$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa File: 7957af23-cbb4-36ed-805f-7806f26e4b02.roa (raw, json) Hash identifier: C3vV5z0RbKhCvz3hZ4MBxmBl5ESVq7XHojtNp+qpGHo= Subject key identifier: 6A:C8:86:29:C4:11:83:0D:0C:F8:F1:9E:52:2B:A4:B7:64:C2:C8:11 Certificate issuer: /CN=65a28276-f493-4a9f-9824-c9717c1cf6fd Certificate serial: 010D0C9F43285849C20A0904CE272E90D772DBA0 Authority key identifier: 0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 16385 IP address blocks: 67.43.86.0/24 maxlen: 24 67.43.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:09:04:ce:27:2e:90:d7:72:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a28276-f493-4a9f-9824-c9717c1cf6fd Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=a3e7a1de-b3e3-48d6-b543-de9315dbda6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b4:8d:0a:7c:e0:43:55:d2:c9:f2:e8:0b:3c: 3a:0b:6f:fe:d1:28:1b:13:88:44:3c:c3:ab:3d:0a: 12:af:a1:15:76:81:1a:aa:7c:2a:8d:99:54:7a:d2: 25:a5:ed:61:de:58:e1:9e:80:15:fd:7c:12:89:e5: c8:bf:7d:89:9d:3d:dd:b6:fd:25:f1:20:b3:40:f8: 6d:c0:4b:c0:25:ca:51:7b:a7:26:88:0c:11:2a:4a: 38:a3:61:51:56:ac:d2:14:4b:ec:c0:53:9f:8b:5c: af:70:71:02:13:ce:21:a3:dd:14:90:2b:ff:fb:58: 2d:3a:fa:f2:a7:71:0c:84:61:17:5a:f8:ae:3f:32: cd:bd:95:5e:01:88:0d:44:20:e4:a7:fa:93:08:b2: 4f:bc:91:f7:29:d7:80:36:a0:2b:10:1e:a1:46:1d: ae:32:ff:ce:e1:69:46:06:1f:09:d7:95:ac:c9:22: af:a8:30:1a:e0:73:9e:e4:56:5c:82:e6:5d:08:63: 29:8d:23:0a:c2:ce:39:6d:a5:4e:a8:da:83:5a:b6: 39:4b:f1:81:36:46:fa:9c:96:a0:25:68:65:ce:07: 90:4b:fa:e8:b5:99:a4:ba:2c:41:84:53:e5:79:62: 73:50:a6:fc:d6:9f:84:41:ad:9c:8a:f2:57:3f:56: 26:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C8:86:29:C4:11:83:0D:0C:F8:F1:9E:52:2B:A4:B7:64:C2:C8:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl X509v3 Authority Key Identifier: keyid:0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer sbgp-ipAddrBlock: critical IPv4: 67.43.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:02:ad:27:48:dd:a6:d9:33:25:b4:0d:2d:ec:c7:dc:f1:b1: 49:8f:bd:0a:3a:43:58:cb:e0:67:6a:1d:64:bb:8c:29:10:85: 6d:fd:01:65:e7:59:0c:61:95:41:3d:1a:2a:99:3f:c9:e5:a6: d4:b3:4b:d5:24:fd:58:00:9f:0f:2f:d5:e9:89:f9:86:18:34: 3b:c9:26:a5:0f:1a:41:d4:6e:8d:44:4b:c7:8c:55:5c:63:3f: 7e:1c:62:db:64:a0:48:0d:1b:7b:e1:7d:a8:28:dd:e9:3e:da: ba:3f:67:4f:84:3c:28:38:80:cd:f3:89:59:b5:95:fc:c8:c9: b3:34:bb:b1:6e:82:68:0b:20:66:7f:88:9f:36:af:a4:a0:1c: ad:81:11:ad:1f:3a:b1:27:db:f8:de:aa:15:05:c2:98:ae:2d: 68:ed:5b:79:4a:86:50:d1:b3:cd:0a:57:20:39:a1:68:6c:0f: 61:1d:d6:70:80:44:82:29:44:69:58:34:7d:0f:a5:02:31:ab: 85:59:e0:44:32:c2:92:af:84:f8:f5:42:0e:a5:91:48:bc:f9: ee:9f:60:12:8d:4c:8d:15:b7:06:7c:fa:4d:02:b8:a4:6c:27: f1:d7:95:84:4b:e0:6d:75:50:e6:65:71:e0:bf:39:c7:08:e6: d9:a3:f6:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCgkEzicukNdy26AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVhMjgyNzYtZjQ5My00YTlmLTk4MjQtYzk3MTdjMWNm NmZkMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YTNlN2ExZGUtYjNlMy00OGQ2LWI1NDMtZGU5MzE1ZGJkYTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLSNCnzgQ1XSyfLoCzw6C2/+0SgbE4hEPMOr PQoSr6EVdoEaqnwqjZlUetIlpe1h3ljhnoAV/XwSieXIv32JnT3dtv0l8SCzQPht wEvAJcpRe6cmiAwRKko4o2FRVqzSFEvswFOfi1yvcHECE84ho90UkCv/+1gtOvry p3EMhGEXWviuPzLNvZVeAYgNRCDkp/qTCLJPvJH3KdeANqArEB6hRh2uMv/O4WlG Bh8J15WsySKvqDAa4HOe5FZcguZdCGMpjSMKws45baVOqNqDWrY5S/GBNkb6nJag JWhlzgeQS/rotZmkuixBhFPleWJzUKb81p+EQa2civJXP1YmRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrIhinEEYMNDPjxnlIrpLdkwsgRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82NWEy ODI3Ni1mNDkzLTRhOWYtOTgyNC1jOTcxN2MxY2Y2ZmQvNzk1N2FmMjMtY2JiNC0z NmVkLTgwNWYtNzgwNmYyNmU0YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjVhMjgyNzYtZjQ5My00YTlmLTk4 MjQtYzk3MTdjMWNmNmZkLzY1YTI4Mjc2LWY0OTMtNGE5Zi05ODI0LWM5NzE3YzFj ZjZmZC5jcmwwHwYDVR0jBBgwFoAUD2fY2H/CdCcfkm21Lnih2pcDNR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82NWEyODI3Ni1mNDkzLTRhOWYtOTgyNC1jOTcx N2MxY2Y2ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQytWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkCrSdI3abZMyW0DS3sx9zxsUmPvQo6Q1jL4GdqHWS7jCkQhW39AWXn WQxhlUE9GiqZP8nlptSzS9Uk/VgAnw8v1emJ+YYYNDvJJqUPGkHUbo1ES8eMVVxj P34cYttkoEgNG3vhfago3ek+2ro/Z0+EPCg4gM3ziVm1lfzIybM0u7FugmgLIGZ/ iJ82r6SgHK2BEa0fOrEn2/jeqhUFwpiuLWjtW3lKhlDRs80KVyA5oWhsD2Ed1nCA RIIpRGlYNH0PpQIxq4VZ4EQywpKvhPj1Qg6lkUi8+e6fYBKNTI0VtwZ8+k0CuKRs J/HXlYRL4G11UOZlceC/OccI5tmj9nM= -----END CERTIFICATE-----Generated at Thu May 8 19:57:05 2025 by rpki-client