$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/40a22eee-4031-3336-8b2d-96d68d61d8a9.roa File: 40a22eee-4031-3336-8b2d-96d68d61d8a9.roa (raw, json) Hash identifier: nqQfaSFVKVogfYuruJuO6hW4VLjteIy18ss/nLG3Pfg= Subject key identifier: A6:93:EC:09:2D:CB:EC:C0:0A:14:46:D1:BF:77:88:30:13:1C:FD:AF Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584A0D6A880507633277AC3F3190 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/40a22eee-4031-3336-8b2d-96d68d61d8a9.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 35998 IP address blocks: 67.21.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:88:05:07:63:32:77:ac:3f:31:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=43e3c33a-2dda-4b07-be7c-907b7b161834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:69:5f:1a:d6:82:e9:95:ef:56:f8:9c:62:b6: 6c:0a:6e:33:fb:cf:09:7d:db:e8:75:d7:c4:7a:55: 77:ae:e7:e6:2c:ab:2e:ba:22:25:4b:ac:d2:86:70: d8:ba:23:6a:6e:ed:2d:97:0f:f2:d4:ab:c9:0b:33: 7a:d4:15:57:b5:61:b3:4b:4b:f8:e0:31:be:b0:28: e4:ec:8a:83:84:1f:a8:77:22:21:c0:e6:a1:fa:ed: 90:b3:b5:55:f0:34:be:05:4d:b5:99:33:c0:64:c9: 0d:23:0e:80:87:2b:e4:2b:9b:d1:5d:c8:7d:fe:75: dc:04:ef:0b:ac:45:7e:60:3a:46:91:f0:e2:64:38: 72:46:cc:00:31:41:fa:d0:04:f2:9c:e1:98:ad:64: ca:44:62:04:7e:a7:2b:89:dd:c0:33:8d:ec:0f:bc: 67:63:0c:7b:fa:e3:21:83:6f:11:5c:25:ab:60:ff: 40:6c:ec:0d:15:53:b5:0e:b7:53:9c:1b:28:47:54: d1:4b:37:3d:48:61:ef:ea:4e:75:cc:75:77:aa:a1: bb:62:3d:e0:52:b8:78:27:6c:14:90:4c:9b:f5:f9: 0c:9f:48:1f:e0:d2:2b:75:d3:cf:6d:1d:2c:b6:7c: 11:77:b3:bd:14:83:ef:33:3e:ef:c5:f0:01:66:56: 33:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:93:EC:09:2D:CB:EC:C0:0A:14:46:D1:BF:77:88:30:13:1C:FD:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/40a22eee-4031-3336-8b2d-96d68d61d8a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 67.21.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:c9:92:6c:28:c3:74:e3:15:e2:f5:40:f0:77:35:c8:5c:a6: 75:13:8d:bd:24:e3:44:a5:c9:7b:65:f2:95:6c:66:ed:92:90: 6d:63:85:9e:05:fe:b8:8c:bc:36:f1:aa:c5:88:57:33:3c:48: 52:14:b7:5d:2e:d0:d4:1c:22:3a:b6:cd:4f:e4:0e:1e:09:ba: 23:c0:83:41:50:ad:ef:8f:bd:23:0e:f5:0f:72:ad:1e:75:7f: 59:30:28:94:dc:ca:7b:cf:d4:80:49:0b:83:5e:b7:d5:84:2b: ee:50:de:24:7d:c3:4e:ed:7a:98:b2:b0:1a:0c:c2:d4:72:12: 98:ba:33:be:7f:c8:70:61:b4:95:cb:8c:58:49:f8:ee:39:20: 12:a6:70:3a:86:36:34:69:75:97:e1:bb:e5:b8:ec:c6:23:8e: a6:6d:20:33:90:62:96:c3:f0:85:44:65:5c:a6:cc:eb:cf:68: f0:c8:54:ed:26:cb:fa:88:cd:df:c8:5e:17:f5:bf:bb:fa:d6: 18:87:84:44:24:25:04:fc:b8:72:c3:73:8c:a1:62:e4:55:83: cd:0e:7a:20:16:50:3d:58:21:29:e0:be:e1:91:bd:0c:50:c2: e7:06:58:d8:13:5f:23:be:49:29:ee:bb:83:81:29:fa:30:08: 9c:86:c4:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaogFB2Myd6w/MZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk NDNlM2MzM2EtMmRkYS00YjA3LWJlN2MtOTA3YjdiMTYxODM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGlfGtaC6ZXvVvicYrZsCm4z+88JfdvoddfE elV3rufmLKsuuiIlS6zShnDYuiNqbu0tlw/y1KvJCzN61BVXtWGzS0v44DG+sCjk 7IqDhB+odyIhwOah+u2Qs7VV8DS+BU21mTPAZMkNIw6AhyvkK5vRXch9/nXcBO8L rEV+YDpGkfDiZDhyRswAMUH60ATynOGYrWTKRGIEfqcrid3AM43sD7xnYwx7+uMh g28RXCWrYP9AbOwNFVO1DrdTnBsoR1TRSzc9SGHv6k51zHV3qqG7Yj3gUrh4J2wU kEyb9fkMn0gf4NIrddPPbR0stnwRd7O9FIPvMz7vxfABZlYzRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaT7Akty+zAChRG0b93iDATHP2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvNDBhMjJlZWUtNDAzMS0z MzM2LThiMmQtOTZkNjhkNjFkOGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQxWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbJkmwow3TjFeL1QPB3NchcpnUTjb0k40SlyXtl8pVsZu2SkG1jhZ4F /riMvDbxqsWIVzM8SFIUt10u0NQcIjq2zU/kDh4JuiPAg0FQre+PvSMO9Q9yrR51 f1kwKJTcynvP1IBJC4Net9WEK+5Q3iR9w07tepiysBoMwtRyEpi6M75/yHBhtJXL jFhJ+O45IBKmcDqGNjRpdZfhu+W47MYjjqZtIDOQYpbD8IVEZVymzOvPaPDIVO0m y/qIzd/IXhf1v7v61hiHhEQkJQT8uHLDc4yhYuRVg80OeiAWUD1YISngvuGRvQxQ wucGWNgTXyO+SSnuu4OBKfowCJyGxFM= -----END CERTIFICATE-----Generated at Tue Jul 1 01:31:06 2025 by rpki-client