$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/321014af-3d42-38d7-9ffa-eec63eccf974.roa File: 321014af-3d42-38d7-9ffa-eec63eccf974.roa (raw, json) Hash identifier: fHuCjV68fFMCw/ZBT4GF08DKvw/UpGY/+Hr3uVPDou0= Subject key identifier: C5:BC:8F:1C:9B:6A:EF:DA:5E:92:AB:FE:4A:2E:5F:8D:2C:04:B5:3C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C6BB714F94D12137DB580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/321014af-3d42-38d7-9ffa-eec63eccf974.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 33659 IP address blocks: 174.57.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:6b:b7:14:f9:4d:12:13:7d:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=e3d0e615-3fd0-4397-b595-843e44c32172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:a1:68:c6:14:af:f6:7b:b0:2d:74:21:8d: d7:a3:73:b7:f8:98:eb:01:a8:9d:52:bb:1d:2c:c9: bf:7d:89:4a:bc:e3:4d:83:a4:a5:09:80:d0:97:fa: 52:65:4c:88:01:da:3b:31:24:26:9d:a9:97:28:2f: 4d:eb:97:2e:7e:45:0b:cc:14:04:4f:f4:53:07:65: 73:56:40:02:29:00:bc:bb:16:3a:9b:f6:e9:1b:32: 75:05:6b:2f:09:46:77:f7:9c:81:5c:dd:b8:14:e8: 68:6c:b6:bf:32:ae:cb:a2:db:44:60:03:07:81:a8: 23:8d:f2:4f:60:d8:92:6c:74:e5:f9:d5:d0:38:dc: 14:5e:b0:a8:c9:3d:a7:da:30:0d:d8:c5:bc:9d:9f: ec:c3:da:f5:fe:af:2f:f3:1c:04:72:27:ab:a8:99: a5:30:24:3f:84:1d:d1:0c:26:16:fe:9c:80:29:17: 06:61:82:2e:34:c1:17:43:53:53:7e:4d:8b:d2:e6: 7d:55:45:76:1b:90:fe:5a:2c:16:88:80:20:d7:06: ae:f1:df:a3:af:71:56:88:56:82:ca:77:28:00:7a: fc:d1:3d:09:a8:80:d3:78:20:52:69:fd:d1:7b:fc: 00:46:7c:c6:9c:2b:21:3e:43:b1:d2:a9:97:6e:95: a9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BC:8F:1C:9B:6A:EF:DA:5E:92:AB:FE:4A:2E:5F:8D:2C:04:B5:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/321014af-3d42-38d7-9ffa-eec63eccf974.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.57.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c7:eb:3c:0d:42:c9:9a:71:f8:db:98:b5:91:0c:b8:f4:94: a3:f5:e8:93:bd:aa:17:2d:b4:6f:97:f7:19:f7:3e:07:da:77: 15:a8:66:cb:51:6d:2d:de:ff:bf:12:2b:63:b4:ec:3b:79:59: 19:9a:68:12:17:1c:11:ef:6e:df:87:b4:31:bb:88:0f:d6:3c: 8f:e7:f8:29:cc:98:ea:33:c9:1b:f3:b7:19:c1:24:61:35:df: 74:ca:09:53:99:ba:ea:14:bc:45:2d:00:03:57:ca:2f:73:b3: d1:ba:0b:f2:b5:ae:71:dd:95:89:98:b4:4c:3a:a1:40:fe:f6: 85:60:a7:19:db:47:90:c0:58:80:68:67:10:ef:9d:9c:a4:d2: 96:9a:2e:e4:0b:c1:1c:09:14:d1:55:74:7c:ee:20:48:f4:c3: ce:36:bb:86:bd:97:1e:36:bb:17:20:0e:40:73:5a:dc:31:ae: 7e:9e:35:a2:72:11:95:0c:3b:76:c4:93:6c:55:63:60:6b:3d: 1b:3e:88:15:dd:38:b0:6f:b1:89:3a:f4:28:3f:2d:44:6e:28: 1d:bf:d5:b0:91:88:9f:36:e7:a4:1a:f6:48:4c:6d:75:44:fd: 50:7b:e9:a0:8e:93:af:84:e7:5c:6e:d6:9f:51:6b:08:e5:97: da:e9:68:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPGu3FPlNEhN9tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk ZTNkMGU2MTUtM2ZkMC00Mzk3LWI1OTUtODQzZTQ0YzMyMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx2haMYUr/Z7sC10IY3Xo3O3+JjrAaidUrsd LMm/fYlKvONNg6SlCYDQl/pSZUyIAdo7MSQmnamXKC9N65cufkULzBQET/RTB2Vz VkACKQC8uxY6m/bpGzJ1BWsvCUZ395yBXN24FOhobLa/Mq7LottEYAMHgagjjfJP YNiSbHTl+dXQONwUXrCoyT2n2jAN2MW8nZ/sw9r1/q8v8xwEcierqJmlMCQ/hB3R DCYW/pyAKRcGYYIuNMEXQ1NTfk2L0uZ9VUV2G5D+WiwWiIAg1wau8d+jr3FWiFaC yncoAHr80T0JqIDTeCBSaf3Re/wARnzGnCshPkOx0qmXbpWp3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMW8jxybau/aXpKr/kouX40sBLU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzIxMDE0YWYtM2Q0Mi0z OGQ3LTlmZmEtZWVjNjNlY2NmOTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrjmKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfH6zwNQsmacfjbmLWRDLj0lKP16JO9qhcttG+X9xn3PgfadxWoZstR bS3e/78SK2O07Dt5WRmaaBIXHBHvbt+HtDG7iA/WPI/n+CnMmOozyRvztxnBJGE1 33TKCVOZuuoUvEUtAANXyi9zs9G6C/K1rnHdlYmYtEw6oUD+9oVgpxnbR5DAWIBo ZxDvnZyk0paaLuQLwRwJFNFVdHzuIEj0w842u4a9lx42uxcgDkBzWtwxrn6eNaJy EZUMO3bEk2xVY2BrPRs+iBXdOLBvsYk69Cg/LURuKB2/1bCRiJ8256Qa9khMbXVE /VB76aCOk6+E51xu1p9Rawjll9rpaB8= -----END CERTIFICATE-----Generated at Sun Apr 6 17:10:17 2025 by rpki-client