$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ef939cc-6842-3e2e-a64d-db69a2e6ea7f.roa File: 2ef939cc-6842-3e2e-a64d-db69a2e6ea7f.roa (raw, json) Hash identifier: Wt8sys/z4zHD3xWEOPMeZPZRd03o8pfggZQx/MPr5nk= Subject key identifier: A5:F1:1F:F4:CC:DB:51:22:A0:1C:1C:26:55:82:EF:4F:2D:E9:30:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F84F23D8621C476C655780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ef939cc-6842-3e2e-a64d-db69a2e6ea7f.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 174.169.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:4f:23:d8:62:1c:47:6c:65:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=7a30dbe5-1a0a-4758-8404-eae011ba16f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:62:ca:83:36:58:97:f6:7a:4e:4a:84:89:c1: cc:d1:3a:cc:dd:be:71:43:0c:e0:4a:dc:e6:f4:27: 1b:47:fe:b5:bc:94:42:10:73:17:35:94:11:ed:be: 96:0a:dc:c9:27:f6:81:80:66:3f:33:ab:9f:91:35: ea:6d:fb:f1:ae:88:0c:d6:19:7a:83:dc:33:40:5a: c2:97:1a:94:2a:7c:18:64:3c:16:86:72:0a:b7:92: d8:d7:c3:4a:a4:e0:ea:cc:c0:e2:36:ea:dd:f5:b0: a7:7c:d2:90:ca:6a:b1:ee:61:8d:eb:ef:fb:d5:ce: d4:95:ca:b9:9c:ee:dc:da:57:e0:69:1c:56:ca:e2: 41:2d:69:50:f2:33:89:c4:e6:76:87:73:09:9c:2c: 54:b9:4f:46:7d:90:92:cd:04:4c:4f:21:6d:9e:f6: 93:05:63:0e:57:92:a0:4e:a1:7c:f2:4e:0f:2e:01: 7f:a9:09:da:62:2a:c7:8e:84:93:79:6e:2a:90:69: c7:cf:2a:47:38:b4:16:49:ab:0a:5c:4e:82:44:0d: 79:06:2c:02:96:21:a4:e5:fd:12:1c:75:31:10:fa: 24:c7:8d:1c:86:4c:d5:37:de:9c:08:a1:1d:11:55: 37:4f:86:b3:53:79:a1:cb:62:d2:98:50:b2:5a:8e: 1d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F1:1F:F4:CC:DB:51:22:A0:1C:1C:26:55:82:EF:4F:2D:E9:30:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ef939cc-6842-3e2e-a64d-db69a2e6ea7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.169.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:35:10:e0:70:c7:49:e5:8f:8d:c7:99:0a:1c:1c:7e:68:05: d2:c9:18:1c:4f:c8:d5:a1:cd:4b:7a:39:c1:f9:58:76:b3:00: bf:fc:91:dd:32:00:ab:d7:13:22:59:3f:f9:b3:d6:fe:10:9f: b7:45:4f:f6:12:7f:fb:b0:9c:04:74:b7:21:5f:e5:5e:c3:98: c6:dc:1e:b6:fb:08:29:1e:e8:1d:76:b0:16:4b:81:28:c6:d8: 20:34:66:dd:97:d3:e1:39:60:dd:57:13:d4:89:12:17:05:d6: be:7a:5a:34:d8:43:61:a3:c3:d0:44:3a:e9:50:4e:77:46:eb: 24:f4:54:d5:55:aa:21:3c:26:51:ad:71:74:6a:77:32:97:f9: fd:e9:6b:02:01:57:4b:cf:9c:da:e2:0c:c1:7b:91:15:4c:5a: 7f:c0:d5:ff:ac:94:90:55:4c:30:bd:8e:d9:45:23:72:aa:9e: 8a:9c:bc:db:41:33:a4:63:ce:4e:31:6f:70:26:1e:24:a2:82: cd:e7:19:38:91:f1:dd:4d:e0:8b:65:47:17:c2:64:94:75:65: ce:32:36:cb:13:35:f3:5a:95:ee:e5:46:19:20:da:b4:0b:82: 51:7c:a5:64:f4:dd:d5:38:5f:cc:4b:99:7f:70:19:fb:f8:2b: 57:58:eb:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+E8j2GIcR2xlV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk N2EzMGRiZTUtMWEwYS00NzU4LTg0MDQtZWFlMDExYmExNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2LKgzZYl/Z6TkqEicHM0TrM3b5xQwzgStzm 9CcbR/61vJRCEHMXNZQR7b6WCtzJJ/aBgGY/M6ufkTXqbfvxrogM1hl6g9wzQFrC lxqUKnwYZDwWhnIKt5LY18NKpODqzMDiNurd9bCnfNKQymqx7mGN6+/71c7Ulcq5 nO7c2lfgaRxWyuJBLWlQ8jOJxOZ2h3MJnCxUuU9GfZCSzQRMTyFtnvaTBWMOV5Kg TqF88k4PLgF/qQnaYirHjoSTeW4qkGnHzypHOLQWSasKXE6CRA15BiwCliGk5f0S HHUxEPokx40chkzVN96cCKEdEVU3T4azU3mhy2LSmFCyWo4dgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXxH/TM21EioBwcJlWC708t6TBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmVmOTM5Y2MtNjg0Mi0z ZTJlLWE2NGQtZGI2OWEyZTZlYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqlsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG81EOBwx0nlj43HmQocHH5oBdLJGBxPyNWhzUt6OcH5WHazAL/8kd0y AKvXEyJZP/mz1v4Qn7dFT/YSf/uwnAR0tyFf5V7DmMbcHrb7CCke6B12sBZLgSjG 2CA0Zt2X0+E5YN1XE9SJEhcF1r56WjTYQ2Gjw9BEOulQTndG6yT0VNVVqiE8JlGt cXRqdzKX+f3pawIBV0vPnNriDMF7kRVMWn/A1f+slJBVTDC9jtlFI3KqnoqcvNtB M6Rjzk4xb3AmHiSigs3nGTiR8d1N4ItlRxfCZJR1Zc4yNssTNfNale7lRhkg2rQL glF8pWT03dU4X8xLmX9wGfv4K1dY63A= -----END CERTIFICATE-----Generated at Sun Apr 6 13:26:47 2025 by rpki-client