$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b051d7e-a46d-3f3f-9aed-f479b6152ac7.roa File: 3b051d7e-a46d-3f3f-9aed-f479b6152ac7.roa (raw, json) Hash identifier: M5a2Nfrs2RBhUUq9clro8W9vn4hT6mb8gOBt4ktffAM= Subject key identifier: 98:70:69:DE:E2:E9:42:B6:F2:BE:20:4A:40:55:2B:44:33:4F:FA:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6BC3BEC307F7993E1D500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b051d7e-a46d-3f3f-9aed-f479b6152ac7.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 71.237.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:bc:3b:ec:30:7f:79:93:e1:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=8d24668a-8410-40d2-a1f1-65c00d478bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b7:2a:a9:6c:33:7c:a1:61:bb:63:c4:18:88: 0a:b4:ec:cb:75:1a:97:c2:35:c2:e3:26:54:dc:b7: e0:03:03:4d:04:b0:3f:c8:c1:86:d5:68:36:ff:25: 49:28:16:07:ad:45:80:21:fe:47:53:2b:65:12:d2: 33:0c:99:dc:a0:a4:e3:b1:6a:29:e7:a4:97:e6:34: fc:d1:31:66:d7:fc:7f:bd:af:b4:a6:7b:bf:6a:ac: 7b:17:89:7b:2e:73:64:dd:65:c9:6c:13:aa:8a:87: 75:0d:8b:91:17:7c:fc:30:29:e4:c0:b8:3a:79:aa: 07:cb:2b:7f:86:11:cc:da:cb:1f:41:af:82:69:66: 0e:e4:f6:d1:f1:0d:77:c2:b1:f7:46:ca:bc:7b:d5: 98:12:49:a8:16:7e:d3:16:0a:ba:82:7a:e1:f4:dd: 65:88:03:f8:83:c6:64:d7:21:0c:e9:08:ab:95:d7: b9:c0:90:82:e8:31:69:6c:00:33:34:5a:bb:82:93: a8:df:fc:14:7e:4e:32:80:73:53:c2:fb:61:c4:28: 8f:03:d2:76:96:37:5b:e8:9c:4b:1c:09:2e:49:79: 84:38:b8:99:3d:60:6f:66:cf:72:7e:65:fa:5d:8b: 3b:32:c7:49:c5:6e:a3:a3:37:bf:19:91:c4:b3:57: 59:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:70:69:DE:E2:E9:42:B6:F2:BE:20:4A:40:55:2B:44:33:4F:FA:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b051d7e-a46d-3f3f-9aed-f479b6152ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.237.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:51:ef:79:4d:44:96:43:a5:e4:c5:74:b8:56:3d:74:98:03: 1f:a3:04:05:6c:70:8a:9a:3c:10:ef:b1:d3:dc:2d:fe:c2:40: cc:58:5e:c2:ec:48:4a:b1:ab:bc:71:86:35:6c:72:4a:c5:3b: 18:62:61:7e:bb:4d:6d:88:f8:60:a9:3a:bd:76:d1:aa:bb:a3: d0:42:0e:0f:ac:8e:ef:2f:2b:a9:0b:55:eb:09:8a:59:cd:f6: e7:84:a4:a0:3a:0c:db:d8:c4:ab:31:aa:ff:bf:89:31:04:14: 16:d3:90:bb:bc:1b:fa:ef:ff:71:47:bf:ea:e5:1c:8c:7b:6f: 39:13:c3:ef:91:b1:e2:e7:5a:9f:b4:0f:80:35:79:03:87:ff: 32:71:52:3b:35:87:f5:4c:49:96:34:d7:d0:4f:15:22:ea:1b: cd:9d:b5:fb:2c:a2:ad:14:0f:74:10:ad:0a:fc:30:36:0b:28: a2:d7:48:3a:af:37:da:f1:7a:e5:64:8d:20:60:f0:8f:25:fb: 1a:c0:b2:d9:eb:8a:f1:e7:ff:bb:39:44:68:34:cf:9a:c7:8a: f6:9a:b0:90:e9:0e:82:35:67:d9:58:31:4f:b5:83:d5:aa:7d: f1:37:6c:03:dc:63:26:b2:ba:87:2f:23:17:bb:be:22:61:ff: f0:85:52:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09rw77DB/eZPh1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OGQyNDY2OGEtODQxMC00MGQyLWExZjEtNjVjMDBkNDc4YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrcqqWwzfKFhu2PEGIgKtOzLdRqXwjXC4yZU 3LfgAwNNBLA/yMGG1Wg2/yVJKBYHrUWAIf5HUytlEtIzDJncoKTjsWop56SX5jT8 0TFm1/x/va+0pnu/aqx7F4l7LnNk3WXJbBOqiod1DYuRF3z8MCnkwLg6eaoHyyt/ hhHM2ssfQa+CaWYO5PbR8Q13wrH3Rsq8e9WYEkmoFn7TFgq6gnrh9N1liAP4g8Zk 1yEM6Qirlde5wJCC6DFpbAAzNFq7gpOo3/wUfk4ygHNTwvthxCiPA9J2ljdb6JxL HAkuSXmEOLiZPWBvZs9yfmX6XYs7MsdJxW6joze/GZHEs1dZDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhwad7i6UK28r4gSkBVK0QzT/r2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2IwNTFkN2UtYTQ2ZC0z ZjNmLTlhZWQtZjQ3OWI2MTUyYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpR73lNRJZDpeTFdLhWPXSYAx+jBAVscIqaPBDvsdPcLf7CQMxYXsLs SEqxq7xxhjVsckrFOxhiYX67TW2I+GCpOr120aq7o9BCDg+sju8vK6kLVesJilnN 9ueEpKA6DNvYxKsxqv+/iTEEFBbTkLu8G/rv/3FHv+rlHIx7bzkTw++RseLnWp+0 D4A1eQOH/zJxUjs1h/VMSZY019BPFSLqG82dtfssoq0UD3QQrQr8MDYLKKLXSDqv N9rxeuVkjSBg8I8l+xrAstnrivHn/7s5RGg0z5rHivaasJDpDoI1Z9lYMU+1g9Wq ffE3bAPcYyayuocvIxe7viJh//CFUtI= -----END CERTIFICATE-----Generated at Mon Apr 7 06:09:07 2025 by rpki-client