$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36f6b9a7-b11f-3aed-877c-e4dceb1b07a4.roa File: 36f6b9a7-b11f-3aed-877c-e4dceb1b07a4.roa (raw, json) Hash identifier: hFqbqdDYs3m3KW/kT7NUAx19HhJIOam7HGXLszi8oJw= Subject key identifier: F0:D8:14:45:07:D3:A9:76:25:9E:BB:84:15:A9:46:30:73:18:C8:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CC89210EA0532DB433FC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36f6b9a7-b11f-3aed-877c-e4dceb1b07a4.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7922 IP address blocks: 71.24.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:c8:92:10:ea:05:32:db:43:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=1a8ed4a3-69d3-41cb-be72-f41606ea28e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9b:7a:c2:1e:60:ee:0e:3c:4e:65:55:b6:9e: b1:79:1d:0d:da:e2:00:d5:2a:39:88:4d:c0:08:1b: 83:2d:de:00:25:e1:2f:e5:64:dd:d0:54:01:72:b4: 66:df:9f:aa:62:cc:81:f7:a2:41:35:ed:ba:48:e7: 32:ac:e4:c4:c6:93:0b:14:26:88:fa:ae:a5:c2:e8: 2f:dc:71:77:f7:2c:47:02:a3:e9:2e:4e:01:4b:0e: da:a5:b3:4a:a4:93:72:16:72:07:b2:b3:dd:48:39: 35:20:d9:78:66:ce:35:29:31:e7:6b:90:93:d2:f6: f6:97:55:93:30:bf:1d:0b:f6:1c:4c:55:0f:0f:f6: 33:51:d2:a5:26:be:a7:79:3e:a4:3d:49:09:fc:9e: b3:d2:cf:69:81:f5:01:ec:f7:db:08:42:0d:e3:a0: 4d:c9:64:a5:b0:21:f6:dd:81:8a:6f:7e:09:26:32: f5:16:69:d5:cd:07:21:a7:42:d4:5b:e2:02:b8:e0: d9:4d:e6:99:5b:97:b3:75:7c:5f:46:e7:80:6a:91: 39:b4:41:2a:10:02:17:13:d4:80:de:9f:43:f3:07: 98:38:df:fb:76:0f:c0:36:f7:dd:8a:21:48:ed:0c: dd:7e:ab:91:64:c5:2d:03:a9:f2:3d:86:49:7b:ff: 0b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D8:14:45:07:D3:A9:76:25:9E:BB:84:15:A9:46:30:73:18:C8:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/36f6b9a7-b11f-3aed-877c-e4dceb1b07a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.24.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7c:e0:af:0d:35:b4:24:39:b9:c4:16:b0:9c:4f:35:4b:b5: 32:84:8e:2b:9c:f8:4d:ba:2f:3e:17:ea:94:cc:1e:a6:61:4b: 52:cd:01:28:3b:9c:6c:f2:4c:2f:18:7f:be:8d:66:64:34:aa: 78:e3:66:25:8e:7b:a9:f3:8c:77:a8:1f:3a:fd:37:4b:0a:d4: 9b:8f:84:38:a0:46:9c:a5:71:18:38:fc:4f:99:af:91:f7:dc: a4:01:84:63:c6:9c:d2:fd:70:07:d8:c4:e1:f5:ac:1b:0d:a8: bf:d5:fb:00:9c:5c:e3:dc:7c:c0:91:01:76:f2:8c:e9:20:91: 78:65:18:93:6d:06:59:05:62:33:62:9c:33:d8:90:7a:c1:ef: 27:5e:29:85:ba:e6:98:7f:3c:8e:6b:67:51:3f:95:8d:29:ce: 1a:4c:8e:2f:79:99:2f:35:74:40:e1:19:41:d9:dc:b5:1b:de: 3c:9f:b6:af:70:e2:0e:b1:cc:01:1c:c6:3d:20:af:5f:e4:3f: 1f:91:37:73:62:bb:1c:5e:3a:76:91:81:a2:09:c6:3f:d6:0d: 74:91:0b:03:f6:c8:77:c4:af:c0:f1:99:23:9c:3b:e7:d0:60: 81:fe:ab:9c:e2:01:81:9a:53:e5:db:03:ee:2c:6c:aa:48:0b: 88:f9:0d:cb -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiebMiSEOoFMttDP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MWE4ZWQ0YTMtNjlkMy00MWNiLWJlNzItZjQxNjA2ZWEyOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pt6wh5g7g48TmVVtp6xeR0N2uIA1So5iE3A CBuDLd4AJeEv5WTd0FQBcrRm35+qYsyB96JBNe26SOcyrOTExpMLFCaI+q6lwugv 3HF39yxHAqPpLk4BSw7apbNKpJNyFnIHsrPdSDk1INl4Zs41KTHna5CT0vb2l1WT ML8dC/YcTFUPD/YzUdKlJr6neT6kPUkJ/J6z0s9pgfUB7PfbCEIN46BNyWSlsCH2 3YGKb34JJjL1FmnVzQchp0LUW+ICuODZTeaZW5ezdXxfRueAapE5tEEqEAIXE9SA 3p9D8weYON/7dg/ANvfdiiFI7QzdfquRZMUtA6nyPYZJe/8LUQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPDYFEUH06l2JZ67hBWpRjBzGMjtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzZmNmI5YTctYjExZi0z YWVkLTg3N2MtZTRkY2ViMWIwN2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCRxgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAd3zgrw01tCQ5ucQWsJxPNUu1MoSOK5z4TbovPhfqlMwepmFLUs0BKDuc bPJMLxh/vo1mZDSqeONmJY57qfOMd6gfOv03SwrUm4+EOKBGnKVxGDj8T5mvkffc pAGEY8ac0v1wB9jE4fWsGw2ov9X7AJxc49x8wJEBdvKM6SCReGUYk20GWQViM2Kc M9iQesHvJ14phbrmmH88jmtnUT+VjSnOGkyOL3mZLzV0QOEZQdnctRvePJ+2r3Di DrHMARzGPSCvX+Q/H5E3c2K7HF46dpGBognGP9YNdJELA/bId8SvwPGZI5w759Bg gf6rnOIBgZpT5dsD7ixsqkgLiPkNyw== -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:37 2025 by rpki-client