$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e7f1a1-f6ea-3108-b01d-b1bb78399589.roa File: 88e7f1a1-f6ea-3108-b01d-b1bb78399589.roa (raw, json) Hash identifier: 2ADmQS/kxViktZAPbx+s9zopZ9O5V8qvIej3tQMvb5Q= Subject key identifier: 67:45:11:76:0C:14:7D:F1:71:8A:F1:2C:C6:F9:59:0D:6F:1A:DC:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB095F6E42D13A3010BFC30 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e7f1a1-f6ea-3108-b01d-b1bb78399589.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 71.225.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:95:f6:e4:2d:13:a3:01:0b:fc:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=e7ae2b09-b35f-4c3b-baa3-cba7d9b65637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:81:e3:c7:10:34:e1:1c:ac:a3:0a:e1:e0:dd: f7:ed:32:dc:00:40:a2:54:5c:ee:89:dd:87:15:cd: 47:8d:bb:19:a3:4b:76:1b:0c:b6:e6:c5:59:2a:51: 82:44:ea:b2:11:3a:0f:e2:02:ac:9c:76:92:d9:67: 55:b5:fb:9d:42:6d:6e:6a:1d:ae:21:10:2d:84:a7: d2:d1:ab:8a:c1:24:fd:63:8c:ae:03:3b:23:7f:8b: 08:c1:16:53:36:8a:07:bf:5c:ed:73:cf:60:24:72: 11:f7:06:43:d4:92:66:ec:b2:a2:e7:db:a5:ec:59: ab:67:c9:06:a2:95:ff:aa:c7:38:d2:b7:c3:70:71: ea:8f:17:c7:2e:79:53:43:d5:1d:98:37:74:c6:ab: 41:15:7e:36:db:e7:85:5f:04:d4:e7:e9:b9:12:ff: 49:f2:65:89:1a:2d:26:0f:ad:ac:be:f9:7a:2d:63: 61:33:e9:40:64:f4:b1:31:ea:02:95:90:e5:cc:59: 71:18:0f:02:d9:28:db:e1:26:9a:0f:4a:e3:1e:02: 06:1c:1b:40:09:38:0d:a8:19:90:98:30:10:5e:6e: 77:83:89:b6:7f:f6:c8:9f:32:40:a1:1f:25:8c:0d: 5d:dc:8e:71:68:c5:a6:42:8f:70:57:f1:21:5e:ac: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:45:11:76:0C:14:7D:F1:71:8A:F1:2C:C6:F9:59:0D:6F:1A:DC:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88e7f1a1-f6ea-3108-b01d-b1bb78399589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:f2:d2:aa:a1:e2:00:05:95:df:29:4b:44:7d:89:a8:02:cc: a4:31:a1:12:1f:0e:36:fc:e0:6f:85:a1:90:ad:d4:20:7d:22: c6:72:90:f5:b9:dd:9e:5f:16:06:e3:c2:9a:85:78:eb:4e:e0: d7:2e:81:4b:43:a4:43:11:83:27:0c:2e:ee:68:bb:88:ba:e8: 17:19:fa:02:52:1a:fe:70:50:ad:a5:54:ae:87:c8:b8:cc:3f: 3c:fd:be:08:78:09:ee:03:0a:90:9e:09:9e:64:fd:d3:83:c6: df:4c:b7:c6:12:39:d5:0f:8b:a1:01:b9:50:15:96:3a:df:4f: e2:ec:4e:3c:7a:d8:00:c2:c9:b7:58:76:04:e6:df:c1:e6:de: 02:e4:bb:0d:4c:75:40:1f:21:a8:36:4d:cb:23:cf:5f:31:3b: 04:06:bc:7a:ab:c8:24:60:af:14:b5:1b:4c:64:a1:40:16:37: 8d:56:6c:2e:24:97:4e:a5:61:1e:f5:ea:73:0f:15:a9:5a:2f: ba:de:be:fe:7d:cc:d3:67:79:b1:7c:90:99:0b:01:c9:3a:7e: a1:24:d3:93:43:92:39:3d:df:f4:40:3b:05:f8:e6:38:c1:39: 04:8c:fb:80:af:2a:81:17:d1:43:55:7e:55:27:65:cb:59:ea: bf:83:a7:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssJX25C0TowEL/DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTdhZTJiMDktYjM1Zi00YzNiLWJhYTMtY2JhN2Q5YjY1NjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioHjxxA04Rysowrh4N337TLcAECiVFzuid2H Fc1HjbsZo0t2Gwy25sVZKlGCROqyEToP4gKsnHaS2WdVtfudQm1uah2uIRAthKfS 0auKwST9Y4yuAzsjf4sIwRZTNooHv1ztc89gJHIR9wZD1JJm7LKi59ul7FmrZ8kG opX/qsc40rfDcHHqjxfHLnlTQ9UdmDd0xqtBFX422+eFXwTU5+m5Ev9J8mWJGi0m D62svvl6LWNhM+lAZPSxMeoClZDlzFlxGA8C2Sjb4SaaD0rjHgIGHBtACTgNqBmQ mDAQXm53g4m2f/bInzJAoR8ljA1d3I5xaMWmQo9wV/EhXqxsbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdFEXYMFH3xcYrxLMb5WQ1vGty3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODhlN2YxYTEtZjZlYS0z MTA4LWIwMWQtYjFiYjc4Mzk5NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+HgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM3y0qqh4gAFld8pS0R9iagCzKQxoRIfDjb84G+FoZCt1CB9IsZykPW5 3Z5fFgbjwpqFeOtO4NcugUtDpEMRgycMLu5ou4i66BcZ+gJSGv5wUK2lVK6HyLjM Pzz9vgh4Ce4DCpCeCZ5k/dODxt9Mt8YSOdUPi6EBuVAVljrfT+LsTjx62ADCybdY dgTm38Hm3gLkuw1MdUAfIag2Tcsjz18xOwQGvHqryCRgrxS1G0xkoUAWN41WbC4k l06lYR716nMPFalaL7revv59zNNnebF8kJkLAck6fqEk05NDkjk93/RAOwX45jjB OQSM+4CvKoEX0UNVflUnZctZ6r+Dp3I= -----END CERTIFICATE-----Generated at Sun Apr 6 17:11:16 2025 by rpki-client