$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86f5656a-cafc-38ae-b0d6-dee9a612336a.roa File: 86f5656a-cafc-38ae-b0d6-dee9a612336a.roa (raw, json) Hash identifier: DB6S131Lsf999xwkd5BPhPF4/RzyQXpfI1B243jbzTU= Subject key identifier: 6A:94:29:41:8D:81:E3:E1:7C:E4:78:45:5E:9C:38:AF:37:92:0E:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0960E3FBAB9C0B42DC880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86f5656a-cafc-38ae-b0d6-dee9a612336a.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 71.225.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:96:0e:3f:ba:b9:c0:b4:2d:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=cb263cf3-2293-4504-a973-bc30270022f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:35:77:28:54:ab:8b:7c:11:20:27:d5:ff:12: 34:b9:94:1d:86:8f:44:d0:aa:e9:63:e5:c7:46:a1: 66:bf:e0:a6:a2:ce:df:63:be:0a:97:5d:4d:ae:c0: 72:a4:47:a5:5a:86:2a:cf:5e:72:e1:cb:d6:ad:55: 46:6f:9c:11:39:cc:7c:6b:5a:47:96:38:86:d2:24: 5d:61:fe:09:e1:8c:d9:8f:d1:3a:14:bf:00:81:1b: 87:89:60:98:f5:78:dc:ac:58:5f:18:d1:2c:40:80: ab:cf:ba:c5:31:f5:d4:63:9b:40:b1:f5:02:3f:f8: 66:08:d1:b9:c3:9c:4d:c4:d6:4a:82:25:b9:05:4c: dd:6c:fb:9f:76:ca:35:a7:98:95:2c:36:64:4b:32: 9a:06:86:c9:08:5b:79:74:5d:d0:16:a3:ec:24:19: 8d:76:16:86:e3:98:db:1e:ea:09:dd:bb:34:ed:4d: 60:d2:ac:b7:02:75:cb:9a:30:00:36:3a:ea:21:e8: 57:78:93:6d:a3:e3:73:7a:2b:71:de:bd:be:d3:21: f9:06:a4:81:66:68:7c:99:2a:43:5d:a6:35:49:a9: 23:6c:5f:4e:08:b8:05:1f:39:1d:86:44:ff:32:80: 4e:a2:06:a8:61:26:5f:07:5f:69:4c:16:4d:8e:b4: 10:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:94:29:41:8D:81:E3:E1:7C:E4:78:45:5E:9C:38:AF:37:92:0E:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86f5656a-cafc-38ae-b0d6-dee9a612336a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:45:c6:21:17:2d:14:3c:8d:b0:3c:a1:b3:d1:ec:f2:35:a8: 97:8f:f9:89:22:a6:cc:c0:66:5e:33:83:31:10:12:96:c9:65: 87:86:35:15:4e:7c:85:3d:a2:f1:da:3c:dc:a4:a0:e0:db:50: a0:79:86:f7:71:cc:b5:27:bc:4c:b0:53:94:0b:3b:a0:f0:6e: c1:fe:19:47:8c:f9:ea:bf:02:3b:57:52:9a:ed:41:58:b0:47: 03:fa:dd:4f:8c:5a:bc:7b:5c:36:09:24:0c:67:d7:9e:d9:90: ad:bc:c4:c9:52:93:42:5e:d3:32:a4:4c:7f:60:a6:d1:e3:2f: a7:6b:54:3b:0f:cc:9c:f2:d1:f1:6d:d6:09:4f:2d:8f:80:27: 0f:c1:85:29:84:b6:54:41:da:e5:e9:e0:d6:ca:38:a8:24:44: fb:da:b2:7a:61:66:67:94:b3:66:89:cd:d2:20:3f:ea:bb:7c: c8:04:74:68:86:24:08:5e:bc:19:39:2a:58:18:1b:ad:48:c7: c9:a8:cc:dd:83:33:29:d9:80:af:4d:ff:6f:e8:89:4f:9d:2b: 1a:b5:a7:5e:d6:53:5f:d7:0b:cc:d9:f1:82:63:58:2a:b0:89: 98:74:90:d9:bd:fd:ad:57:4c:ab:ae:7e:28:82:eb:b8:92:d1: 92:55:04:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssJYOP7q5wLQtyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk Y2IyNjNjZjMtMjI5My00NTA0LWE5NzMtYmMzMDI3MDAyMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzV3KFSri3wRICfV/xI0uZQdho9E0KrpY+XH RqFmv+Cmos7fY74Kl11NrsBypEelWoYqz15y4cvWrVVGb5wROcx8a1pHljiG0iRd Yf4J4YzZj9E6FL8AgRuHiWCY9XjcrFhfGNEsQICrz7rFMfXUY5tAsfUCP/hmCNG5 w5xNxNZKgiW5BUzdbPufdso1p5iVLDZkSzKaBobJCFt5dF3QFqPsJBmNdhaG45jb HuoJ3bs07U1g0qy3AnXLmjAANjrqIehXeJNto+Nzeitx3r2+0yH5BqSBZmh8mSpD XaY1SakjbF9OCLgFHzkdhkT/MoBOogaoYSZfB19pTBZNjrQQCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqUKUGNgePhfOR4RV6cOK83kg7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODZmNTY1NmEtY2FmYy0z OGFlLWIwZDYtZGVlOWE2MTIzMzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+HwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJFxiEXLRQ8jbA8obPR7PI1qJeP+YkipszAZl4zgzEQEpbJZYeGNRVO fIU9ovHaPNykoODbUKB5hvdxzLUnvEywU5QLO6DwbsH+GUeM+eq/AjtXUprtQViw RwP63U+MWrx7XDYJJAxn157ZkK28xMlSk0Je0zKkTH9gptHjL6drVDsPzJzy0fFt 1glPLY+AJw/BhSmEtlRB2uXp4NbKOKgkRPvasnphZmeUs2aJzdIgP+q7fMgEdGiG JAhevBk5KlgYG61Ix8mozN2DMynZgK9N/2/oiU+dKxq1p17WU1/XC8zZ8YJjWCqw iZh0kNm9/a1XTKuufiiC67iS0ZJVBM0= -----END CERTIFICATE-----Generated at Sun Apr 6 20:42:02 2025 by rpki-client