$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c6eed2f-ced4-32c3-bb09-a0dc0b8196d9.roa File: 8c6eed2f-ced4-32c3-bb09-a0dc0b8196d9.roa (raw, json) Hash identifier: Bu/K3zMm7Sf+jEH9iBuuvN4kSyIYqzJTqsf0RnUpncE= Subject key identifier: 9F:E5:37:60:13:95:2A:FC:BB:D7:08:82:5B:01:64:92:F4:AE:30:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F829EFAE306F3BE9176200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c6eed2f-ced4-32c3-bb09-a0dc0b8196d9.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 71.236.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:29:ef:ae:30:6f:3b:e9:17:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=c5554a72-3873-4df3-8b82-053ffffb482e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:00:07:97:ed:31:18:c0:f1:b4:11:a1:5c:ee: 92:43:32:b0:fd:ac:5b:47:3e:8a:be:0a:50:5b:b0: c8:b7:e2:ef:7c:62:45:54:c4:3f:07:f9:2a:52:d2: 0d:f4:e7:71:e4:b3:34:08:e4:21:ba:16:ae:5f:90: be:9f:21:38:2c:5a:a2:56:d6:ad:4b:f5:08:1b:48: 00:21:47:53:9c:ac:2d:05:8e:ed:41:08:0b:7c:6d: e5:03:3c:43:22:85:0a:af:98:22:2a:68:e2:3d:b8: 7f:64:09:68:c6:6d:ee:ab:41:12:a1:12:e4:93:4a: 96:7a:be:65:3f:64:74:28:1f:9f:2a:7b:e0:7a:c3: dd:9e:a7:ea:d9:cd:5b:3a:09:42:51:64:56:70:bf: d3:69:b1:fc:10:46:e3:53:63:29:a1:34:c9:67:7e: 50:e4:e9:e5:07:14:1f:7b:a5:3b:85:a7:5b:3e:c1: 06:59:55:71:30:8f:02:ce:79:1d:4c:55:37:5b:fc: 21:51:03:c8:bb:17:ee:d9:fb:57:d5:75:c2:d8:41: 55:d4:2e:69:41:d4:04:1e:9a:0c:8a:5d:32:ff:d0: 67:ab:c7:6d:a4:fd:81:c2:f4:7d:07:79:5b:e7:e6: ea:45:ca:a1:8a:1c:11:4c:ea:d9:05:10:95:1a:5e: fb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E5:37:60:13:95:2A:FC:BB:D7:08:82:5B:01:64:92:F4:AE:30:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c6eed2f-ced4-32c3-bb09-a0dc0b8196d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.236.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:dd:cf:a8:5e:25:81:e2:16:bd:27:13:1d:1d:79:af:24:ee: fa:89:70:0d:a8:40:d3:1e:08:4b:86:6c:cb:8b:32:4f:32:97: 5c:63:b2:0e:40:75:fd:24:e2:05:e6:a7:02:e2:7f:d7:ac:92: e0:94:b9:02:7e:71:0a:12:d7:6d:7a:e4:f8:cb:ea:94:e6:42: 33:99:ed:ba:27:c1:ea:dd:85:a6:1d:0c:42:e3:d2:0b:3e:33: 34:8e:05:87:ed:a0:ce:bd:99:0e:3b:44:64:a5:d3:91:d0:6a: fc:1f:14:f2:58:4e:af:dd:26:ac:82:76:c5:c0:7c:2d:bf:93: a6:43:9b:ef:62:c5:31:6c:72:bb:a9:cc:05:71:bb:a2:ef:78: 8d:20:18:37:1e:97:03:ee:e2:d3:78:a9:5b:55:4f:5d:60:0a: 2f:8c:31:94:de:1e:98:b5:87:f9:74:06:4e:72:5d:7b:75:6c: 7b:d6:55:12:b9:36:f5:c5:2d:d8:cc:7f:52:1b:f7:9a:18:8d: 88:78:ac:3c:c8:ad:b9:3b:ca:48:84:c5:26:a5:6b:77:b1:22: 48:e1:8c:9b:2d:6f:e2:4d:55:ac:3e:cd:92:01:09:cd:11:9b: c0:e7:89:a9:85:18:63:d7:84:94:7a:7b:a1:6e:e4:92:fb:1d: 7e:d8:03:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+CnvrjBvO+kXYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YzU1NTRhNzItMzg3My00ZGYzLThiODItMDUzZmZmZmI0ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwAHl+0xGMDxtBGhXO6SQzKw/axbRz6KvgpQ W7DIt+LvfGJFVMQ/B/kqUtIN9Odx5LM0COQhuhauX5C+nyE4LFqiVtatS/UIG0gA IUdTnKwtBY7tQQgLfG3lAzxDIoUKr5giKmjiPbh/ZAloxm3uq0ESoRLkk0qWer5l P2R0KB+fKnvgesPdnqfq2c1bOglCUWRWcL/TabH8EEbjU2MpoTTJZ35Q5OnlBxQf e6U7hadbPsEGWVVxMI8CznkdTFU3W/whUQPIuxfu2ftX1XXC2EFV1C5pQdQEHpoM il0y/9Bnq8dtpP2BwvR9B3lb5+bqRcqhihwRTOrZBRCVGl77uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/lN2ATlSr8u9cIglsBZJL0rjBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM2ZWVkMmYtY2VkNC0z MmMzLWJiMDktYTBkYzBiODE5NmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+z0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADndz6heJYHiFr0nEx0dea8k7vqJcA2oQNMeCEuGbMuLMk8yl1xjsg5A df0k4gXmpwLif9eskuCUuQJ+cQoS12165PjL6pTmQjOZ7bonwerdhaYdDELj0gs+ MzSOBYftoM69mQ47RGSl05HQavwfFPJYTq/dJqyCdsXAfC2/k6ZDm+9ixTFscrup zAVxu6LveI0gGDcelwPu4tN4qVtVT11gCi+MMZTeHpi1h/l0Bk5yXXt1bHvWVRK5 NvXFLdjMf1Ib95oYjYh4rDzIrbk7ykiExSala3exIkjhjJstb+JNVaw+zZIBCc0R m8DniamFGGPXhJR6e6Fu5JL7HX7YA/Q= -----END CERTIFICATE-----Generated at Mon Apr 7 06:10:14 2025 by rpki-client