$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0debc8b5-9d85-3b06-bf0f-50372ecf4c8c.roa File: 0debc8b5-9d85-3b06-bf0f-50372ecf4c8c.roa (raw, json) Hash identifier: y7iMYRJn9S5KpnZ9DtKXK/t7gOzyhbWjfF/StDx5Hn4= Subject key identifier: 3D:22:11:D2:78:7C:9F:EF:E8:84:9F:A7:02:B8:F2:D7:1C:93:FB:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB093AF9EFEBEFEAEE25580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0debc8b5-9d85-3b06-bf0f-50372ecf4c8c.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 71.224.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:93:af:9e:fe:be:fe:ae:e2:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=311eab98-3e8a-4a09-bbb3-2c51e7ffdf67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:fb:af:c0:6e:61:1c:3e:06:77:be:81:7b: 7c:e5:6e:bc:32:38:c1:a9:53:cd:02:4a:1f:74:48: 8d:50:a4:65:87:35:cb:0d:c7:b7:81:e6:28:14:32: fd:96:58:77:4e:40:6a:d4:3c:20:c6:b9:60:b4:95: 8f:0c:db:7a:42:e3:3b:dc:a2:b2:04:32:1d:da:26: 18:2b:b0:3a:3d:5e:e5:96:89:81:6f:7b:99:c9:58: 0b:7e:11:e3:07:cd:64:4c:e8:f6:8c:b3:6b:61:5d: 2f:94:fa:cb:f2:ad:40:42:b0:a6:4b:78:83:ac:52: 18:56:d4:f9:88:ee:9b:ab:24:dd:8b:4d:ae:8f:5a: 79:9b:9d:90:77:74:3b:c1:bf:ba:31:db:06:5d:0c: 4b:8b:9f:3f:b8:2b:4a:23:18:8b:21:e0:b4:57:b5: 6e:d4:96:c0:5c:ef:d6:57:c1:e8:b2:8d:9a:94:0f: 2a:4f:56:c9:d3:18:7d:3a:47:ff:ca:5c:41:f8:b5: 76:4d:75:b5:a5:c5:6f:9a:ad:c9:4e:8d:ca:c9:80: fd:a4:e9:da:06:b9:fd:8e:a4:30:18:48:2e:61:a3: e3:a3:20:5b:4c:51:b5:5f:3c:86:95:e3:24:0f:4e: 00:28:87:30:3b:92:62:bd:cf:b3:0b:8e:8f:3d:05: 60:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:22:11:D2:78:7C:9F:EF:E8:84:9F:A7:02:B8:F2:D7:1C:93:FB:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0debc8b5-9d85-3b06-bf0f-50372ecf4c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.224.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:1a:12:b8:bf:48:22:da:e6:7f:33:5a:6a:ea:a9:7c:64:c0: 22:bf:61:bf:cb:fe:21:53:48:24:51:d7:ec:dc:36:71:49:20: e0:24:de:08:84:77:ce:f6:50:cb:dd:9c:a1:5e:06:f8:02:d2: 0b:5c:c5:28:28:c6:6a:8a:58:e2:5d:7f:0e:b8:10:59:c3:a3: ac:5d:dd:e3:0c:f9:cb:fa:7f:0b:7e:f7:33:6b:25:fc:69:43: d4:92:3b:3d:0a:8e:df:2b:22:5e:7f:82:5b:13:a7:16:69:c7: cb:d6:ed:1f:8b:90:5c:86:a8:c3:e2:c2:fc:92:39:70:9f:c3: 31:df:fd:4e:27:f8:a7:f9:22:e6:76:45:6b:22:3f:9f:84:cf: f0:3f:e4:aa:e9:c3:0f:cd:81:b5:6d:eb:1d:7d:43:7d:f3:2d: d6:72:1f:a6:18:05:1a:68:7d:4f:c2:2f:ad:1e:2d:d3:62:b3: 92:9c:09:af:22:8c:03:8b:0d:b8:2c:01:8c:bd:9f:38:6b:59: 39:06:7f:88:17:c0:16:43:f0:b1:76:72:b8:0e:94:e3:54:59: 70:76:cc:80:68:0a:ec:5d:2a:55:82:69:b5:e1:f5:16:c0:b2: a3:1b:5a:88:f5:af:8d:fa:98:c8:5a:73:4f:91:01:c4:bc:ad: 52:6e:c2:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssJOvnv6+/q7iVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MzExZWFiOTgtM2U4YS00YTA5LWJiYjMtMmM1MWU3ZmZkZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wP7r8BuYRw+Bne+gXt85W68MjjBqVPNAkof dEiNUKRlhzXLDce3geYoFDL9llh3TkBq1DwgxrlgtJWPDNt6QuM73KKyBDId2iYY K7A6PV7llomBb3uZyVgLfhHjB81kTOj2jLNrYV0vlPrL8q1AQrCmS3iDrFIYVtT5 iO6bqyTdi02uj1p5m52Qd3Q7wb+6MdsGXQxLi58/uCtKIxiLIeC0V7Vu1JbAXO/W V8Hoso2alA8qT1bJ0xh9Okf/ylxB+LV2TXW1pcVvmq3JTo3KyYD9pOnaBrn9jqQw GEguYaPjoyBbTFG1XzyGleMkD04AKIcwO5Jivc+zC46PPQVgJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0iEdJ4fJ/v6ISfpwK48tcck/sFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGRlYmM4YjUtOWQ4NS0z YjA2LWJmMGYtNTAzNzJlY2Y0YzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+DAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM0aEri/SCLa5n8zWmrqqXxkwCK/Yb/L/iFTSCRR1+zcNnFJIOAk3giE d872UMvdnKFeBvgC0gtcxSgoxmqKWOJdfw64EFnDo6xd3eMM+cv6fwt+9zNrJfxp Q9SSOz0Kjt8rIl5/glsTpxZpx8vW7R+LkFyGqMPiwvySOXCfwzHf/U4n+Kf5IuZ2 RWsiP5+Ez/A/5Krpww/NgbVt6x19Q33zLdZyH6YYBRpofU/CL60eLdNis5KcCa8i jAOLDbgsAYy9nzhrWTkGf4gXwBZD8LF2crgOlONUWXB2zIBoCuxdKlWCabXh9RbA sqMbWoj1r436mMhac0+RAcS8rVJuwpk= -----END CERTIFICATE-----Generated at Sun Apr 6 22:45:05 2025 by rpki-client