$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a0ba7d-af64-3ac1-a341-f18de1eaf275.roa File: 35a0ba7d-af64-3ac1-a341-f18de1eaf275.roa (raw, json) Hash identifier: rgXWzjzcy1nofVr5FQXevtLJjMrSlHsSd7CYPKmvq1I= Subject key identifier: E5:1B:A8:E2:A4:FA:B0:9E:23:98:D6:C7:09:2B:06:54:CF:72:EF:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6B6B9E1B4F11F4CA59D90 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a0ba7d-af64-3ac1-a341-f18de1eaf275.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 67.171.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:b6:b9:e1:b4:f1:1f:4c:a5:9d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=af09674a-e313-4944-b070-be1cc9b32898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d6:ff:c5:a7:2c:ed:d7:b4:f6:03:39:b7:55: c8:59:d5:8d:21:e1:13:59:89:03:a5:2e:32:42:d3: b9:5d:a8:55:7b:38:fa:53:b8:60:46:5d:58:ad:67: 5b:fa:dc:6f:0e:c6:84:7d:bb:a5:f0:69:65:5b:40: 77:4c:66:10:11:5e:1c:d7:84:66:01:42:3f:10:03: a6:49:fe:90:2e:8a:64:11:34:97:6f:61:8e:71:df: 7f:ad:1f:34:d4:c4:a5:c8:2d:ce:a8:af:41:e4:ca: 0e:24:57:8b:84:6b:40:18:42:e1:17:4f:ff:39:7a: 0f:74:11:3b:3b:c7:88:bd:4e:36:88:5a:72:ff:04: 73:a1:b3:d7:51:79:a1:cb:28:5c:bf:c7:f4:8b:2b: f7:de:7b:17:14:55:7f:5e:cf:84:e6:c1:2f:26:22: 9b:dd:cf:9b:75:85:cd:20:bd:4d:19:21:b0:22:0b: a2:0e:22:2c:5e:9a:42:cb:e9:27:cf:8a:d8:0b:29: cf:de:d0:3f:f3:2e:30:17:da:f3:31:46:a3:83:96: f3:df:45:61:1f:b7:c0:7e:2a:8d:8a:5a:3c:fa:ca: 05:be:46:bd:41:47:a1:88:cb:0e:52:e4:e4:d8:29: c5:19:f1:27:17:58:f2:44:eb:b9:db:eb:07:b4:f1: 32:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1B:A8:E2:A4:FA:B0:9E:23:98:D6:C7:09:2B:06:54:CF:72:EF:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35a0ba7d-af64-3ac1-a341-f18de1eaf275.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.171.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:6d:03:cc:93:98:99:2b:f7:0c:40:79:fd:cd:7c:16:d9:ce: c6:d3:0a:7a:46:a2:c8:d2:17:0a:9c:65:72:03:f3:60:4a:65: e7:f9:c2:be:2c:8b:78:34:c8:c3:18:eb:b3:7f:18:33:0d:54: 48:29:5d:12:df:7d:e0:fb:de:a9:69:ce:9b:71:bf:6d:f9:d3: f8:f3:e0:08:30:76:76:d9:c4:66:ca:77:79:9c:6e:24:12:49: 7d:0b:20:85:7b:b7:bf:68:68:74:90:66:ff:fe:21:71:00:29: a8:c0:1b:ad:f2:e6:b7:63:be:84:c2:cb:91:1a:ca:e8:14:6b: 0b:8a:a1:b4:4e:a4:65:d2:82:b1:ab:a8:1e:f2:bc:c5:c4:e7: fe:56:12:9e:5f:7d:c6:8a:9a:7a:8f:ae:79:10:bc:24:bb:02: 8f:31:63:1f:94:4b:e8:96:ad:47:b2:04:d7:1e:61:24:fd:08: b3:cd:14:8b:a8:15:ff:11:ef:ec:62:fc:6f:af:32:57:55:9c: a3:2f:70:ac:79:e3:1c:69:00:10:47:1e:9a:0d:af:ab:c8:60: 20:de:d1:f2:0b:87:8d:ec:82:76:78:36:2f:b4:30:92:1a:47: 19:bc:f3:49:c0:1d:61:e0:f2:ae:2b:0c:1b:a2:f3:80:fc:09: 5f:97:58:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09ra54bTxH0ylnZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YWYwOTY3NGEtZTMxMy00OTQ0LWIwNzAtYmUxY2M5YjMyODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtb/xacs7de09gM5t1XIWdWNIeETWYkDpS4y QtO5XahVezj6U7hgRl1YrWdb+txvDsaEfbul8GllW0B3TGYQEV4c14RmAUI/EAOm Sf6QLopkETSXb2GOcd9/rR801MSlyC3OqK9B5MoOJFeLhGtAGELhF0//OXoPdBE7 O8eIvU42iFpy/wRzobPXUXmhyyhcv8f0iyv33nsXFFV/Xs+E5sEvJiKb3c+bdYXN IL1NGSGwIguiDiIsXppCy+knz4rYCynP3tA/8y4wF9rzMUajg5bz30VhH7fAfiqN ilo8+soFvka9QUehiMsOUuTk2CnFGfEnF1jyROu52+sHtPEyDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUbqOKk+rCeI5jWxwkrBlTPcu8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzVhMGJhN2QtYWY2NC0z YWMxLWEzNDEtZjE4ZGUxZWFmMjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6uIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1tA8yTmJkr9wxAef3NfBbZzsbTCnpGosjSFwqcZXID82BKZef5wr4s i3g0yMMY67N/GDMNVEgpXRLffeD73qlpzptxv2350/jz4AgwdnbZxGbKd3mcbiQS SX0LIIV7t79oaHSQZv/+IXEAKajAG63y5rdjvoTCy5EayugUawuKobROpGXSgrGr qB7yvMXE5/5WEp5ffcaKmnqPrnkQvCS7Ao8xYx+US+iWrUeyBNceYST9CLPNFIuo Ff8R7+xi/G+vMldVnKMvcKx54xxpABBHHpoNr6vIYCDe0fILh43sgnZ4Ni+0MJIa Rxm880nAHWHg8q4rDBui84D8CV+XWCI= -----END CERTIFICATE-----Generated at Mon Apr 7 06:00:59 2025 by rpki-client