$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41cbe6a5-348b-3a8d-9767-cbe273c1f5ab.roa File: 41cbe6a5-348b-3a8d-9767-cbe273c1f5ab.roa (raw, json) Hash identifier: 8JU+A+n3eOSE/DtTUskivOIaN72TcBR4N18mCHZy7e0= Subject key identifier: 37:BF:64:0D:AB:C1:24:6A:4B:C2:60:22:A3:E5:70:31:9F:9B:50:DC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C3BD8DD7F527EA3FCA220 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41cbe6a5-348b-3a8d-9767-cbe273c1f5ab.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 71.204.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:3b:d8:dd:7f:52:7e:a3:fc:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=d2bb0e55-8574-4d1f-97d5-5d6476797c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:ed:9f:f0:05:ed:4d:a0:6a:da:bf:aa:da: 61:36:87:92:6c:9e:f5:b8:f7:a9:3b:e6:40:bc:8d: 5b:55:16:91:45:70:61:56:b4:6f:6c:c8:86:fc:bb: 58:12:a8:98:81:53:84:d5:fb:34:7b:bf:8f:7d:f8: b1:b3:c4:d6:33:91:00:d2:37:63:c7:89:e9:90:cd: 08:e9:e5:36:3e:db:d1:9a:d2:ac:22:33:df:49:0d: 26:44:42:f2:e7:45:58:4a:3c:db:1e:ab:31:a7:82: 49:6c:2a:03:dc:83:dd:1a:6a:f7:c8:a7:d8:42:7b: 63:85:27:b4:46:75:95:78:11:46:a2:d1:f4:af:55: cc:15:8b:93:0c:ab:1b:0e:af:5e:98:7a:2e:10:05: 90:0f:67:0e:98:76:73:97:a5:86:9e:6f:ae:3f:f8: 98:b8:4f:cb:d4:2f:44:05:ad:59:c2:92:31:02:f3: 11:67:28:ea:ab:6d:3c:f2:b0:6c:b7:42:a5:bf:a5: 99:10:29:58:c1:58:c4:00:e7:c9:d1:53:11:5d:b8: a9:87:e8:2c:b7:0e:f9:04:44:13:aa:2e:1f:d8:03: 5c:74:8d:ca:a2:f2:6e:b8:3a:82:a1:da:4e:6f:ce: 83:00:90:9d:07:eb:aa:0f:6b:21:a8:03:b4:46:10: bb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BF:64:0D:AB:C1:24:6A:4B:C2:60:22:A3:E5:70:31:9F:9B:50:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41cbe6a5-348b-3a8d-9767-cbe273c1f5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:78:27:5d:70:29:73:c9:d9:ae:82:f6:54:82:8a:57:8a:fc: 19:57:5a:2d:3a:c8:a5:c4:f5:6c:e2:42:7a:ac:de:80:fe:41: b3:41:78:33:b9:6e:d7:49:e1:66:55:de:60:e5:9c:50:92:ff: 98:c4:ba:3b:e7:55:85:a2:44:4d:56:39:df:e5:79:89:8b:6b: f7:34:56:64:db:e3:dd:2f:c3:f9:34:13:9b:da:24:d9:cf:6c: b2:b6:dd:9f:c2:df:85:fe:55:25:89:c0:75:b1:3a:52:24:b3: 86:ab:7a:98:f6:e1:44:41:52:40:09:d4:55:59:37:8c:0f:d7: 23:8b:cf:bb:4a:73:f9:ab:d4:17:22:0c:44:66:30:3a:f6:ab: 4b:f9:72:68:0f:cb:31:da:1e:20:0e:f3:d8:88:1e:8c:1f:cf: f4:ea:63:52:7f:05:dd:e1:3d:bb:47:62:f0:84:71:90:5a:43: dd:09:8d:88:c8:69:4f:4f:f4:8d:9a:85:ca:ac:d0:5c:67:4d: 34:f8:e9:6f:6b:50:f9:72:fb:92:4e:92:46:55:8d:62:75:0a: 65:e1:c3:2f:3a:2c:1a:a7:d8:f3:be:85:39:3e:2a:0a:a3:64: 94:2e:6c:d2:32:8b:eb:5b:e4:49:eb:fe:00:cb:5e:08:68:3e: 99:84:a5:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPDvY3X9SfqP8oiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk ZDJiYjBlNTUtODU3NC00ZDFmLTk3ZDUtNWQ2NDc2Nzk3YzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtjtn/AF7U2gatq/qtphNoeSbJ71uPepO+ZA vI1bVRaRRXBhVrRvbMiG/LtYEqiYgVOE1fs0e7+Pffixs8TWM5EA0jdjx4npkM0I 6eU2PtvRmtKsIjPfSQ0mRELy50VYSjzbHqsxp4JJbCoD3IPdGmr3yKfYQntjhSe0 RnWVeBFGotH0r1XMFYuTDKsbDq9emHouEAWQD2cOmHZzl6WGnm+uP/iYuE/L1C9E Ba1ZwpIxAvMRZyjqq2088rBst0Klv6WZEClYwVjEAOfJ0VMRXbiph+gstw75BEQT qi4f2ANcdI3KovJuuDqCodpOb86DAJCdB+uqD2shqAO0RhC72QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe/ZA2rwSRqS8JgIqPlcDGfm1DcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDFjYmU2YTUtMzQ4Yi0z YThkLTk3NjctY2JlMjczYzFmNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8xYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ4J11wKXPJ2a6C9lSCileK/BlXWi06yKXE9WziQnqs3oD+QbNBeDO5 btdJ4WZV3mDlnFCS/5jEujvnVYWiRE1WOd/leYmLa/c0VmTb490vw/k0E5vaJNnP bLK23Z/C34X+VSWJwHWxOlIks4arepj24URBUkAJ1FVZN4wP1yOLz7tKc/mr1Bci DERmMDr2q0v5cmgPyzHaHiAO89iIHowfz/TqY1J/Bd3hPbtHYvCEcZBaQ90JjYjI aU9P9I2ahcqs0FxnTTT46W9rUPly+5JOkkZVjWJ1CmXhwy86LBqn2PO+hTk+Kgqj ZJQubNIyi+tb5Enr/gDLXghoPpmEpQA= -----END CERTIFICATE-----Generated at Mon Apr 7 05:59:05 2025 by rpki-client