$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1f33211-2ca1-3db2-abad-4108f17dfc43.roa File: d1f33211-2ca1-3db2-abad-4108f17dfc43.roa (raw, json) Hash identifier: j+6FCmfB7+pLqao3/Sw3GIy5iz6Rjcz0dXTAPllRyHQ= Subject key identifier: B9:F5:02:59:CC:B2:08:F5:7A:8A:52:09:15:F2:F9:F9:B7:F8:89:D8 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285849C20AE9DC905BD76883CB7480 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1f33211-2ca1-3db2-abad-4108f17dfc43.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 33363 IP address blocks: 67.9.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:e9:dc:90:5b:d7:68:83:cb:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=026493e7-87f2-4e92-b852-b995a2b02ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:57:b7:67:b2:c3:f7:46:0c:65:da:f5:a7: c1:5b:95:0d:0e:97:64:20:d1:10:d8:1d:9a:7f:8f: 45:d6:06:62:d1:52:53:16:fb:85:1f:4b:d6:48:3b: f0:6e:86:96:af:a8:b8:b0:1e:e6:21:d0:b2:26:7c: 48:5d:f7:9a:bc:79:1e:1f:62:0c:24:9a:f2:9d:dd: 32:19:eb:b7:56:29:95:fa:21:9e:b1:fe:68:bd:8c: 6f:2f:e8:85:9e:c4:39:9c:44:27:9e:d8:18:18:e2: 5b:d0:d8:e6:48:c6:fc:41:2d:c1:ec:a1:bb:30:d8: 57:e3:8d:05:ff:60:9a:97:43:1c:83:a2:47:dc:29: 7c:a1:1d:97:ab:d6:fc:97:53:7a:c5:4f:0a:5f:46: 7d:ad:c2:e1:af:db:eb:24:32:da:19:1a:fb:4a:c3: 4e:c6:fc:10:cb:79:f4:c5:da:ae:31:c6:de:48:6b: 06:0f:72:4b:fe:f9:3c:1e:64:64:f8:85:6a:5f:98: fe:54:b7:79:84:25:a3:ec:3d:ee:9e:35:d1:e2:af: 99:b1:e3:e5:08:da:22:eb:aa:f2:20:c6:1b:81:e9: 0e:08:3c:22:eb:1f:1c:c8:c0:cb:f8:34:a1:b1:9e: 34:e7:ad:62:04:3c:5c:41:59:8d:88:71:9b:1c:4c: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F5:02:59:CC:B2:08:F5:7A:8A:52:09:15:F2:F9:F9:B7:F8:89:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1f33211-2ca1-3db2-abad-4108f17dfc43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 67.9.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:27:13:4d:94:2e:f8:1c:1d:59:ee:da:68:6e:39:d2:ad:f0: 07:c6:dc:86:a9:22:3e:e6:8c:ec:ed:2c:b7:28:7f:1e:de:02: 44:69:62:b4:c2:dc:06:da:82:62:11:82:95:c6:b9:1d:3b:6d: 59:e5:2f:b1:5f:88:01:4d:a5:f8:3d:3f:e2:b9:c1:21:8b:3a: d0:23:14:c5:87:17:cc:6e:cb:13:10:95:21:52:0a:9b:df:bd: ac:c3:48:a9:8e:47:fc:7b:89:b7:ae:c0:e6:6d:74:09:8f:9c: e4:08:4d:4a:91:e1:77:c7:20:bd:e0:39:4b:da:ef:eb:ce:0b: dd:52:ed:23:84:75:50:bf:dd:7a:b0:05:6d:45:ff:76:08:c8: 3e:ce:be:66:f0:e8:0e:80:08:aa:46:d5:ea:19:1e:b0:ec:7c: a8:9c:c6:19:48:d1:cb:21:8c:2c:b4:2b:14:d7:d8:50:aa:1d: 07:01:de:0b:b7:36:35:31:e6:34:e4:7f:9c:28:82:5f:ad:5c: 8e:9b:26:9b:47:29:a0:2e:c5:f2:46:1a:b2:b9:68:97:58:6d: 1f:85:c2:bb:f1:29:7d:6e:9d:a1:de:ec:9c:96:46:8e:80:ea: fc:a5:17:53:1b:c6:76:72:02:56:22:f8:05:82:3a:5f:fe:5f: 57:b1:f1:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCunckFvXaIPLdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk MDI2NDkzZTctODdmMi00ZTkyLWI4NTItYjk5NWEyYjAyYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrlXt2eyw/dGDGXa9afBW5UNDpdkINEQ2B2a f49F1gZi0VJTFvuFH0vWSDvwboaWr6i4sB7mIdCyJnxIXfeavHkeH2IMJJrynd0y Geu3VimV+iGesf5ovYxvL+iFnsQ5nEQnntgYGOJb0NjmSMb8QS3B7KG7MNhX440F /2Cal0Mcg6JH3Cl8oR2Xq9b8l1N6xU8KX0Z9rcLhr9vrJDLaGRr7SsNOxvwQy3n0 xdquMcbeSGsGD3JL/vk8HmRk+IVqX5j+VLd5hCWj7D3unjXR4q+ZsePlCNoi66ry IMYbgekOCDwi6x8cyMDL+DShsZ40561iBDxcQVmNiHGbHExDcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLn1AlnMsgj1eopSCRXy+fm3+InYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDFmMzMyMTEtMmNhMS0z ZGIyLWFiYWQtNDEwOGYxN2RmYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQwkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEonE02ULvgcHVnu2mhuOdKt8AfG3IapIj7mjOztLLcofx7eAkRpYrTC 3AbagmIRgpXGuR07bVnlL7FfiAFNpfg9P+K5wSGLOtAjFMWHF8xuyxMQlSFSCpvf vazDSKmOR/x7ibeuwOZtdAmPnOQITUqR4XfHIL3gOUva7+vOC91S7SOEdVC/3Xqw BW1F/3YIyD7Ovmbw6A6ACKpG1eoZHrDsfKicxhlI0cshjCy0KxTX2FCqHQcB3gu3 NjUx5jTkf5wogl+tXI6bJptHKaAuxfJGGrK5aJdYbR+FwrvxKX1unaHe7JyWRo6A 6vylF1MbxnZyAlYi+AWCOl/+X1ex8Qk= -----END CERTIFICATE-----Generated at Sun May 11 14:54:10 2025 by rpki-client