$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1845bd9e-8c34-3252-906e-61f3d4ab590e.roa File: 1845bd9e-8c34-3252-906e-61f3d4ab590e.roa (raw, json) Hash identifier: 4AIpWJQG/SsBOBPWC8hE7W+8YihCm59zdDw5soVJM/g= Subject key identifier: B9:AE:45:48:8A:7E:DE:53:77:3C:D3:25:26:0B:B5:EB:60:18:DD:EC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4313760DC46AAD794DC1F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1845bd9e-8c34-3252-906e-61f3d4ab590e.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 71.238.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:37:60:dc:46:aa:d7:94:dc:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=5fb0aab9-9987-46e9-98fc-e5db1a9fbe49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5d:76:b7:90:7d:f0:41:a4:b7:8c:a6:29:3f: 2e:c4:20:43:3d:15:80:c1:6f:3a:79:e3:e9:9a:63: ec:09:92:27:f7:38:0a:43:9c:e9:70:7a:81:06:99: 26:40:59:16:44:fe:2b:71:f5:b4:fc:52:1e:97:23: 4a:2d:e0:f2:5e:57:89:42:4c:40:fc:d3:05:f0:a8: e0:c5:f0:bf:5c:42:d0:d6:34:c2:e7:f4:b1:d1:25: dc:f2:3b:12:b6:ca:c7:85:23:e6:d0:26:19:0e:5f: 34:cb:e6:a5:bf:6f:aa:3a:40:72:a0:a6:11:0a:86: 9d:66:ce:d2:1d:bd:86:29:c8:a4:9a:a3:f4:ad:79: c5:fd:35:af:a7:1d:36:77:b6:02:aa:6b:10:f2:5a: 32:18:47:45:3e:92:cb:88:33:54:9d:51:a2:81:ea: 8a:c8:f8:4d:2f:87:06:5f:70:f8:66:14:cf:92:ca: ad:41:db:c5:ed:28:93:b4:d4:f4:b4:a4:f1:68:a4: 1b:a5:d7:29:8d:40:de:d9:ba:2a:f3:92:7b:d4:4d: f2:c0:45:cb:3c:a9:a9:95:d8:00:1d:cc:12:95:14: 0c:24:78:f2:05:03:f6:36:2b:46:5c:21:d6:f8:b4: 2f:0f:8d:3a:4f:bb:1d:e5:aa:59:5b:1c:4a:b5:bb: a1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AE:45:48:8A:7E:DE:53:77:3C:D3:25:26:0B:B5:EB:60:18:DD:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1845bd9e-8c34-3252-906e-61f3d4ab590e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:56:8d:64:1e:5a:a1:b9:28:b7:35:a2:2b:bb:a5:17:eb:a1: ea:e8:53:87:7b:ce:a7:21:7e:e3:2c:d5:3a:73:dd:d0:d3:a8: 91:91:5d:d0:60:8f:35:1d:23:b2:d0:7c:33:ac:e8:4a:c9:03: 3e:9f:2d:7f:c8:d5:c1:8c:15:99:8d:b6:d6:bf:d1:fa:8a:3e: cb:24:c8:e6:f4:18:2e:25:2a:2a:60:5f:de:96:ab:b6:cf:32: ef:a1:b2:e4:3a:4b:a7:87:8f:92:ea:e9:6e:52:e0:89:ad:0c: ab:e1:d5:e2:21:61:87:b8:c8:d4:df:0e:2c:bb:99:d6:a5:6a: 86:c9:1a:ab:00:5b:94:b9:72:56:7c:2d:cc:52:8e:9e:3d:58: 56:a5:90:0b:36:e5:e1:d9:e2:f8:b0:c5:69:05:ce:48:98:d8: a9:3c:b8:b1:0a:f5:20:36:9c:e7:c8:f9:28:7f:61:79:42:74: 3c:d6:5e:c9:b2:ab:89:05:ee:06:ba:5b:3f:cb:a9:a6:c1:94: 5e:c6:bf:ce:50:04:96:45:e4:9e:d3:a2:58:16:c5:0a:3e:64: 68:a2:29:f1:16:28:aa:50:07:e6:44:44:42:67:18:4c:89:69: fa:09:6b:ad:af:db:33:5a:10:ab:dc:90:a7:51:92:63:62:ea: 5d:f5:ce:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMTdg3Eaq15TcHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NWZiMGFhYjktOTk4Ny00NmU5LTk4ZmMtZTVkYjFhOWZiZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V12t5B98EGkt4ymKT8uxCBDPRWAwW86eePp mmPsCZIn9zgKQ5zpcHqBBpkmQFkWRP4rcfW0/FIelyNKLeDyXleJQkxA/NMF8Kjg xfC/XELQ1jTC5/Sx0SXc8jsStsrHhSPm0CYZDl80y+alv2+qOkByoKYRCoadZs7S Hb2GKcikmqP0rXnF/TWvpx02d7YCqmsQ8loyGEdFPpLLiDNUnVGigeqKyPhNL4cG X3D4ZhTPksqtQdvF7SiTtNT0tKTxaKQbpdcpjUDe2boq85J71E3ywEXLPKmpldgA HcwSlRQMJHjyBQP2NitGXCHW+LQvD406T7sd5apZWxxKtbuhEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmuRUiKft5TdzzTJSYLtetgGN3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTg0NWJkOWUtOGMzNC0z MjUyLTkwNmUtNjFmM2Q0YWI1OTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhWjWQeWqG5KLc1oiu7pRfroeroU4d7zqchfuMs1Tpz3dDTqJGRXdBg jzUdI7LQfDOs6ErJAz6fLX/I1cGMFZmNtta/0fqKPsskyOb0GC4lKipgX96Wq7bP Mu+hsuQ6S6eHj5Lq6W5S4ImtDKvh1eIhYYe4yNTfDiy7mdalaobJGqsAW5S5clZ8 LcxSjp49WFalkAs25eHZ4viwxWkFzkiY2Kk8uLEK9SA2nOfI+Sh/YXlCdDzWXsmy q4kF7ga6Wz/LqabBlF7Gv85QBJZF5J7TolgWxQo+ZGiiKfEWKKpQB+ZEREJnGEyJ afoJa62v2zNaEKvckKdRkmNi6l31zhM= -----END CERTIFICATE-----Generated at Tue Jun 3 06:15:44 2025 by rpki-client