$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e501434-671b-35ab-ae6b-32c05470120b.roa File: 2e501434-671b-35ab-ae6b-32c05470120b.roa (raw, json) Hash identifier: xyx7g+xj6NHZV3VTJw52jRDwuFYF1wtVstW9qo6pLjk= Subject key identifier: 04:2E:5D:E9:27:96:B3:47:FA:3B:A6:45:5D:D1:B8:8F:79:52:F0:5D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0E0946A54A4A8206B5980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e501434-671b-35ab-ae6b-32c05470120b.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 71.194.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:e0:94:6a:54:a4:a8:20:6b:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=4de0bbdb-501d-4d74-bc0d-a9ba8438601f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:d6:87:2a:54:9b:f4:a5:ff:b8:63:7c:ca: 7c:ef:a2:5c:79:c6:cf:44:8e:5a:54:ff:de:ba:5a: 51:a3:20:5d:b6:4d:90:a7:00:4a:21:ba:ea:83:1f: 9f:e8:66:b9:72:96:4d:6a:1d:2d:18:39:35:1f:db: e7:fb:89:36:b4:80:51:37:21:11:61:83:c9:f8:76: db:b9:01:12:04:9a:09:25:fb:83:86:e3:54:d1:1d: db:7b:44:b2:f1:03:b1:50:7a:48:79:c7:7e:86:be: 8b:1c:5f:26:2a:78:c4:e6:af:9f:df:4a:27:4e:83: c8:cf:78:96:e6:29:0b:ab:41:31:5b:29:78:75:95: 33:97:01:35:47:34:b1:a0:31:81:46:a5:5a:e0:43: 5e:da:21:c3:ef:55:0f:43:c6:61:f1:58:77:92:9d: db:71:85:b5:81:9b:2e:4b:42:bf:ad:6d:c1:31:85: 7e:fa:e4:02:27:ec:25:97:5a:64:f0:8c:8e:37:a9: a3:1d:4b:b1:ab:5f:99:94:04:f7:05:25:0e:1e:16: 1e:32:30:3d:50:54:d5:90:84:d1:1f:76:18:d8:92: bc:e3:5e:d9:de:c9:ae:40:0c:d1:e8:66:1f:54:5d: 4b:85:54:8c:33:c1:bf:08:c0:d2:f5:58:68:f6:03: 21:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2E:5D:E9:27:96:B3:47:FA:3B:A6:45:5D:D1:B8:8F:79:52:F0:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e501434-671b-35ab-ae6b-32c05470120b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.194.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:f8:6e:45:9a:00:ab:5b:ed:d5:b3:bd:72:38:8f:17:3e:65: 84:6a:b0:8a:53:18:b5:6a:6b:a6:3f:c0:3e:52:08:0e:e5:08: c7:e0:27:b0:16:13:de:97:15:23:e5:f9:68:e4:22:f9:39:58: c4:42:54:89:5a:de:47:94:a3:65:21:6d:7d:d6:e5:cd:52:c1: 9e:94:7b:bc:24:c3:3a:3e:38:c6:0d:dd:e8:4e:37:86:99:b2: b6:52:79:07:24:ea:67:37:ef:ae:75:42:59:47:88:42:b7:32: 65:ab:1e:95:43:d0:8f:be:84:48:60:c8:6e:d6:55:07:23:0a: bf:8c:d0:1a:72:32:c1:3a:58:4b:53:58:1a:ce:b5:79:44:95: 60:93:bb:6d:74:c1:75:af:e2:00:ba:54:81:b2:8f:dc:1c:20: 8d:fe:63:da:74:8f:e5:d4:31:1a:54:0f:10:a1:9f:de:6d:55: ed:72:59:84:cd:40:1d:f8:1d:05:ec:50:db:dc:79:6f:26:f0: 40:92:16:65:e0:c5:ba:92:2d:0b:71:6a:4f:38:83:25:9d:97: 53:63:fe:2c:6c:19:d0:26:66:bf:c2:4d:b3:98:05:f8:b8:80: 91:c6:df:f1:3d:53:8b:44:1d:a1:51:74:c1:ce:1a:6c:66:af: 4b:13:84:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssOCUalSkqCBrWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NGRlMGJiZGItNTAxZC00ZDc0LWJjMGQtYTliYTg0Mzg2MDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1DWhypUm/Sl/7hjfMp876JcecbPRI5aVP/e ulpRoyBdtk2QpwBKIbrqgx+f6Ga5cpZNah0tGDk1H9vn+4k2tIBRNyERYYPJ+Hbb uQESBJoJJfuDhuNU0R3be0Sy8QOxUHpIecd+hr6LHF8mKnjE5q+f30onToPIz3iW 5ikLq0ExWyl4dZUzlwE1RzSxoDGBRqVa4ENe2iHD71UPQ8Zh8Vh3kp3bcYW1gZsu S0K/rW3BMYV++uQCJ+wll1pk8IyON6mjHUuxq1+ZlAT3BSUOHhYeMjA9UFTVkITR H3YY2JK8417Z3smuQAzR6GYfVF1LhVSMM8G/CMDS9Vho9gMhSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQuXeknlrNH+jumRV3RuI95UvBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmU1MDE0MzQtNjcxYi0z NWFiLWFlNmItMzJjMDU0NzAxMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8LcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/4bkWaAKtb7dWzvXI4jxc+ZYRqsIpTGLVqa6Y/wD5SCA7lCMfgJ7AW E96XFSPl+WjkIvk5WMRCVIla3keUo2UhbX3W5c1SwZ6Ue7wkwzo+OMYN3ehON4aZ srZSeQck6mc37651QllHiEK3MmWrHpVD0I++hEhgyG7WVQcjCr+M0BpyMsE6WEtT WBrOtXlElWCTu210wXWv4gC6VIGyj9wcII3+Y9p0j+XUMRpUDxChn95tVe1yWYTN QB34HQXsUNvceW8m8ECSFmXgxbqSLQtxak84gyWdl1Nj/ixsGdAmZr/CTbOYBfi4 gJHG3/E9U4tEHaFRdMHOGmxmr0sThDM= -----END CERTIFICATE-----Generated at Mon Apr 7 09:46:53 2025 by rpki-client