifier: 1fFYGpU3oFMieNfv/5eSQO/Azf3b0MQ8/TD0g7IVkcw= Subject key identifier: 9F:6A:5B:B5:2F:13:5B:5F:31:B9:7A:EC:18:8F:E8:D2:93:F4:5D:3D Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F432858493C092CFEB30ADC80DC2B4000 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 35908 IP address blocks: 67.198.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:2c:fe:b3:0a:dc:80:dc:2b:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=969640ed-8098-4a9b-b453-1277fc7e753e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:f1:34:c0:07:37:3e:4a:0b:74:1c:3e:67: 12:32:4f:41:f7:8b:de:99:81:a3:9a:00:f0:46:03: 39:6e:62:6a:d3:c1:e2:9c:d2:b6:f6:43:d0:12:b4: a1:46:69:ae:68:10:ea:a7:79:6a:12:c9:f1:9f:e7: a8:c0:ae:8a:e6:32:6f:42:f2:16:6b:f3:2f:fb:00: f2:b1:e0:d6:a5:94:07:21:29:ce:90:ce:c8:3b:05: ef:db:70:00:4c:3a:97:fa:fd:9d:52:d0:5c:e6:9d: 34:a7:83:1a:53:87:70:90:41:41:fd:6f:fd:8b:8f: 0f:62:7b:82:42:f7:ce:4f:02:58:b4:e1:27:2c:c5: 1c:09:8e:e2:58:26:8b:40:90:7e:71:8b:83:40:e6: a9:54:f6:19:89:a9:c1:bf:d1:ee:a6:0d:98:f0:c4: 40:58:3d:40:49:ef:9b:6f:bf:7c:ab:88:8f:a1:76: 09:03:9f:11:14:14:00:6a:ac:ca:d2:41:e4:47:e4: ec:80:be:a6:ff:b1:ce:2d:44:77:22:92:38:01:c8: 72:b6:93:25:4f:b1:fc:f0:dc:aa:30:c7:25:ff:e7: 28:19:0c:2b:f1:13:eb:1b:aa:7b:2f:f0:fc:50:d5: eb:54:b5:33:33:6b:ed:4c:4b:9b:a6:3b:15:22:05: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6A:5B:B5:2F:13:5B:5F:31:B9:7A:EC:18:8F:E8:D2:93:F4:5D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/58bb2d1c-10b2-3954-b73d-a493764205ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 67.198.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:45:b3:2b:d3:0f:a8:73:9f:4f:b8:1d:6e:b2:17:77:d6:d9: be:9c:93:21:46:4f:33:cb:c3:3f:b4:8c:c6:ff:c4:4f:52:41: 70:32:60:0f:f8:bf:5f:57:7e:f7:aa:95:74:b0:d8:b2:46:a3: b2:1c:6c:b9:12:ca:2f:ab:e4:91:f8:91:cc:19:6b:a7:6c:c3: 06:d4:c9:d0:d3:c1:89:19:85:bd:07:61:09:54:c0:b9:2f:38: 57:47:7a:0a:ce:23:fe:49:41:45:cb:e2:17:fc:c7:16:62:75: 36:77:8c:6b:e9:2d:e1:f4:3e:89:4d:86:c4:59:c0:87:a6:f7: f2:f4:91:bd:58:6a:59:55:d4:7d:7c:d0:c6:3b:fb:05:83:7d: 6e:6b:32:f0:0c:5c:93:cc:11:2b:c9:5a:16:4e:a5:fc:0d:a3: 9f:fc:36:16:ba:f5:b4:df:94:a4:55:48:44:88:dc:ad:13:db: 71:d8:56:34:1e:d8:7a:f5:4e:5b:49:0b:f3:bb:a1:9a:48:c1: dd:97:4a:8c:23:7b:55:2c:1f:ce:3a:03:51:e7:e6:e4:01:91: 64:0a:87:69:f6:27:bf:dd:46:11:d2:4f:9b:8a:65:3a:21:b2: d9:d6:db:f9:07:61:8e:6c:e2:0d:4d:c9:0a:d1:6a:de:5d:e2: 07:95:3b:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CSz+swrcgNwrQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk OTY5NjQwZWQtODA5OC00YTliLWI0NTMtMTI3N2ZjN2U3NTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF3xNMAHNz5KC3QcPmcSMk9B94vemYGjmgDw RgM5bmJq08HinNK29kPQErShRmmuaBDqp3lqEsnxn+eowK6K5jJvQvIWa/Mv+wDy seDWpZQHISnOkM7IOwXv23AATDqX+v2dUtBc5p00p4MaU4dwkEFB/W/9i48PYnuC QvfOTwJYtOEnLMUcCY7iWCaLQJB+cYuDQOapVPYZianBv9Hupg2Y8MRAWD1ASe+b b798q4iPoXYJA58RFBQAaqzK0kHkR+TsgL6m/7HOLUR3IpI4AchytpMlT7H88Nyq MMcl/+coGQwr8RPrG6p7L/D8UNXrVLUzM2vtTEubpjsVIgXYEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9qW7UvE1tfMbl67BiP6NKT9F09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNThiYjJkMWMtMTBiMi0z OTU0LWI3M2QtYTQ5Mzc2NDIwNWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQ8aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFFsyvTD6hzn0+4HW6yF3fW2b6ckyFGTzPLwz+0jMb/xE9SQXAyYA/4 v19XfveqlXSw2LJGo7IcbLkSyi+r5JH4kcwZa6dswwbUydDTwYkZhb0HYQlUwLkv OFdHegrOI/5JQUXL4hf8xxZidTZ3jGvpLeH0PolNhsRZwIem9/L0kb1YallV1H18 0MY7+wWDfW5rMvAMXJPMESvJWhZOpfwNo5/8Nha69bTflKRVSESI3K0T23HYVjQe 2Hr1TltJC/O7oZpIwd2XSowje1UsH846A1Hn5uQBkWQKh2n2J7/dRhHST5uKZToh stnW2/kHYY5s4g1NyQrRat5d4geVO8c= -----END CERTIFICATE-----Generated at Wed May 7 11:39:16 2025 by rpki-client