$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa File: bdd949a7-e0e1-3b8e-81bc-94238a595155.roa (raw, json) Hash identifier: lWz1dLs51kb21ijdAmvWZK0ra73ewZGeaibtpHZU2t4= Subject key identifier: 88:E3:09:A2:94:34:49:62:E1:13:ED:1F:FC:ED:AD:76:27:09:4A:C3 Certificate issuer: /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939 Certificate serial: 010D0C9F43285849C4D4BC17D80114769EEEA780 Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 14618 IP address blocks: 67.226.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:bc:17:d8:01:14:76:9e:ee:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=cbacd01a-fd43-42cc-9b4e-f66ff9cafbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:5d:e2:e1:65:22:96:2c:80:26:dd:09:96: c8:43:f4:d5:ed:d3:9e:81:aa:06:31:3b:66:59:e4: 20:91:19:0b:a9:e4:37:5f:fa:0b:ad:d9:3d:00:5d: eb:1a:bd:5d:2b:5d:66:ef:7f:e1:1d:44:e8:e9:ba: 1c:5f:b0:f9:0c:4b:26:d7:f9:07:d4:40:2e:4f:43: 82:02:cb:c4:b3:e5:22:a3:ef:af:8a:61:39:f0:82: b6:03:05:ad:32:fd:45:d2:58:26:f6:e5:4b:a1:24: 1f:ee:52:5b:42:7b:69:07:07:ea:80:2a:c4:09:cb: 16:71:bc:ae:12:ca:a5:62:f2:06:9d:de:43:55:ab: 62:bc:60:4c:87:97:28:cc:6a:42:cb:03:c8:28:2c: 11:7d:6b:79:13:0e:31:ee:c3:5a:d4:24:b4:f2:2b: e3:5a:07:21:e3:04:f6:2b:98:4a:cc:42:f4:3b:89: 0f:ea:18:51:5a:ef:e7:72:ed:f6:9a:8d:00:d3:4e: 9c:7e:53:16:d0:34:3e:c0:1a:06:62:43:c4:42:ce: 2c:5f:28:0a:2c:d2:18:68:d8:95:cd:b6:81:cd:52: 21:eb:ce:92:52:bf:c2:2b:5c:95:2b:a4:cf:35:d9: ee:0a:ad:34:3b:b2:5e:eb:25:e7:c4:44:6d:dc:e2: bc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E3:09:A2:94:34:49:62:E1:13:ED:1F:FC:ED:AD:76:27:09:4A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl X509v3 Authority Key Identifier: keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer sbgp-ipAddrBlock: critical IPv4: 67.226.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:53:3c:fe:16:2c:08:3a:bf:74:54:ed:01:d2:eb:a8:0b:d4: dd:0b:f2:b2:65:cb:df:ec:42:ce:47:95:49:78:46:3c:0f:d4: 65:72:13:eb:59:8c:8b:d4:fc:92:2d:b3:e9:f4:08:ca:80:a1: 0c:6d:99:ed:c7:82:03:88:e7:80:11:ec:bc:c4:df:ea:00:62: 49:5b:19:62:8c:7d:21:d3:17:08:73:4b:aa:28:82:77:2f:8f: e3:5b:63:47:2a:39:86:28:f1:85:19:b6:e0:d2:4e:1d:9b:4c: 21:e1:9e:19:de:61:eb:b5:af:e7:a8:5b:f3:ef:1b:82:80:e8: 96:11:fd:ed:7b:64:27:e8:3e:e5:60:ec:18:7e:46:b1:89:65: 6e:b0:b9:67:a5:0f:25:58:1c:06:02:c4:4f:5b:4c:8e:df:00: 9a:c4:6a:06:eb:17:e4:18:36:19:00:aa:5f:53:7a:e7:0b:2e: 69:9f:84:ab:e3:61:ee:c1:bb:89:8e:a4:f8:8e:eb:5a:1f:d0: 8d:22:46:98:6c:68:ff:ff:44:3c:00:c4:d4:1a:57:7f:e9:46: af:02:80:1c:0c:bb:2c:20:29:70:30:26:bd:08:d1:e1:77:78: e3:3d:30:9e:e9:8d:16:ba:44:ea:a3:33:f9:47:e2:70:07:d9: 07:88:a6:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1LwX2AEUdp7up4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI4Y2NjYzgtNGMxZC00NTdiLWE3MDktMmYyYzVkODNj OTM5MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk Y2JhY2QwMWEtZmQ0My00MmNjLTliNGUtZjY2ZmY5Y2FmYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcFd4uFlIpYsgCbdCZbIQ/TV7dOegaoGMTtm WeQgkRkLqeQ3X/oLrdk9AF3rGr1dK11m73/hHUTo6bocX7D5DEsm1/kH1EAuT0OC AsvEs+Uio++vimE58IK2AwWtMv1F0lgm9uVLoSQf7lJbQntpBwfqgCrECcsWcbyu EsqlYvIGnd5DVativGBMh5cozGpCywPIKCwRfWt5Ew4x7sNa1CS08ivjWgch4wT2 K5hKzEL0O4kP6hhRWu/ncu32mo0A006cflMW0DQ+wBoGYkPEQs4sXygKLNIYaNiV zbaBzVIh686SUr/CK1yVK6TPNdnuCq00O7Je6yXnxERt3OK8vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjjCaKUNEli4RPtH/ztrXYnCUrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85Mjhj Y2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJjNWQ4M2M5MzkvYmRkOTQ5YTctZTBlMS0z YjhlLTgxYmMtOTQyMzhhNTk1MTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTI4Y2NjYzgtNGMxZC00NTdiLWE3 MDktMmYyYzVkODNjOTM5LzkyOGNjY2M4LTRjMWQtNDU3Yi1hNzA5LTJmMmM1ZDgz YzkzOS5jcmwwHwYDVR0jBBgwFoAU50jP7N+pFw+ueUr7PjNtsErFiKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MjhjY2NjOC00YzFkLTQ1N2ItYTcwOS0yZjJj NWQ4M2M5MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ+LdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1TPP4WLAg6v3RU7QHS66gL1N0L8rJly9/sQs5HlUl4RjwP1GVyE+tZ jIvU/JIts+n0CMqAoQxtme3HggOI54AR7LzE3+oAYklbGWKMfSHTFwhzS6oogncv j+NbY0cqOYYo8YUZtuDSTh2bTCHhnhneYeu1r+eoW/PvG4KA6JYR/e17ZCfoPuVg 7Bh+RrGJZW6wuWelDyVYHAYCxE9bTI7fAJrEagbrF+QYNhkAql9TeucLLmmfhKvj Ye7Bu4mOpPiO61of0I0iRphsaP//RDwAxNQaV3/pRq8CgBwMuywgKXAwJr0I0eF3 eOM9MJ7pjRa6ROqjM/lH4nAH2QeIpjA= -----END CERTIFICATE-----Generated at Sun Jun 29 14:29:00 2025 by rpki-client