$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70b6b332-8ed3-35a7-98a2-af4fba595b17.roa File: 70b6b332-8ed3-35a7-98a2-af4fba595b17.roa (raw, json) Hash identifier: ns56kQt8KkBSvuKXkrcOfX1l4IMBl4H7N+xNkC4DDkk= Subject key identifier: DA:ED:86:6A:50:D9:27:32:62:D5:C9:7D:A1:5B:FA:93:14:D2:EB:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F826BFD418EFE9E6174880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70b6b332-8ed3-35a7-98a2-af4fba595b17.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 67.171.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:26:bf:d4:18:ef:e9:e6:17:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d8bc8a8b-e7bb-4b8e-8cbe-6c3fb2cf0e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:59:62:b4:ac:54:04:61:e7:0b:bb:10:01:c2: c1:ca:49:8d:7d:f6:8c:ab:79:32:bc:b0:22:eb:99: 5a:96:a8:80:24:bf:34:e6:e5:48:f4:83:34:1d:52: 52:50:71:0d:8a:54:77:50:05:04:07:c4:26:1a:ec: 6f:86:c5:9e:42:50:aa:f7:e3:92:47:3f:ea:60:7b: e0:6d:38:f2:77:67:51:96:da:d9:9d:bc:61:f8:33: 01:9d:06:9a:be:15:b3:36:09:d7:4e:b7:9b:35:06: c9:68:d7:bb:02:8a:6b:d2:13:25:9d:32:49:cf:59: 7b:b5:6b:d5:5b:9e:84:da:7f:15:9b:72:e5:b9:c9: 4d:96:58:25:1b:1f:80:7b:4b:37:0f:d8:c0:45:ee: 19:09:48:fe:ad:c4:63:d4:f0:3b:48:c2:ab:03:52: c3:ca:88:c7:70:2d:56:3b:c2:de:08:00:a2:4e:19: 5d:27:3f:78:9a:a9:a0:83:9a:88:51:d5:f3:0a:b1: 53:f5:78:cf:18:d4:fd:a4:0c:5d:07:41:74:b6:8b: c1:c1:4b:db:f2:e1:a3:1c:07:8b:d9:c4:84:82:67: 0a:3a:48:43:76:56:55:0f:68:b7:d9:e6:91:13:47: 4d:d8:c8:e4:5c:8f:b8:95:d8:44:21:8d:c4:29:a4: cc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:ED:86:6A:50:D9:27:32:62:D5:C9:7D:A1:5B:FA:93:14:D2:EB:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70b6b332-8ed3-35a7-98a2-af4fba595b17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.171.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5d:ec:af:5a:4a:76:86:99:6a:47:39:c7:72:88:c8:55:f1: b9:b4:36:3a:3a:38:99:68:f6:63:b3:1a:95:93:2b:52:f4:7c: 4e:3d:45:3c:b0:39:3a:93:e7:b2:57:bd:6e:65:61:e4:94:dc: e4:b3:d1:32:45:88:20:cc:d9:26:86:2b:84:92:7e:c8:4a:dd: 80:3c:22:3f:d2:70:00:9e:64:0f:56:31:b3:5a:6b:40:58:7e: 49:42:08:6a:9d:ca:5b:b0:2d:a6:e6:ba:1f:4a:16:49:5f:b2: d9:ab:72:6c:4b:f4:f3:ed:33:2e:13:39:2d:94:71:75:db:57: 4c:dc:ba:a3:81:69:41:6c:65:d8:f4:83:c8:0f:ae:a1:9d:ae: 5e:80:ea:1b:1b:7d:10:78:ec:8c:87:5e:1b:11:85:76:b7:32: 81:78:31:08:90:b9:68:2d:75:f9:44:5a:e4:58:83:27:76:24: 62:e7:05:46:5c:5b:86:da:53:3a:10:a9:f8:9b:cf:3e:84:55: 50:c0:26:07:83:42:98:06:71:aa:d8:80:a0:8e:a7:e9:cc:ac: 80:37:71:f4:d3:98:cf:55:91:b5:96:bd:62:aa:29:a0:9f:4c: 16:3a:56:af:c0:83:26:96:7f:36:3d:ea:59:4c:6f:0a:85:42: 03:79:73:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Ca/1Bjv6eYXSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDhiYzhhOGItZTdiYi00YjhlLThjYmUtNmMzZmIyY2YwZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVlitKxUBGHnC7sQAcLBykmNffaMq3kyvLAi 65lalqiAJL805uVI9IM0HVJSUHENilR3UAUEB8QmGuxvhsWeQlCq9+OSRz/qYHvg bTjyd2dRltrZnbxh+DMBnQaavhWzNgnXTrebNQbJaNe7Aopr0hMlnTJJz1l7tWvV W56E2n8Vm3LluclNllglGx+Ae0s3D9jARe4ZCUj+rcRj1PA7SMKrA1LDyojHcC1W O8LeCACiThldJz94mqmgg5qIUdXzCrFT9XjPGNT9pAxdB0F0tovBwUvb8uGjHAeL 2cSEgmcKOkhDdlZVD2i32eaRE0dN2MjkXI+4ldhEIY3EKaTMYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrthmpQ2ScyYtXJfaFb+pMU0usjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzBiNmIzMzItOGVkMy0z NWE3LTk4YTItYWY0ZmJhNTk1YjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6vuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFd7K9aSnaGmWpHOcdyiMhV8bm0Njo6OJlo9mOzGpWTK1L0fE49RTyw OTqT57JXvW5lYeSU3OSz0TJFiCDM2SaGK4SSfshK3YA8Ij/ScACeZA9WMbNaa0BY fklCCGqdyluwLabmuh9KFklfstmrcmxL9PPtMy4TOS2UcXXbV0zcuqOBaUFsZdj0 g8gPrqGdrl6A6hsbfRB47IyHXhsRhXa3MoF4MQiQuWgtdflEWuRYgyd2JGLnBUZc W4baUzoQqfibzz6EVVDAJgeDQpgGcarYgKCOp+nMrIA3cfTTmM9VkbWWvWKqKaCf TBY6Vq/AgyaWfzY96llMbwqFQgN5c9E= -----END CERTIFICATE-----Generated at Mon Apr 7 06:13:11 2025 by rpki-client