$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f257e2-6423-3442-9857-a4c23f84fc11.roa File: 72f257e2-6423-3442-9857-a4c23f84fc11.roa (raw, json) Hash identifier: yaY0vXWizWOiWgj0vQL46C5Rs1EGo2F6GNCoRjIXdiI= Subject key identifier: 23:58:52:32:E0:13:F1:D5:93:1C:4C:23:CB:41:A6:F8:0A:DB:38:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7D658439D2011D1CE6D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f257e2-6423-3442-9857-a4c23f84fc11.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 174.170.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:d6:58:43:9d:20:11:d1:ce:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=0323fa17-e03f-49c6-891e-bbe8b1214090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:a1:08:f3:06:b9:a9:20:35:55:4a:97:ae: e7:fc:ba:5a:65:21:db:90:ff:b0:e8:28:1c:bb:9c: e9:dd:1a:c8:c9:35:f2:aa:d0:46:68:c1:ad:90:e9: a5:77:8c:96:cc:12:5c:d9:15:c9:33:6b:73:66:6b: 49:02:dd:fe:8a:2f:1a:d4:7a:b0:b7:7b:86:08:1c: 07:b1:70:c6:36:9c:41:c3:64:3b:a3:a7:85:df:10: da:72:43:36:bc:c0:fc:1f:6d:8b:b6:92:aa:58:99: 85:f3:28:0f:d1:65:70:35:1e:ff:2a:7a:6f:b5:ae: b3:52:25:fd:c0:cf:40:4f:6b:24:1d:98:05:f0:9a: 00:a0:4b:1c:25:9d:ca:c4:60:b6:6a:7a:33:2d:82: f4:25:f5:58:a0:ef:fe:06:77:d9:0f:9d:f9:c8:34: 52:79:32:bb:da:25:c3:c1:71:d5:e7:08:ab:16:6f: d0:ee:2b:70:1b:66:57:02:2e:0d:7b:f1:fb:df:0a: e9:9a:26:3e:0e:ae:49:14:df:50:d2:84:a7:c3:27: 81:63:61:86:62:87:9b:7a:e0:a0:d8:c5:50:83:68: e4:1f:65:d7:9b:7b:f5:6c:fb:e5:91:e9:d4:ec:7b: 8b:ff:1e:9e:0c:b4:c1:a3:50:2c:db:d1:ad:63:68: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:58:52:32:E0:13:F1:D5:93:1C:4C:23:CB:41:A6:F8:0A:DB:38:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72f257e2-6423-3442-9857-a4c23f84fc11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a0:92:29:c5:89:31:84:a4:0e:0e:0e:23:c9:23:0f:e5:ee: c5:a6:35:fb:98:ea:98:bf:9f:04:47:1b:92:61:38:e1:4d:80: bc:1b:6b:5e:70:b7:ee:99:a1:c6:c1:28:fe:2b:4a:c8:9a:43: 70:68:b5:7f:11:10:1f:bd:ec:1f:68:d3:00:a9:bd:a5:e0:88: 7c:b2:5b:74:8c:4b:e4:59:6e:e9:72:1c:ed:77:47:4f:ba:7a: d4:ab:79:65:16:a0:91:b8:ba:94:fd:3a:e1:02:53:02:a3:e3: d9:c7:c7:7d:9f:21:b9:de:60:da:44:0c:9c:f3:ea:9d:21:83: b8:9f:ca:b1:8e:a6:b0:d7:15:4a:d9:3b:c9:4a:7d:49:e8:ba: 37:75:b3:ba:d8:cc:a5:d2:86:24:51:2c:a3:9f:78:01:59:55: f0:92:f7:16:d5:d7:be:cd:e4:8b:a2:12:2a:7f:30:05:36:ee: 48:d9:a2:3a:f1:f0:df:14:0d:e4:ce:be:5d:ce:a3:c4:8b:64: 59:cb:cc:32:77:7c:c4:a1:82:e1:3a:f3:7f:0c:a3:fa:3e:cf: 68:93:fd:b7:5b:97:86:ed:48:bd:6a:dd:7b:2c:13:b5:63:ea: 01:4c:15:ee:e9:75:cb:29:34:c4:72:7f:67:1f:af:1b:42:f2: 30:31:13:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj099ZYQ50gEdHObYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MDMyM2ZhMTctZTAzZi00OWM2LTg5MWUtYmJlOGIxMjE0MDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykmhCPMGuakgNVVKl67n/LpaZSHbkP+w6Cgc u5zp3RrIyTXyqtBGaMGtkOmld4yWzBJc2RXJM2tzZmtJAt3+ii8a1Hqwt3uGCBwH sXDGNpxBw2Q7o6eF3xDackM2vMD8H22LtpKqWJmF8ygP0WVwNR7/Knpvta6zUiX9 wM9AT2skHZgF8JoAoEscJZ3KxGC2anozLYL0JfVYoO/+BnfZD535yDRSeTK72iXD wXHV5wirFm/Q7itwG2ZXAi4Ne/H73wrpmiY+Dq5JFN9Q0oSnwyeBY2GGYoebeuCg 2MVQg2jkH2XXm3v1bPvlkenU7HuL/x6eDLTBo1As29GtY2h5twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNYUjLgE/HVkxxMI8tBpvgK2zh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzJmMjU3ZTItNjQyMy0z NDQyLTk4NTctYTRjMjNmODRmYzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqgkinFiTGEpA4ODiPJIw/l7sWmNfuY6pi/nwRHG5JhOOFNgLwba15w t+6ZocbBKP4rSsiaQ3BotX8REB+97B9o0wCpvaXgiHyyW3SMS+RZbulyHO13R0+6 etSreWUWoJG4upT9OuECUwKj49nHx32fIbneYNpEDJzz6p0hg7ifyrGOprDXFUrZ O8lKfUnoujd1s7rYzKXShiRRLKOfeAFZVfCS9xbV177N5IuiEip/MAU27kjZojrx 8N8UDeTOvl3Oo8SLZFnLzDJ3fMShguE6838Mo/o+z2iT/bdbl4btSL1q3XssE7Vj 6gFMFe7pdcspNMRyf2cfrxtC8jAxE6Y= -----END CERTIFICATE-----Generated at Mon Apr 7 06:42:43 2025 by rpki-client