$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/560928c0-5ebd-31b5-b3ee-2747aad927e5.roa File: 560928c0-5ebd-31b5-b3ee-2747aad927e5.roa (raw, json) Hash identifier: Kscy4/hCFbmV6Ij4J8EebEE2Twz+K5E3SBJeXYX4kBM= Subject key identifier: 5F:E7:E6:3B:34:02:D1:E1:D9:EE:66:64:D0:C3:40:50:F0:6E:25:DF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF5BA42657EF1B58105780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/560928c0-5ebd-31b5-b3ee-2747aad927e5.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 71.239.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:5b:a4:26:57:ef:1b:58:10:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=9ed9ff7b-7f2f-4965-b9e0-d7a07def381c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:97:1c:d5:73:f0:3a:24:c6:d4:e5:f7:8a:47: 1a:83:91:ba:a0:d4:d5:26:49:b8:04:16:6a:bd:88: 4e:03:18:4d:74:32:2e:77:95:da:b2:60:06:b3:48: ed:74:b7:16:fa:db:bc:4a:8e:c4:32:22:c5:18:18: c5:e2:6c:05:cd:82:75:28:94:f3:75:84:52:15:cb: 84:5e:23:a9:04:bf:4d:ad:b0:91:30:b8:08:d6:3f: 8f:41:1a:bb:c2:d1:35:3f:5a:10:ee:8c:44:f2:6c: 18:45:cf:ea:91:3c:b7:e2:f7:e9:2e:d3:0e:c8:79: 5b:f4:6e:5b:a4:34:d6:4d:49:a2:0b:c3:d8:6f:f7: 69:da:4c:85:fd:5e:36:4e:26:4a:fb:ad:b6:32:04: 90:a8:82:c2:1a:2f:35:7f:63:a4:a6:10:fe:1b:81: 2d:f3:e9:68:ff:f0:d2:78:59:13:38:23:4f:98:37: 73:c8:37:8a:1f:97:78:5d:2a:9c:7c:20:4b:64:ff: 89:7f:e0:1b:de:ac:68:c3:e9:a5:d0:0a:9e:4d:56: 9e:bc:1f:30:0d:40:0e:e9:6a:60:c9:8a:ed:25:4f: fc:ab:76:ba:f3:2d:64:77:49:a8:77:e6:11:64:fc: b8:55:25:e9:8e:cd:2e:9e:87:10:db:47:02:f3:db: 2d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E7:E6:3B:34:02:D1:E1:D9:EE:66:64:D0:C3:40:50:F0:6E:25:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/560928c0-5ebd-31b5-b3ee-2747aad927e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d5:75:be:b0:b3:f1:e4:a0:88:8a:59:19:32:aa:fd:ad:88: b6:2d:da:a9:10:5a:23:3e:31:7a:b2:07:41:77:5e:d1:2d:9a: 5b:3b:7f:d7:84:d8:f4:4c:01:1b:f2:68:09:12:54:1b:fa:65: 3e:7d:f5:75:2d:00:48:80:4d:76:57:30:25:17:27:4e:8c:10: 4f:3e:a8:17:83:b5:2b:59:57:91:51:b6:45:0e:9e:1b:91:3b: da:68:f6:34:71:f6:59:01:94:ce:3a:a0:8d:10:1c:50:6a:33: f9:f0:34:e2:da:a1:24:46:09:0d:1e:92:a0:cc:94:38:23:21: 0f:55:4e:9a:d5:7a:8b:4e:77:20:db:c3:2e:ee:3b:44:4d:57: f2:09:e8:84:71:3c:2c:ab:dd:21:29:ea:dd:36:bf:01:44:a8: d7:e8:bf:c5:f2:69:83:8e:7a:6b:96:24:31:62:87:f7:23:c6: b4:ca:da:66:c7:10:29:e2:19:c1:90:f4:ae:30:23:dc:70:10: c8:17:93:a2:04:3d:ad:65:44:dc:02:43:06:68:35:17:c0:cb: 96:5f:14:c7:fc:61:2d:98:7d:9e:a9:8b:f4:91:8f:02:c8:5f: a5:bb:1d:53:33:e1:31:07:cd:3c:dd:65:a3:2e:14:95:f6:3d: e2:86:5a:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr1ukJlfvG1gQV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OWVkOWZmN2ItN2YyZi00OTY1LWI5ZTAtZDdhMDdkZWYzODFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5cc1XPwOiTG1OX3ikcag5G6oNTVJkm4BBZq vYhOAxhNdDIud5XasmAGs0jtdLcW+tu8So7EMiLFGBjF4mwFzYJ1KJTzdYRSFcuE XiOpBL9NrbCRMLgI1j+PQRq7wtE1P1oQ7oxE8mwYRc/qkTy34vfpLtMOyHlb9G5b pDTWTUmiC8PYb/dp2kyF/V42TiZK+622MgSQqILCGi81f2OkphD+G4Et8+lo//DS eFkTOCNPmDdzyDeKH5d4XSqcfCBLZP+Jf+Ab3qxow+ml0AqeTVaevB8wDUAO6Wpg yYrtJU/8q3a68y1kd0mod+YRZPy4VSXpjs0unocQ20cC89stzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/n5js0AtHh2e5mZNDDQFDwbiXfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTYwOTI4YzAtNWViZC0z MWI1LWIzZWUtMjc0N2FhZDkyN2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzVdb6ws/HkoIiKWRkyqv2tiLYt2qkQWiM+MXqyB0F3XtEtmls7f9eE 2PRMARvyaAkSVBv6ZT599XUtAEiATXZXMCUXJ06MEE8+qBeDtStZV5FRtkUOnhuR O9po9jRx9lkBlM46oI0QHFBqM/nwNOLaoSRGCQ0ekqDMlDgjIQ9VTprVeotOdyDb wy7uO0RNV/IJ6IRxPCyr3SEp6t02vwFEqNfov8XyaYOOemuWJDFih/cjxrTK2mbH ECniGcGQ9K4wI9xwEMgXk6IEPa1lRNwCQwZoNRfAy5ZfFMf8YS2YfZ6pi/SRjwLI X6W7HVMz4TEHzTzdZaMuFJX2PeKGWqg= -----END CERTIFICATE-----Generated at Mon Apr 7 06:19:27 2025 by rpki-client