$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa64eac-b772-316b-a513-c69d6a15dc71.roa File: 5aa64eac-b772-316b-a513-c69d6a15dc71.roa (raw, json) Hash identifier: QXfpL85HaqtRZa4y9PUYMw8lManLJZ84hit4y4AKCi4= Subject key identifier: 29:68:0E:E6:9A:48:A5:80:06:B1:83:61:9B:99:72:DB:66:A0:46:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848143AE1B0D608012C2CDAD780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa64eac-b772-316b-a513-c69d6a15dc71.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 7015 IP address blocks: 71.233.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3a:e1:b0:d6:08:01:2c:2c:da:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=57a039e8-bafe-426b-9e40-6e9da9a8d19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cb:1f:98:79:98:3c:9e:74:cf:7a:f3:bb:52: f8:83:e2:26:1b:6b:2c:1a:bc:cb:bd:e3:3c:91:dd: 19:e4:1b:1e:20:ad:7e:00:4a:37:82:22:0d:25:86: 0c:8a:e5:fd:64:e0:1f:d5:35:8a:91:f4:91:19:00: 8e:91:b8:4c:03:5a:78:fe:ea:7c:47:81:86:9a:ca: 2b:ba:1d:8d:84:da:24:39:1b:92:f6:d3:b7:27:b2: 72:51:22:75:dd:c5:45:e1:ca:0d:72:cb:66:ed:67: d2:cd:e4:a9:d9:9e:af:d9:d5:75:80:e6:dd:3d:50: a6:2b:05:fd:66:1e:6c:c7:5b:a6:da:51:5e:d0:a2: 85:cc:8d:ae:2d:5c:e3:b0:2c:c0:56:54:c2:ef:f3: 72:b7:20:e8:66:68:70:31:3f:99:ea:52:8e:5a:3f: cb:44:2a:cd:cc:9a:59:a5:37:93:ff:4b:22:db:d1: 65:bd:c4:18:22:8d:04:e6:3c:36:33:e2:e1:97:54: 44:f1:8d:be:98:ad:d5:0c:14:fe:ed:80:19:49:5a: 24:59:8e:dc:c3:62:91:4d:82:72:38:b1:2d:7e:33: f8:17:37:b4:a7:df:b5:b6:a6:0c:66:7c:65:8c:5c: 4a:ff:95:62:57:fe:dc:2f:60:95:53:c8:e9:2a:80: 8e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:68:0E:E6:9A:48:A5:80:06:B1:83:61:9B:99:72:DB:66:A0:46:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa64eac-b772-316b-a513-c69d6a15dc71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.233.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:60:0c:07:28:28:06:c4:f7:f4:99:40:92:ea:e2:8d:6c:da: 1e:d8:bd:e7:95:02:4f:8f:c1:a3:8d:57:c6:7e:83:e0:3d:4f: 18:6f:54:34:ac:23:9c:39:2f:9b:c4:19:33:d3:63:a8:56:92: f0:5c:b5:79:f9:ce:8a:b3:e4:bf:7c:52:6d:c5:4e:8f:0d:8a: 5c:14:8a:a7:bd:ec:3c:3e:39:7e:8d:4c:e2:55:b8:19:6f:e2: 2b:1e:a4:5f:15:89:d2:4f:49:a6:28:ac:ed:1b:07:62:23:c5: e4:19:67:71:58:e8:bf:83:a2:23:ed:be:19:76:93:32:46:bc: 1d:5b:68:03:ba:60:9f:4d:68:63:6e:86:a1:d2:f3:fe:fc:bf: 5e:d6:3b:ed:bc:7a:c4:8b:2c:4c:9a:9f:7c:57:b4:2e:64:f3: fa:88:60:46:03:fb:bf:85:d4:57:49:8c:e1:d3:c0:03:45:66: 54:7a:fe:22:83:56:1a:59:de:2d:0c:74:6a:5a:14:76:09:b5: 65:fd:28:66:05:7c:3f:e0:79:d0:dd:15:85:77:72:9c:2b:a9: e2:57:d4:e1:c3:62:2b:45:4d:a3:fb:d3:76:f6:8f:48:a5:50: 94:fc:ea:b3:9b:a9:d4:15:d9:9a:ef:67:2f:8e:44:ea:41:56: 1a:89:20:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOuGw1ggBLCza14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk NTdhMDM5ZTgtYmFmZS00MjZiLTllNDAtNmU5ZGE5YThkMTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMsfmHmYPJ50z3rzu1L4g+ImG2ssGrzLveM8 kd0Z5BseIK1+AEo3giINJYYMiuX9ZOAf1TWKkfSRGQCOkbhMA1p4/up8R4GGmsor uh2NhNokORuS9tO3J7JyUSJ13cVF4coNcstm7WfSzeSp2Z6v2dV1gObdPVCmKwX9 Zh5sx1um2lFe0KKFzI2uLVzjsCzAVlTC7/NytyDoZmhwMT+Z6lKOWj/LRCrNzJpZ pTeT/0si29FlvcQYIo0E5jw2M+Lhl1RE8Y2+mK3VDBT+7YAZSVokWY7cw2KRTYJy OLEtfjP4Fze0p9+1tqYMZnxljFxK/5ViV/7cL2CVU8jpKoCO1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCloDuaaSKWABrGDYZuZcttmoEa1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWFhNjRlYWMtYjc3Mi0z MTZiLWE1MTMtYzY5ZDZhMTVkYzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+nMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1gDAcoKAbE9/SZQJLq4o1s2h7YveeVAk+PwaONV8Z+g+A9TxhvVDSs I5w5L5vEGTPTY6hWkvBctXn5zoqz5L98Um3FTo8NilwUiqe97Dw+OX6NTOJVuBlv 4isepF8VidJPSaYorO0bB2IjxeQZZ3FY6L+DoiPtvhl2kzJGvB1baAO6YJ9NaGNu hqHS8/78v17WO+28esSLLEyan3xXtC5k8/qIYEYD+7+F1FdJjOHTwANFZlR6/iKD VhpZ3i0MdGpaFHYJtWX9KGYFfD/gedDdFYV3cpwrqeJX1OHDYitFTaP703b2j0il UJT86rObqdQV2ZrvZy+OROpBVhqJIEY= -----END CERTIFICATE-----Generated at Sun Feb 16 21:02:30 2025 by rpki-client