$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2de95487-383a-3826-a849-a2b72df53ba3.roa File: 2de95487-383a-3826-a849-a2b72df53ba3.roa (raw, json) Hash identifier: CanI/oOZH7GvxFvx0i1IxwIGfsrl5UN4puM4t2fXS2s= Subject key identifier: 10:CD:67:75:03:82:E4:7C:9D:20:CA:1C:D0:07:03:E3:F9:B1:4A:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7D74B19ED940E2D490540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2de95487-383a-3826-a849-a2b72df53ba3.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 174.171.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:d7:4b:19:ed:94:0e:2d:49:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=23e16e10-5bbe-44a8-acdc-91b41ab056c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:28:3b:65:93:0f:bc:3f:61:3b:35:d8:36:76: 58:22:fb:69:39:97:7a:a3:76:b5:05:26:b9:c6:78: 12:81:fb:27:f7:04:e1:d6:8c:93:1a:79:ec:9a:37: 8a:b2:f7:d8:b1:6d:26:ff:e7:de:40:e6:36:8b:90: 2b:90:ad:6c:66:c5:af:bb:74:fa:1e:79:6c:75:20: 4c:f8:d8:f8:ee:e0:38:9c:c4:41:df:94:2a:39:1d: 19:65:d2:aa:f4:27:26:99:25:c8:5d:9e:97:93:eb: 8b:56:4e:34:f8:d3:f4:15:3e:e3:6b:dd:50:6c:ee: fc:3f:48:79:f7:6e:7e:08:9a:21:e0:bf:2e:d3:08: 5b:78:d0:0f:5f:a2:b8:4a:bf:db:1a:95:68:17:62: 26:bc:d4:46:0c:43:6d:be:45:0a:98:f0:26:29:2c: 84:8f:3c:60:f0:61:5c:5c:58:d8:74:88:72:56:6c: 5b:de:58:7b:b9:1a:4a:69:d9:87:17:36:4b:4d:fe: 7f:e0:0d:18:2a:38:86:7c:8b:96:ab:ae:b6:7c:ea: 48:0a:45:a8:6a:f5:bf:62:ae:f0:0b:d0:90:c7:8f: 05:6e:47:2f:f7:42:ab:32:a8:e8:db:29:df:36:e6: a2:ee:a1:6a:8f:09:83:ac:11:fe:ee:cc:4d:18:94: 8a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CD:67:75:03:82:E4:7C:9D:20:CA:1C:D0:07:03:E3:F9:B1:4A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2de95487-383a-3826-a849-a2b72df53ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:8b:76:c2:8a:24:4f:02:8e:f3:7e:1d:5b:8f:a0:f7:0c:70: d5:40:02:a4:29:39:55:27:df:5f:9f:c0:ba:dc:6a:23:d0:78: fb:2e:29:48:f0:7e:0d:43:f4:bb:50:74:e4:7a:f8:7c:04:59: 26:b8:1e:b9:95:21:56:b6:ca:ad:32:05:fc:31:06:08:dd:f3: dc:9e:f7:89:99:19:c9:36:9b:1e:c2:43:4c:4a:49:bd:0b:61: 3c:f8:14:d1:6e:17:4a:5b:e8:99:30:68:d7:b2:51:ff:a0:ae: d0:99:a8:c5:13:ad:5c:f4:14:32:73:a2:d2:9e:59:36:84:5b: be:12:dc:c0:81:35:ff:17:2b:dd:73:a9:6a:9b:2c:db:d8:45: c0:3c:d9:10:31:d0:97:ec:1a:e1:5c:30:b0:a5:5a:04:ec:90: 81:67:95:65:82:69:3b:96:16:92:b2:d9:f9:58:a7:08:7a:62: ca:c8:b2:3f:2a:20:32:3c:2b:c0:6b:c3:64:e3:a2:e6:ab:6c: 36:e0:3d:31:b7:62:80:09:1d:71:23:01:27:34:04:50:a4:a8: 2d:77:66:93:3f:2a:26:9a:b1:83:60:ef:1e:16:50:e4:a2:7b: bf:73:39:0d:11:d8:bf:e9:d1:be:56:7a:3e:6a:72:b9:ea:4d: ed:2a:72:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj099dLGe2UDi1JBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MjNlMTZlMTAtNWJiZS00NGE4LWFjZGMtOTFiNDFhYjA1NmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyg7ZZMPvD9hOzXYNnZYIvtpOZd6o3a1BSa5 xngSgfsn9wTh1oyTGnnsmjeKsvfYsW0m/+feQOY2i5ArkK1sZsWvu3T6HnlsdSBM +Nj47uA4nMRB35QqOR0ZZdKq9CcmmSXIXZ6Xk+uLVk40+NP0FT7ja91QbO78P0h5 925+CJoh4L8u0whbeNAPX6K4Sr/bGpVoF2ImvNRGDENtvkUKmPAmKSyEjzxg8GFc XFjYdIhyVmxb3lh7uRpKadmHFzZLTf5/4A0YKjiGfIuWq662fOpICkWoavW/Yq7w C9CQx48Fbkcv90KrMqjo2ynfNuai7qFqjwmDrBH+7sxNGJSKYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDNZ3UDguR8nSDKHNAHA+P5sUqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmRlOTU0ODctMzgzYS0z ODI2LWE4NDktYTJiNzJkZjUzYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqsSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmLdsKKJE8CjvN+HVuPoPcMcNVAAqQpOVUn31+fwLrcaiPQePsuKUjw fg1D9LtQdOR6+HwEWSa4HrmVIVa2yq0yBfwxBgjd89ye94mZGck2mx7CQ0xKSb0L YTz4FNFuF0pb6JkwaNeyUf+grtCZqMUTrVz0FDJzotKeWTaEW74S3MCBNf8XK91z qWqbLNvYRcA82RAx0JfsGuFcMLClWgTskIFnlWWCaTuWFpKy2flYpwh6YsrIsj8q IDI8K8Brw2TjouarbDbgPTG3YoAJHXEjASc0BFCkqC13ZpM/KiaasYNg7x4WUOSi e79zOQ0R2L/p0b5Wej5qcrnqTe0qctk= -----END CERTIFICATE-----Generated at Mon Apr 7 06:16:15 2025 by rpki-client