$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0afc6a21-9d4c-3258-a40c-4cf0198e7515.roa File: 0afc6a21-9d4c-3258-a40c-4cf0198e7515.roa (raw, json) Hash identifier: BCkx+0yz5KMCw0VZ6MUCRErfNaw2BJixR6GKzmw8bko= Subject key identifier: 28:CD:CB:36:7D:67:CF:A9:52:D8:CB:DD:1B:17:F7:5F:CF:F4:A4:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF59516FF96D8AE5D59790 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0afc6a21-9d4c-3258-a40c-4cf0198e7515.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 71.194.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:59:51:6f:f9:6d:8a:e5:d5:97:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=af67a84f-c47e-4476-bb91-67b203cadf1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:02:51:72:c2:02:89:cd:50:c1:07:fe:6d: 78:66:b3:53:69:74:5a:38:6e:2b:b7:03:cb:e9:9a: c7:61:d4:bb:33:05:a0:07:27:44:50:73:1e:4b:bb: 2e:21:76:82:6c:35:59:3a:d0:6c:7e:98:00:3c:2a: da:9c:b2:63:b7:90:15:07:86:b4:eb:45:fa:05:08: de:c2:10:be:fe:0d:42:61:b0:2c:95:0c:2b:3f:00: 7a:a9:a1:ed:82:e0:be:4f:f4:79:ae:8a:0b:b5:50: bd:61:b8:60:b5:5f:92:f0:a0:b9:3e:56:83:79:94: 64:3c:67:e2:6b:a0:0a:4f:41:4b:7a:54:3e:f1:36: 56:16:64:92:63:6c:1d:4b:7b:5e:d6:d6:dd:cd:25: 09:37:81:28:4b:80:e7:04:c7:db:85:ae:7a:13:d8: e6:1e:e7:ab:9b:81:4a:b3:86:b5:27:d7:4c:85:6b: 93:53:49:87:bb:9c:a3:f7:4b:1b:ad:2e:2d:72:de: a3:ad:b7:ac:e1:33:64:7e:59:de:3a:ec:da:d7:04: c9:57:f6:23:ed:42:38:dc:41:a8:8d:d5:eb:84:69: 8f:ba:52:b0:f2:15:e0:3a:4b:f4:e9:8e:77:64:5d: b3:ed:5f:06:b2:e1:8c:5d:04:75:a9:73:b7:5a:ff: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CD:CB:36:7D:67:CF:A9:52:D8:CB:DD:1B:17:F7:5F:CF:F4:A4:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0afc6a21-9d4c-3258-a40c-4cf0198e7515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.194.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:ae:8b:20:a7:c4:67:f1:04:73:e6:5b:2b:2a:5b:f8:00:28: df:e7:cf:12:57:86:7c:94:9d:a7:f1:04:82:4e:b6:d0:1f:fe: 46:b9:2d:63:0d:51:1a:51:21:62:59:bb:f6:d6:7c:94:5f:a4: 1c:a1:74:e0:7a:d9:38:34:27:4a:ea:d6:ae:fb:1a:3b:33:38: 21:1a:2f:55:ba:59:06:83:a8:9e:67:10:e2:d6:1f:54:76:08: 97:12:2a:54:d3:2d:94:94:94:4d:7d:40:54:9e:6f:04:18:ee: a6:cb:d3:2c:de:3a:01:b2:62:07:64:0d:37:8e:4f:c4:74:3f: 6a:77:46:50:1d:f1:c2:a0:ec:c8:b6:8c:ea:a5:91:65:b9:83: 93:f2:6d:00:e2:26:8c:00:f8:05:48:fc:92:de:48:e8:f9:d4: 24:31:fd:3e:7f:39:33:25:3b:82:74:44:49:5f:e5:60:c6:b8: 27:b0:00:d2:c9:49:b1:15:88:94:5f:b6:d9:b7:c7:75:bd:23: 5d:57:4c:0e:96:6b:45:75:59:a8:88:65:cd:82:f2:6a:2c:3b: 86:7f:b2:5d:21:82:1c:ca:50:d1:af:1d:f7:33:a2:93:5c:82: 2e:4d:c4:6b:11:92:53:e1:9b:71:c0:64:a2:af:a6:98:60:3c: 68:96:49:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr1lRb/ltiuXVl5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YWY2N2E4NGYtYzQ3ZS00NDc2LWJiOTEtNjdiMjAzY2FkZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuoCUXLCAonNUMEH/m14ZrNTaXRaOG4rtwPL 6ZrHYdS7MwWgBydEUHMeS7suIXaCbDVZOtBsfpgAPCranLJjt5AVB4a060X6BQje whC+/g1CYbAslQwrPwB6qaHtguC+T/R5rooLtVC9YbhgtV+S8KC5PlaDeZRkPGfi a6AKT0FLelQ+8TZWFmSSY2wdS3te1tbdzSUJN4EoS4DnBMfbha56E9jmHuerm4FK s4a1J9dMhWuTU0mHu5yj90sbrS4tct6jrbes4TNkflneOuza1wTJV/Yj7UI43EGo jdXrhGmPulKw8hXgOkv06Y53ZF2z7V8GsuGMXQR1qXO3Wv9NLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjNyzZ9Z8+pUtjL3RsX91/P9KRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGFmYzZhMjEtOWQ0Yy0z MjU4LWE0MGMtNGNmMDE5OGU3NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8JYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANyuiyCnxGfxBHPmWysqW/gAKN/nzxJXhnyUnafxBIJOttAf/ka5LWMN URpRIWJZu/bWfJRfpByhdOB62Tg0J0rq1q77GjszOCEaL1W6WQaDqJ5nEOLWH1R2 CJcSKlTTLZSUlE19QFSebwQY7qbL0yzeOgGyYgdkDTeOT8R0P2p3RlAd8cKg7Mi2 jOqlkWW5g5PybQDiJowA+AVI/JLeSOj51CQx/T5/OTMlO4J0RElf5WDGuCewANLJ SbEViJRfttm3x3W9I11XTA6Wa0V1WaiIZc2C8mosO4Z/sl0hghzKUNGvHfczopNc gi5NxGsRklPhm3HAZKKvpphgPGiWSXk= -----END CERTIFICATE-----Generated at Mon Apr 7 05:53:30 2025 by rpki-client