$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa File: 86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa (raw, json) Hash identifier: JW7IZwf5ydXlNDw8TKT/btxzVI8LZbnw9Fdi3ucGeUM= Subject key identifier: C5:A8:7B:1F:7A:64:04:A4:27:00:2F:B4:A5:BB:AB:F1:F4:91:E3:F1 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285849D1651780F91E2656EFDEDE80 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 11030 IP address blocks: 67.52.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:17:80:f9:1e:26:56:ef:de:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=f9793768-9ea6-4362-805b-5e4298ed7b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:30:6f:38:4f:3f:b3:10:f5:15:81:72:3c:1d: ad:44:05:d7:4a:e5:fb:db:4b:e5:c4:d4:20:3b:c4: ff:10:08:4b:97:60:d0:1d:86:e0:80:55:5d:55:56: 21:d1:95:f2:7b:64:3e:1b:c9:61:8a:25:f8:b1:84: a8:89:53:49:24:30:f2:b2:6d:99:42:2c:e8:7f:6b: 7f:f3:01:17:be:27:7b:c2:0d:4f:0d:44:33:a3:b3: 46:af:ae:27:ff:a6:fc:ef:46:5f:4a:50:3f:a4:c8: 31:c7:12:95:c4:81:e4:40:68:e1:12:e1:47:bf:8a: 17:de:d2:91:39:78:e3:be:b2:87:6e:97:41:55:9a: 41:4c:0c:60:86:99:b5:00:e0:e2:66:90:f4:f3:a5: 53:4b:06:fc:8a:03:ae:b2:b8:a2:02:25:ef:2f:e3: 8f:bc:1a:62:c3:42:d4:a9:05:9d:8c:bf:c9:21:52: 19:da:c9:40:eb:51:69:d4:e9:c8:7f:ca:e4:d8:7b: 6a:2d:f2:b1:1a:c7:41:4f:b9:b4:b3:71:11:5f:dc: 43:3e:f4:dc:70:36:96:ca:83:4a:0a:9b:5f:1b:4a: b6:16:e4:ca:60:4d:1b:9f:7c:f8:e4:bd:90:11:8f: b7:ea:c5:5a:87:3c:af:a6:db:3d:f8:f0:a6:23:3c: cb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A8:7B:1F:7A:64:04:A4:27:00:2F:B4:A5:BB:AB:F1:F4:91:E3:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 67.52.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:54:01:29:9c:f8:b7:48:7e:2a:cb:9f:f1:c1:74:8d:6c:0d: 6e:7f:1c:91:fa:b8:60:3b:4b:c1:5a:46:5e:06:20:86:27:b0: c9:a2:c9:e7:90:3f:e4:a4:b0:56:70:56:66:b0:70:ff:d9:f7: 69:c9:b8:a3:d5:ea:37:75:90:3c:30:9d:f9:53:b4:1b:d8:b1: af:4c:d5:ee:61:28:35:74:27:78:19:ef:58:72:23:d8:e4:ae: 8b:8f:72:20:09:6b:2d:2f:54:f7:0e:81:d1:77:81:e8:13:cf: 9c:0d:eb:85:d2:6c:c5:00:05:e2:b9:e3:b3:d0:55:f3:2c:da: 58:20:48:a8:a9:80:2f:c5:cc:6a:d9:0b:8e:aa:cc:c2:49:80: c9:4f:75:7d:f0:27:7e:3a:1a:d9:a8:a2:e7:ac:48:bb:9f:bf: 78:84:cf:68:df:00:30:f8:59:44:48:92:eb:46:ad:ca:80:22: e1:09:45:ae:a1:e6:ef:dd:f1:5a:bc:bc:8d:4a:8d:43:71:ac: 74:fb:93:8b:59:17:6a:4e:0b:52:a8:e7:2b:fc:9d:be:51:a0: 53:26:b4:d1:71:5a:28:44:15:9b:7a:4b:40:99:99:94:ad:e1: 09:24:42:e9:b1:46:40:56:f5:d0:0d:db:5d:58:ae:77:d1:c4: 2c:29:95:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZReA+R4mVu/e3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk Zjk3OTM3NjgtOWVhNi00MzYyLTgwNWItNWU0Mjk4ZWQ3YjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjBvOE8/sxD1FYFyPB2tRAXXSuX720vlxNQg O8T/EAhLl2DQHYbggFVdVVYh0ZXye2Q+G8lhiiX4sYSoiVNJJDDysm2ZQizof2t/ 8wEXvid7wg1PDUQzo7NGr64n/6b870ZfSlA/pMgxxxKVxIHkQGjhEuFHv4oX3tKR OXjjvrKHbpdBVZpBTAxghpm1AODiZpD086VTSwb8igOusriiAiXvL+OPvBpiw0LU qQWdjL/JIVIZ2slA61Fp1OnIf8rk2HtqLfKxGsdBT7m0s3ERX9xDPvTccDaWyoNK CptfG0q2FuTKYE0bn3z45L2QEY+36sVahzyvpts9+PCmIzzLvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWoex96ZASkJwAvtKW7q/H0kePxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODZjZDVmOWItNjE1Mi0z ZjI0LTk3M2YtYzA0YWU5MGViNmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQzSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJUASmc+LdIfirLn/HBdI1sDW5/HJH6uGA7S8FaRl4GIIYnsMmiyeeQ P+SksFZwVmawcP/Z92nJuKPV6jd1kDwwnflTtBvYsa9M1e5hKDV0J3gZ71hyI9jk rouPciAJay0vVPcOgdF3gegTz5wN64XSbMUABeK547PQVfMs2lggSKipgC/FzGrZ C46qzMJJgMlPdX3wJ346GtmoouesSLufv3iEz2jfADD4WURIkutGrcqAIuEJRa6h 5u/d8Vq8vI1KjUNxrHT7k4tZF2pOC1Ko5yv8nb5RoFMmtNFxWihEFZt6S0CZmZSt 4QkkQumxRkBW9dAN211YrnfRxCwplSk= -----END CERTIFICATE-----Generated at Mon May 12 23:57:11 2025 by rpki-client