$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0553afaf-afac-3dc9-95b5-0cc5ce88ab98.roa File: 0553afaf-afac-3dc9-95b5-0cc5ce88ab98.roa (raw, json) Hash identifier: aegpwTMzkYEcXW5fGR9Sd/y1ycJLwRy7E1GmyatkdKI= Subject key identifier: 04:DE:DA:CE:B1:AF:78:F4:2F:D5:D5:C0:4C:D5:E1:01:74:9D:83:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6BDF0499DE1B46E308500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0553afaf-afac-3dc9-95b5-0cc5ce88ab98.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 71.237.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:bd:f0:49:9d:e1:b4:6e:30:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=736a31bf-9a90-4e9d-aa14-30f4bc026376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2c:ad:14:05:5a:75:1f:84:d7:9d:fe:87:2d: ab:08:1f:06:79:89:fa:c4:a0:71:12:41:8f:dd:0c: 62:ab:f2:a0:40:86:a9:ce:d0:a6:9c:a8:18:31:a9: db:fb:37:63:a9:f6:7d:e1:86:b8:e8:fd:c1:9c:47: 8f:71:45:0f:01:dc:18:28:7d:67:57:60:83:6d:fc: 47:39:81:ab:9b:da:71:52:78:88:85:53:b4:1f:2c: 59:c6:1b:a8:e6:f2:5f:79:10:b9:88:9e:d5:e3:69: 44:35:6e:a5:d1:4b:e1:99:26:00:38:9f:c4:41:26: 13:a1:3f:b5:5c:e8:33:a1:67:02:cb:af:56:79:97: a0:a4:47:a9:3c:8a:07:9f:88:59:56:fe:a0:95:8b: 9e:81:4b:10:e6:04:ea:96:7a:61:f5:8f:cb:9a:ab: 3f:0a:9e:db:4b:1e:d6:7f:17:a5:18:8f:ce:7f:31: 52:62:e2:f7:09:59:7e:9d:b9:ac:66:92:d1:ae:2d: ce:9f:78:28:14:f2:4a:35:7c:db:05:78:9e:32:43: c6:78:21:66:4f:e0:8a:d3:6a:28:77:a5:95:99:3c: 0c:2f:48:4e:03:c1:91:c9:21:3d:c3:f8:b7:76:8e: c0:34:e3:81:64:ff:22:e2:d6:81:1a:c9:75:75:d1: af:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DE:DA:CE:B1:AF:78:F4:2F:D5:D5:C0:4C:D5:E1:01:74:9D:83:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0553afaf-afac-3dc9-95b5-0cc5ce88ab98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.237.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:a6:53:61:49:da:7c:c1:e9:a3:eb:0e:85:3b:86:d9:d8:12: 36:00:a1:7f:b3:10:20:1f:9d:74:73:77:b5:3f:a8:c8:ca:f7: 62:0a:21:cd:8b:2c:62:37:a6:63:8e:19:15:2f:a7:0b:9b:ae: 62:44:c7:2a:6b:91:c8:6e:d4:0f:9b:3a:89:1f:f9:a6:c2:cc: 1c:72:5f:47:cf:03:25:8c:c4:fc:f3:ed:77:ed:a4:a8:95:e0: b9:aa:63:a6:18:63:17:bc:44:21:96:e0:4e:d9:83:76:c8:8b: 4d:18:81:36:82:33:45:c8:88:aa:7b:2f:27:91:25:06:6e:3f: e9:7a:27:91:83:c9:6f:d0:b9:48:b1:5c:c9:63:c0:f3:bf:2e: a2:e9:99:08:26:f6:08:a2:9a:79:3d:48:5a:84:8a:08:ac:06: ab:3d:24:ff:99:0b:73:98:65:3d:32:fd:ef:14:8c:30:98:a1: 69:80:73:f9:1a:52:0e:10:88:f9:3b:63:6e:3d:c3:4f:50:85: b7:cf:9a:6c:b9:bc:82:49:9d:24:88:9b:8b:81:f8:8e:7f:37: 3a:eb:ac:75:44:82:06:81:a8:6f:d9:f3:a1:b7:bd:da:7c:9b: 67:6e:8a:60:1e:5e:6a:f5:5c:0d:1a:94:db:a5:a1:0a:a5:fa: c7:74:72:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09r3wSZ3htG4whQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NzM2YTMxYmYtOWE5MC00ZTlkLWFhMTQtMzBmNGJjMDI2Mzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCytFAVadR+E153+hy2rCB8GeYn6xKBxEkGP 3Qxiq/KgQIapztCmnKgYManb+zdjqfZ94Ya46P3BnEePcUUPAdwYKH1nV2CDbfxH OYGrm9pxUniIhVO0HyxZxhuo5vJfeRC5iJ7V42lENW6l0UvhmSYAOJ/EQSYToT+1 XOgzoWcCy69WeZegpEepPIoHn4hZVv6glYuegUsQ5gTqlnph9Y/Lmqs/Cp7bSx7W fxelGI/OfzFSYuL3CVl+nbmsZpLRri3On3goFPJKNXzbBXieMkPGeCFmT+CK02oo d6WVmTwML0hOA8GRySE9w/i3do7ANOOBZP8i4taBGsl1ddGv6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATe2s6xr3j0L9XVwEzV4QF0nYPDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDU1M2FmYWYtYWZhYy0z ZGM5LTk1YjUtMGNjNWNlODhhYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+32MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGmU2FJ2nzB6aPrDoU7htnYEjYAoX+zECAfnXRzd7U/qMjK92IKIc2L LGI3pmOOGRUvpwubrmJExyprkchu1A+bOokf+abCzBxyX0fPAyWMxPzz7XftpKiV 4LmqY6YYYxe8RCGW4E7Zg3bIi00YgTaCM0XIiKp7LyeRJQZuP+l6J5GDyW/QuUix XMljwPO/LqLpmQgm9giimnk9SFqEigisBqs9JP+ZC3OYZT0y/e8UjDCYoWmAc/ka Ug4QiPk7Y249w09QhbfPmmy5vIJJnSSIm4uB+I5/NzrrrHVEggaBqG/Z86G3vdp8 m2duimAeXmr1XA0alNuloQql+sd0ctA= -----END CERTIFICATE-----Generated at Mon Apr 7 15:54:02 2025 by rpki-client