$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a960d80-b25a-37e6-be11-1e76d52d193c.roa File: 8a960d80-b25a-37e6-be11-1e76d52d193c.roa (raw, json) Hash identifier: yTXUE6TC2Dn+rNpcP36+6uKtD0GEea5uYLExtWpyN8g= Subject key identifier: A9:FD:33:B3:C8:6C:26:FB:21:20:47:51:5F:14:4F:B2:4F:E0:B8:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D76D0517EAA0226DECA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a960d80-b25a-37e6-be11-1e76d52d193c.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33652 IP address blocks: 71.237.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:76:d0:51:7e:aa:02:26:de:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=d1c5def8-b72e-43d2-99ba-15cc221b2e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:a3:45:2e:ec:bb:db:37:fb:26:5a:19:c9: 7b:d9:ae:fd:8a:42:0a:af:60:8b:9d:ce:5a:37:96: ea:0f:87:fb:57:44:55:43:34:3d:20:a3:a6:15:46: f2:13:01:03:5a:a4:20:cf:bd:70:1b:49:65:e7:2a: 54:23:69:ec:87:60:53:0b:f9:7b:cc:77:65:e8:c5: 95:6b:50:34:d5:1f:b4:1d:1e:12:79:4a:ae:5d:54: 90:08:b1:1a:42:7a:25:c1:1f:d9:86:06:6b:4e:34: f9:29:8e:f7:6e:ac:44:f4:5c:8a:6a:ed:fc:4a:c7: 8b:b8:86:1e:04:d6:cc:cb:f1:04:c5:b1:e9:2b:5b: f4:8c:11:a6:31:8f:28:e9:64:7a:a3:88:20:a7:00: 92:1c:5e:2c:d1:44:54:d9:6a:ff:da:68:c6:81:c9: ca:b4:df:38:75:86:76:c0:6e:1c:2b:a9:73:b3:43: 8f:0d:ac:0b:48:91:ee:41:a3:35:70:ab:b8:e9:75: d8:c9:38:94:e8:9c:95:39:b2:76:32:e0:ad:1a:4f: 09:5b:3e:50:e6:22:28:6c:85:b4:76:c3:5e:34:19: 54:af:c1:77:80:98:67:52:3b:e1:a2:91:79:9a:50: 32:6e:a4:6a:26:d7:73:5c:c3:9b:90:f5:38:b8:c0: 16:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FD:33:B3:C8:6C:26:FB:21:20:47:51:5F:14:4F:B2:4F:E0:B8:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a960d80-b25a-37e6-be11-1e76d52d193c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.237.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:80:1c:a9:f0:fb:ab:86:b3:0b:c7:6f:85:8b:fb:01:82:40: 45:f0:c8:5f:1c:36:68:cd:ba:34:69:fa:21:10:99:38:5f:72: ab:54:37:25:f6:74:b3:47:76:84:72:b5:f8:9f:78:d9:12:22: d2:fe:ca:f7:48:a4:c3:4b:53:a7:04:3f:90:66:c0:80:7f:e2: 25:5f:9a:16:00:a9:42:6e:ef:c5:99:2d:c8:99:1c:19:8c:07: 32:c8:b4:3a:78:dc:48:71:4b:b0:6e:7b:42:fb:53:11:d9:c4: 9f:a0:e5:81:70:1e:3d:34:70:89:7e:5a:e0:1e:14:f2:5b:e0: 2e:8f:ac:d3:e5:88:6e:08:0b:47:f1:58:75:f9:fa:35:ef:fb: 3c:7c:83:ff:24:4f:6a:ef:2a:67:8e:d1:37:2e:20:1d:3a:42: 43:de:c2:67:5c:7b:73:7b:d2:cd:25:95:ed:e1:50:71:08:9f: 59:a4:86:b8:7a:5e:a0:78:9c:12:97:f7:fd:62:5e:47:7e:dd: db:79:64:e5:16:a2:2b:9c:b2:e1:43:69:0b:71:a2:56:25:0c: 9b:28:d9:9d:5f:cc:f6:09:ac:1f:93:72:12:78:6c:71:fb:28: 37:49:22:bf:49:49:58:4e:40:b3:b4:01:e9:e6:a7:81:f5:21: 45:ec:2c:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebXbQUX6qAibeyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZDFjNWRlZjgtYjcyZS00M2QyLTk5YmEtMTVjYzIyMWIyZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaajRS7su9s3+yZaGcl72a79ikIKr2CLnc5a N5bqD4f7V0RVQzQ9IKOmFUbyEwEDWqQgz71wG0ll5ypUI2nsh2BTC/l7zHdl6MWV a1A01R+0HR4SeUquXVSQCLEaQnolwR/ZhgZrTjT5KY73bqxE9FyKau38SseLuIYe BNbMy/EExbHpK1v0jBGmMY8o6WR6o4ggpwCSHF4s0URU2Wr/2mjGgcnKtN84dYZ2 wG4cK6lzs0OPDawLSJHuQaM1cKu46XXYyTiU6JyVObJ2MuCtGk8JWz5Q5iIobIW0 dsNeNBlUr8F3gJhnUjvhopF5mlAybqRqJtdzXMObkPU4uMAWcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKn9M7PIbCb7ISBHUV8UT7JP4Lj2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE5NjBkODAtYjI1YS0z N2U2LWJlMTEtMWU3NmQ1MmQxOTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR+0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeAHKnw+6uGswvHb4WL+wGCQEXwyF8cNmjNujRp+iEQmThfcqtUNyX2 dLNHdoRytfifeNkSItL+yvdIpMNLU6cEP5BmwIB/4iVfmhYAqUJu78WZLciZHBmM BzLItDp43EhxS7Bue0L7UxHZxJ+g5YFwHj00cIl+WuAeFPJb4C6PrNPliG4IC0fx WHX5+jXv+zx8g/8kT2rvKmeO0TcuIB06QkPewmdce3N70s0lle3hUHEIn1mkhrh6 XqB4nBKX9/1iXkd+3dt5ZOUWoiucsuFDaQtxolYlDJso2Z1fzPYJrB+TchJ4bHH7 KDdJIr9JSVhOQLO0Aenmp4H1IUXsLGQ= -----END CERTIFICATE-----Generated at Mon Apr 7 03:53:45 2025 by rpki-client