$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa File: cb33f4ca-7864-3f1e-854d-1cec059ee046.roa (raw, json) Hash identifier: a/JAs5w9OnqAJD38PDtsSjhwq393CmLLUNxK6moUIz4= Subject key identifier: 88:42:05:4B:C7:21:0A:4F:23:04:23:33:F2:AC:85:32:5A:73:14:67 Certificate issuer: /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Certificate serial: 010D0C9F4328584902EC18CB854380832C176C80 Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 25899 IP address blocks: 67.210.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:18:cb:85:43:80:83:2c:17:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=b0500aca-0924-4598-a518-7b269e2ed996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8d:80:81:84:e2:05:99:d9:f5:78:0a:87:09: b9:70:71:d5:da:6b:60:42:26:0a:dc:68:31:17:cc: 3f:2a:d4:09:76:fc:22:c7:ba:ee:6c:c9:84:53:f3: 02:bf:1f:c4:28:25:be:d5:0b:6f:db:bb:79:b0:f8: 0d:58:ef:ac:6a:79:da:8d:41:8f:80:cb:a3:5d:69: ef:3d:59:90:9b:7f:dc:af:4d:df:66:ee:8f:cb:60: b3:48:a9:23:30:c3:b4:db:b9:1c:58:9a:c4:47:5e: ef:30:0e:0f:13:49:c6:ba:9d:2f:68:3a:11:ca:bc: fb:9a:4d:8d:bf:6f:ea:a9:86:48:0c:c3:9d:52:23: 89:2d:eb:c3:e9:fe:6c:c2:fc:f9:e9:41:0f:0c:f0: 62:ce:7c:c3:37:25:1a:71:5b:c2:89:9a:ef:6e:95: bf:f1:12:34:e8:53:e3:93:57:77:c2:c6:10:ab:bd: c8:69:db:62:84:d0:57:55:d8:43:7a:7b:b7:e3:a1: af:b5:31:be:9f:d0:bf:21:54:7b:4c:4b:58:61:c3: 40:75:af:d6:28:b8:89:c0:63:c8:9c:4a:3a:fb:3d: 39:bc:43:f1:34:87:04:7a:ce:2a:d3:56:0c:64:82: 2e:b7:5c:1f:0e:6d:fd:5b:bb:62:79:c9:15:14:ec: 91:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:42:05:4B:C7:21:0A:4F:23:04:23:33:F2:AC:85:32:5A:73:14:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl X509v3 Authority Key Identifier: keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer sbgp-ipAddrBlock: critical IPv4: 67.210.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:83:a4:1d:72:0c:cc:21:c4:fe:ab:0d:6d:13:dc:3d:d2:db: f1:1d:39:c0:28:44:aa:df:b7:bc:be:b6:7b:a4:18:47:3a:4c: 1e:5c:f0:a0:56:3e:ec:c2:0c:7a:4b:f9:85:84:91:e3:c7:4d: ec:5c:45:86:b6:ff:d7:a0:95:62:db:4d:a7:36:2e:0e:10:48: 0f:1a:69:a6:62:6f:18:4c:20:7d:89:25:4e:39:b9:a2:f3:ba: 55:43:0b:46:5d:27:6f:92:2c:fb:40:b4:ee:e4:f7:c7:e2:d4: e4:af:cb:e8:4b:3e:68:02:cf:70:2f:0b:17:e3:3d:10:59:4e: 86:15:df:85:d1:a5:47:32:19:07:2d:27:45:b1:be:9f:25:86: 2f:a6:ff:03:85:cf:a3:46:5a:49:40:5b:db:c0:a4:8f:65:bd: 90:5d:3f:2f:c4:b4:9e:61:5d:5c:c2:d8:c9:62:cd:5c:d8:f2: 64:65:65:65:f6:bb:1c:0b:2d:ab:32:68:9d:f6:2d:61:f2:e9: a8:b6:de:81:b7:d3:4c:3b:19:37:f7:41:98:6a:53:68:c7:b9: 19:ca:d6:75:79:7a:93:6b:8f:2f:a4:f3:40:09:10:bf:7b:63: aa:cf:fa:b5:1b:b8:a8:23:bb:a8:8f:6a:41:8e:33:f6:59:a6: fb:37:a5:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BjLhUOAgywXbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ2NzJlYTYtZDFjNC00M2E5LWJlZTEtOGRhMTM1YWUz ZmY0MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YjA1MDBhY2EtMDkyNC00NTk4LWE1MTgtN2IyNjllMmVkOTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI2AgYTiBZnZ9XgKhwm5cHHV2mtgQiYK3Ggx F8w/KtQJdvwix7rubMmEU/MCvx/EKCW+1Qtv27t5sPgNWO+sannajUGPgMujXWnv PVmQm3/cr03fZu6Py2CzSKkjMMO027kcWJrER17vMA4PE0nGup0vaDoRyrz7mk2N v2/qqYZIDMOdUiOJLevD6f5swvz56UEPDPBiznzDNyUacVvCiZrvbpW/8RI06FPj k1d3wsYQq73IadtihNBXVdhDenu346GvtTG+n9C/IVR7TEtYYcNAda/WKLiJwGPI nEo6+z05vEPxNIcEes4q01YMZIIut1wfDm39W7tieckVFOyRjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhCBUvHIQpPIwQjM/KshTJacxRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3 MmVhNi1kMWM0LTQzYTktYmVlMS04ZGExMzVhZTNmZjQvY2IzM2Y0Y2EtNzg2NC0z ZjFlLTg1NGQtMWNlYzA1OWVlMDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTQ2NzJlYTYtZDFjNC00M2E5LWJl ZTEtOGRhMTM1YWUzZmY0L2U0NjcyZWE2LWQxYzQtNDNhOS1iZWUxLThkYTEzNWFl M2ZmNC5jcmwwHwYDVR0jBBgwFoAUmE5B99/V+4Bg4x3qq/AKwG+0SlswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lNDY3MmVhNi1kMWM0LTQzYTktYmVlMS04ZGEx MzVhZTNmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9LAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKDpB1yDMwhxP6rDW0T3D3S2/EdOcAoRKrft7y+tnukGEc6TB5c8KBW PuzCDHpL+YWEkePHTexcRYa2/9eglWLbTac2Lg4QSA8aaaZibxhMIH2JJU45uaLz ulVDC0ZdJ2+SLPtAtO7k98fi1OSvy+hLPmgCz3AvCxfjPRBZToYV34XRpUcyGQct J0Wxvp8lhi+m/wOFz6NGWklAW9vApI9lvZBdPy/EtJ5hXVzC2MlizVzY8mRlZWX2 uxwLLasyaJ32LWHy6ai23oG300w7GTf3QZhqU2jHuRnK1nV5epNrjy+k80AJEL97 Y6rP+rUbuKgju6iPakGOM/ZZpvs3pU4= -----END CERTIFICATE-----Generated at Tue May 6 21:13:37 2025 by rpki-client