$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c7b5dc5-b7b7-3600-8e4e-a6b7897330f8.roa File: 2c7b5dc5-b7b7-3600-8e4e-a6b7897330f8.roa (raw, json) Hash identifier: 6gdXnmx0aj8jOyYGzp+6tKpvO6wojHMgUGBlMy69i2s= Subject key identifier: 44:0F:E6:64:6F:E1:E9:73:23:50:3B:43:72:BC:4F:5C:E2:C7:52:7C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0978E04E7C78AB7BE1320 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c7b5dc5-b7b7-3600-8e4e-a6b7897330f8.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 71.230.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:97:8e:04:e7:c7:8a:b7:be:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=e11c59c0-c714-4ac2-9258-4fe0129eb0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:86:bb:4d:4f:9d:fd:e7:d1:f6:f8:34:53:25: aa:0f:92:16:3b:36:74:9c:b2:3f:3a:de:a6:cc:1f: 87:ba:b1:ce:6c:68:ae:2a:f7:29:b8:78:19:be:48: fe:01:f0:cc:d1:53:46:e7:a7:91:cb:8b:0d:46:dd: 07:a5:0e:fa:5d:5c:8d:50:74:6f:fe:ea:db:8f:f7: 4c:06:99:62:67:44:d6:41:99:c7:58:fc:b8:9d:a4: 17:6b:71:d6:cc:81:26:74:6c:1e:99:e8:11:5f:d6: 5b:47:4b:a9:74:64:cd:7a:8e:d0:a6:ed:38:3b:b7: a2:09:75:f2:8b:b8:e7:0b:bc:59:38:4b:39:22:87: 81:7d:8b:1d:72:bb:18:1e:95:0c:11:06:c7:79:7f: 1f:2c:90:1d:e9:cc:c2:ed:ef:6c:5c:65:bd:b5:e4: 59:87:1c:a4:fc:26:7c:86:49:2a:f3:ef:42:05:d9: 8d:f0:e2:bb:d1:34:08:66:d0:ff:8a:85:7d:0a:e4: 82:64:e5:6c:f0:67:10:ca:0b:65:95:27:41:2f:12: fb:da:6a:21:f9:91:86:dd:d8:8e:3f:b6:c7:0c:85: 05:94:83:81:09:c7:3a:56:b1:a3:ea:35:b6:13:58: fe:5b:8d:42:9b:fc:2c:b7:2c:b2:6b:81:15:2e:8e: 55:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0F:E6:64:6F:E1:E9:73:23:50:3B:43:72:BC:4F:5C:E2:C7:52:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c7b5dc5-b7b7-3600-8e4e-a6b7897330f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.230.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8b:83:7b:87:2d:95:47:7c:e1:28:f9:2b:fb:6d:4e:1d:d5: fb:12:63:78:86:4b:14:dd:84:92:de:a1:d2:eb:db:e5:cc:42: fe:2b:95:45:6e:43:5d:d5:50:57:47:9e:79:cd:68:59:80:48: b8:6d:6c:98:3f:54:d0:f7:b8:96:d3:74:51:53:83:fb:59:f0: 90:50:87:ea:bf:59:58:94:e3:55:9e:31:67:52:4a:79:31:53: cd:53:c5:ac:a7:42:b1:b7:8c:c9:35:f4:11:4e:b7:21:fd:f6: ba:f8:71:2a:e4:e8:ad:f1:e7:d7:2a:d2:c3:46:60:ad:2b:21: 97:b3:0e:20:b4:6b:f1:17:17:4a:bb:51:51:3e:92:0e:f2:42: 19:8f:76:f3:93:ea:4b:bd:a4:90:dd:9b:d9:4e:90:84:9d:10: 92:2d:dc:6f:65:86:dd:8a:6e:09:10:fa:34:70:ac:70:73:4b: 6c:52:f9:9e:8f:95:fc:d1:70:d0:9b:47:ca:31:b2:52:c3:d8: 93:9f:00:8e:e8:8b:a1:16:bb:1d:cb:67:f9:f6:b1:3d:59:9d: 53:9d:9d:b8:99:5a:b5:76:ff:15:07:02:a2:e7:d8:c7:13:ec: ff:c9:0e:36:f1:43:07:30:2a:6a:d7:a9:79:27:9a:56:f2:22: f9:d3:59:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssJeOBOfHire+EyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTExYzU5YzAtYzcxNC00YWMyLTkyNTgtNGZlMDEyOWViMGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoa7TU+d/efR9vg0UyWqD5IWOzZ0nLI/Ot6m zB+HurHObGiuKvcpuHgZvkj+AfDM0VNG56eRy4sNRt0HpQ76XVyNUHRv/urbj/dM BpliZ0TWQZnHWPy4naQXa3HWzIEmdGwemegRX9ZbR0updGTNeo7Qpu04O7eiCXXy i7jnC7xZOEs5IoeBfYsdcrsYHpUMEQbHeX8fLJAd6czC7e9sXGW9teRZhxyk/CZ8 hkkq8+9CBdmN8OK70TQIZtD/ioV9CuSCZOVs8GcQygtllSdBLxL72moh+ZGG3diO P7bHDIUFlIOBCcc6VrGj6jW2E1j+W41Cm/wstyyya4EVLo5V9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQP5mRv4elzI1A7Q3K8T1zix1J8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmM3YjVkYzUtYjdiNy0z NjAwLThlNGUtYTZiNzg5NzMzMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+awMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKLg3uHLZVHfOEo+Sv7bU4d1fsSY3iGSxTdhJLeodLr2+XMQv4rlUVu Q13VUFdHnnnNaFmASLhtbJg/VND3uJbTdFFTg/tZ8JBQh+q/WViU41WeMWdSSnkx U81TxaynQrG3jMk19BFOtyH99rr4cSrk6K3x59cq0sNGYK0rIZezDiC0a/EXF0q7 UVE+kg7yQhmPdvOT6ku9pJDdm9lOkISdEJIt3G9lht2KbgkQ+jRwrHBzS2xS+Z6P lfzRcNCbR8oxslLD2JOfAI7oi6EWux3LZ/n2sT1ZnVOdnbiZWrV2/xUHAqLn2McT 7P/JDjbxQwcwKmrXqXknmlbyIvnTWfM= -----END CERTIFICATE-----Generated at Sun Apr 6 22:53:28 2025 by rpki-client