$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa File: db6c28c7-3310-3a30-a759-80e2eb7282e0.roa (raw, json) Hash identifier: pU5rKmvjPAHJI1+g2aQkijx0PubxqGtcceMf907Jopc= Subject key identifier: 3E:EC:BF:7A:D8:68:82:AC:5B:62:5D:C6:9C:C3:FE:5F:90:77:75:AD Certificate issuer: /CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Certificate serial: 010D0C9F432858498339F129800427929D370200 Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 22926 IP address blocks: 67.43.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:f1:29:80:04:27:92:9d:37:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=7bbf71fa-abcf-4573-8d1d-bfec9af4db42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e6:14:1b:12:5c:ac:2c:be:0f:40:10:ad:d9: 4a:e1:1d:01:81:f7:68:34:c4:e5:c0:2e:ba:33:ee: 9d:29:25:b4:8f:1b:7e:70:19:8c:27:0c:7b:89:d3: a1:b8:27:22:7a:a2:9c:72:d3:1f:bc:7a:8c:46:a6: 7d:ea:91:03:3f:3b:f5:87:57:15:50:14:4f:b7:6f: 04:4d:d5:cd:5d:6d:ed:90:69:49:8e:4c:83:ce:4b: 35:c5:2b:f6:01:38:35:16:3a:6f:a0:1f:40:99:db: 38:a1:0b:23:0c:e1:bb:73:c8:9d:82:f2:d7:a2:a2: 31:f1:63:c6:0a:f5:fd:4f:3b:34:b8:23:df:b6:a0: 42:ab:cd:9a:00:e0:79:22:95:6d:aa:18:84:b9:fd: 5a:71:6f:66:f2:53:5f:ea:2c:70:ce:13:a1:72:4e: a9:58:63:1c:56:a5:cb:32:84:b7:a1:56:d2:53:30: 4d:da:09:93:e1:d3:37:78:ca:e8:43:63:32:bf:f9: cb:5d:3f:35:12:0d:9d:f2:7d:9e:42:43:ae:ef:50: 72:ca:60:7e:70:6f:83:53:a7:a4:4b:d1:c3:0d:a7: 57:65:19:b4:b8:61:4b:17:26:3e:f9:99:09:9d:b2: d6:c6:32:cc:6b:19:cf:f0:81:ea:dc:3d:c9:0e:4e: 25:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EC:BF:7A:D8:68:82:AC:5B:62:5D:C6:9C:C3:FE:5F:90:77:75:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl X509v3 Authority Key Identifier: keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer sbgp-ipAddrBlock: critical IPv4: 67.43.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:32:58:7b:be:40:5c:c4:4a:91:18:eb:2f:c5:71:ce:45:54: 7b:7f:c8:b8:5f:cf:19:7e:f8:28:84:ca:51:69:a1:88:80:5f: 12:0f:66:00:28:ed:69:a0:33:be:75:02:48:af:bb:47:a4:5f: db:d4:ae:d3:fe:7d:48:69:c6:43:d2:bd:80:56:ea:dc:4c:3b: ee:aa:cc:34:a2:f7:48:30:0f:34:42:9b:93:e3:83:cd:a5:d0: d9:14:d5:ea:3a:f7:8a:b8:b3:12:7f:62:3b:c1:ec:b0:fe:8f: 7c:5a:a6:c2:42:17:59:36:e5:f3:f7:88:c4:c6:3e:d3:f9:96: 81:4f:4d:a5:21:3b:ff:c6:b0:c1:fb:ba:84:9b:54:b7:be:d4: af:32:0a:e1:ee:a7:37:8f:9d:4c:4f:87:90:97:11:15:56:d8: a6:0f:69:13:bb:b8:02:e4:a1:6d:89:36:db:61:98:20:77:03: b6:6e:18:e4:7f:cd:2b:11:92:6b:96:9a:72:14:bb:3e:97:53: 11:a9:45:6e:42:59:8b:db:66:f0:27:89:dd:a0:21:2c:eb:33: b1:66:0a:e5:61:ca:a0:14:d9:d5:31:d4:26:ae:d0:2e:a6:98: 77:5a:90:d9:42:1b:9b:66:25:32:24:9a:48:d5:46:89:27:cf: 44:4b:b5:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOfEpgAQnkp03AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4NGU0NzEtMDgwYS00ZTU0LWJmOTQtNjBkZDBjOGJl YjQ4MB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk N2JiZjcxZmEtYWJjZi00NTczLThkMWQtYmZlYzlhZjRkYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOYUGxJcrCy+D0AQrdlK4R0BgfdoNMTlwC66 M+6dKSW0jxt+cBmMJwx7idOhuCcieqKcctMfvHqMRqZ96pEDPzv1h1cVUBRPt28E TdXNXW3tkGlJjkyDzks1xSv2ATg1FjpvoB9Amds4oQsjDOG7c8idgvLXoqIx8WPG CvX9Tzs0uCPftqBCq82aAOB5IpVtqhiEuf1acW9m8lNf6ixwzhOhck6pWGMcVqXL MoS3oVbSUzBN2gmT4dM3eMroQ2Myv/nLXT81Eg2d8n2eQkOu71ByymB+cG+DU6ek S9HDDadXZRm0uGFLFyY++ZkJnbLWxjLMaxnP8IHq3D3JDk4l3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7sv3rYaIKsW2JdxpzD/l+Qd3WtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0 ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRkMGM4YmViNDgvZGI2YzI4YzctMzMxMC0z YTMwLWE3NTktODBlMmViNzI4MmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDE4NGU0NzEtMDgwYS00ZTU0LWJm OTQtNjBkZDBjOGJlYjQ4L2QxODRlNDcxLTA4MGEtNGU1NC1iZjk0LTYwZGQwYzhi ZWI0OC5jcmwwHwYDVR0jBBgwFoAUgirGXwV3ltYS+ySG5nLGEqW2QVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRk MGM4YmViNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQytwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgyWHu+QFzESpEY6y/Fcc5FVHt/yLhfzxl++CiEylFpoYiAXxIPZgAo 7WmgM751Akivu0ekX9vUrtP+fUhpxkPSvYBW6txMO+6qzDSi90gwDzRCm5Pjg82l 0NkU1eo694q4sxJ/YjvB7LD+j3xapsJCF1k25fP3iMTGPtP5loFPTaUhO//GsMH7 uoSbVLe+1K8yCuHupzePnUxPh5CXERVW2KYPaRO7uALkoW2JNtthmCB3A7ZuGOR/ zSsRkmuWmnIUuz6XUxGpRW5CWYvbZvAnid2gISzrM7FmCuVhyqAU2dUx1Cau0C6m mHdakNlCG5tmJTIkmkjVRoknz0RLtZY= -----END CERTIFICATE-----Generated at Sun May 11 05:32:12 2025 by rpki-client