$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2795df33-cce5-3d15-a3ad-19fce56c2fa4.roa File: 2795df33-cce5-3d15-a3ad-19fce56c2fa4.roa (raw, json) Hash identifier: 3iZZOYzcwCQGhMZ8nqXfBlny74fGYoY+9BhJnJPuc8o= Subject key identifier: 66:FA:EF:8B:2D:1B:42:92:F8:32:05:DC:F0:04:AC:7C:21:8F:7B:3A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB17DCFF375EE3B67B30280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2795df33-cce5-3d15-a3ad-19fce56c2fa4.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 71.198.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:7d:cf:f3:75:ee:3b:67:b3:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=ed8bf1b2-e8bb-48bb-bf7d-008e79a305cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:82:2e:5d:61:47:68:65:81:91:51:f8:c6: ba:4d:4c:72:be:3a:18:32:21:a6:f1:94:e1:23:ba: 55:c0:00:06:6b:3a:80:96:b2:92:09:65:4f:a3:12: f7:40:f7:de:4c:e1:01:ec:ff:63:e1:88:34:23:31: f4:69:23:10:18:a8:f4:04:fa:5e:65:0c:ba:0b:76: 1c:0d:be:89:36:85:fa:b5:54:c1:ef:b4:55:10:b5: 39:3e:7f:52:2d:a8:a6:bf:31:9a:92:de:76:d1:c3: a1:f5:2e:a8:27:ea:86:36:aa:bc:9e:c8:31:74:0c: 52:da:d8:27:40:2a:69:9a:47:7b:3f:8c:47:99:c5: 15:e0:d3:7b:ba:20:12:c3:de:e5:27:19:13:ef:1b: 1d:fc:e9:ea:85:ac:88:a1:a6:e4:76:ec:90:4e:5f: 37:77:9b:35:ef:81:f0:2c:4a:ea:8e:3e:4c:8b:73: 94:a8:63:76:23:91:b6:22:4b:ef:60:35:84:cc:a4: 59:0d:22:93:76:90:29:f3:a0:8f:3b:a7:4b:b4:40: f1:da:84:5e:17:16:7b:d0:bc:60:5a:be:de:64:27: 3d:93:2f:db:1e:c2:1b:c0:a2:6b:8e:44:cd:14:e8: bb:f2:ca:e5:60:aa:7f:6f:bd:ca:e6:28:9b:0f:3f: 18:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FA:EF:8B:2D:1B:42:92:F8:32:05:DC:F0:04:AC:7C:21:8F:7B:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2795df33-cce5-3d15-a3ad-19fce56c2fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.198.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:b1:d7:fa:40:d1:46:ba:c4:02:52:d6:e7:fe:dc:97:a6:c9: 1c:4a:6f:ec:f7:b1:70:f4:4b:ec:d6:37:aa:4f:e7:03:6e:1d: 5e:c0:54:61:f2:99:3f:17:41:f3:c7:4b:50:28:84:74:71:89: 45:07:ce:37:33:5b:aa:98:4a:76:02:6c:79:55:21:81:55:2f: 28:a6:70:fc:27:55:21:8f:c9:63:c5:78:5d:ea:b4:c1:fb:9b: cf:e6:e8:0d:b2:65:f5:25:f6:33:a7:d5:84:e2:59:a6:77:62: be:47:ac:c6:f2:3f:89:75:8d:1c:bc:da:78:d5:b3:2c:c8:94: 1d:83:ab:45:40:08:76:54:a6:a2:d1:38:1d:7c:24:88:43:06: a4:bd:c3:a5:0e:6f:11:7f:ac:b5:e9:27:5d:5e:e2:98:b8:e3: d5:f1:0d:30:d6:a1:cf:e8:e9:cb:29:db:31:e8:ab:60:e6:50: 82:b5:df:c2:32:0f:b8:e7:da:28:75:fd:29:79:c6:8f:61:bc: 19:f3:a5:cd:c8:f7:39:b8:0f:8b:0e:49:3a:fb:3b:a3:00:8a: b4:d8:ac:8c:1a:62:49:78:36:ec:ef:60:b6:34:f3:db:7f:42: aa:56:d0:ba:1c:ac:e2:d1:02:f8:43:97:87:7e:ed:ca:af:f5: 5d:ec:59:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssX3P83XuO2ezAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZWQ4YmYxYjItZThiYi00OGJiLWJmN2QtMDA4ZTc5YTMwNWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppqCLl1hR2hlgZFR+Ma6TUxyvjoYMiGm8ZTh I7pVwAAGazqAlrKSCWVPoxL3QPfeTOEB7P9j4Yg0IzH0aSMQGKj0BPpeZQy6C3Yc Db6JNoX6tVTB77RVELU5Pn9SLaimvzGakt520cOh9S6oJ+qGNqq8nsgxdAxS2tgn QCppmkd7P4xHmcUV4NN7uiASw97lJxkT7xsd/OnqhayIoabkduyQTl83d5s174Hw LErqjj5Mi3OUqGN2I5G2IkvvYDWEzKRZDSKTdpAp86CPO6dLtEDx2oReFxZ70Lxg Wr7eZCc9ky/bHsIbwKJrjkTNFOi78srlYKp/b73K5iibDz8YRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGb674stG0KS+DIF3PAErHwhj3s6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjc5NWRmMzMtY2NlNS0z ZDE1LWEzYWQtMTlmY2U1NmMyZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8aQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSx1/pA0Ua6xAJS1uf+3JemyRxKb+z3sXD0S+zWN6pP5wNuHV7AVGHy mT8XQfPHS1AohHRxiUUHzjczW6qYSnYCbHlVIYFVLyimcPwnVSGPyWPFeF3qtMH7 m8/m6A2yZfUl9jOn1YTiWaZ3Yr5HrMbyP4l1jRy82njVsyzIlB2Dq0VACHZUpqLR OB18JIhDBqS9w6UObxF/rLXpJ11e4pi449XxDTDWoc/o6csp2zHoq2DmUIK138Iy D7jn2ih1/Sl5xo9hvBnzpc3I9zm4D4sOSTr7O6MAirTYrIwaYkl4NuzvYLY089t/ QqpW0LocrOLRAvhDl4d+7cqv9V3sWfI= -----END CERTIFICATE-----Generated at Mon Apr 7 05:54:04 2025 by rpki-client