$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e25db1f-dc93-39a7-92ee-f49b241dbd3e.roa File: 8e25db1f-dc93-39a7-92ee-f49b241dbd3e.roa (raw, json) Hash identifier: kQpMMdN0tyXwmFrV/CYrVX50AI0LDLeSsHAHuihy5So= Subject key identifier: 76:E2:7E:F0:11:F4:48:68:7B:50:73:CB:2A:6D:98:B4:89:E2:68:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F90E6FA9C91E20B67DA680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e25db1f-dc93-39a7-92ee-f49b241dbd3e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 174.170.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:0e:6f:a9:c9:1e:20:b6:7d:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=6251d1e4-0e2f-4bcc-bb60-3be99ed3fc0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e1:11:dc:bf:1a:59:e6:d9:7a:69:fa:a5:3f: 8c:a3:96:b6:f2:87:59:c7:a6:5c:58:ef:80:d1:28: 12:64:04:0d:9e:9d:91:2c:d6:ab:53:3f:75:59:ae: 6c:0b:fd:70:20:c8:7c:3a:06:c7:88:a2:59:bc:32: dd:12:69:39:a0:28:2f:b5:af:af:41:93:83:12:f8: 4b:e3:20:d1:5f:a9:2f:e7:f2:c1:93:7a:f1:96:6d: ff:b3:97:44:bf:a1:4e:29:c2:21:47:1f:34:e6:2f: a2:c2:49:25:39:ee:be:97:20:ec:ed:15:1e:a7:ca: 72:98:6c:ae:6a:a5:45:12:71:50:c8:d9:cf:77:c2: ea:5d:7e:19:f9:92:b5:a8:c1:bf:6c:87:a8:5d:14: c9:51:b9:81:64:6c:03:0e:c4:71:49:89:b8:b7:2e: f2:67:55:c7:12:c3:d3:ae:13:0c:90:f3:23:85:a9: 83:c7:b8:78:49:2d:44:0e:01:36:bf:0d:b7:cf:7d: 3c:5b:2d:d4:f9:9b:c8:1e:6d:26:33:55:a9:ab:0e: 82:19:f4:23:52:a9:0a:9b:dd:31:e6:b8:91:af:50: eb:7d:5c:da:d4:a4:79:91:f5:5a:89:ea:30:37:07: 77:c4:a0:e1:e2:47:ef:3b:3a:e8:55:0c:4e:08:1e: 24:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E2:7E:F0:11:F4:48:68:7B:50:73:CB:2A:6D:98:B4:89:E2:68:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e25db1f-dc93-39a7-92ee-f49b241dbd3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:5e:02:16:df:6d:c0:df:b9:f7:68:36:62:9c:70:0f:de:66: 13:6c:c9:41:fd:f0:2e:2c:f6:f9:3a:66:c2:11:a8:f1:eb:fc: 13:72:2c:9d:dc:4a:63:57:8b:fb:c7:79:e0:5a:42:51:23:28: bb:d2:e0:90:ac:16:66:d7:53:5f:df:8f:71:9a:9b:b0:30:5f: 4c:1b:61:a1:a6:a8:24:33:35:80:c2:f3:8d:a3:49:76:f4:41: d3:ae:75:41:1d:47:b4:d6:31:53:44:a7:c1:06:3d:08:ef:ed: 7b:86:b1:1d:35:3c:ed:81:03:ca:8a:38:03:e4:01:da:ed:d9: 21:3e:24:66:5f:41:61:c6:f9:68:9c:25:e7:05:97:a3:7b:00: 8d:db:01:c7:6f:93:db:70:89:1f:a0:58:52:dc:d6:12:c0:01: bd:06:b2:8b:3d:01:6f:29:33:64:ee:24:08:cc:bd:05:af:95: dd:df:ef:cb:3c:e8:06:20:20:7d:f6:a6:04:6b:97:75:00:b7: 96:9e:7b:1e:d9:90:11:76:07:e1:32:e7:14:35:b5:f0:aa:b0: e2:fb:4b:a6:e6:1b:4e:78:bc:6b:e6:e6:98:90:71:f8:dc:7a: 88:77:33:45:a6:b0:52:18:b1:7a:af:75:95:45:ba:3a:d1:5a: 77:f9:0d:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Q5vqckeILZ9poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NjI1MWQxZTQtMGUyZi00YmNjLWJiNjAtM2JlOTllZDNmYzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeER3L8aWebZemn6pT+Mo5a28odZx6ZcWO+A 0SgSZAQNnp2RLNarUz91Wa5sC/1wIMh8OgbHiKJZvDLdEmk5oCgvta+vQZODEvhL 4yDRX6kv5/LBk3rxlm3/s5dEv6FOKcIhRx805i+iwkklOe6+lyDs7RUep8pymGyu aqVFEnFQyNnPd8LqXX4Z+ZK1qMG/bIeoXRTJUbmBZGwDDsRxSYm4ty7yZ1XHEsPT rhMMkPMjhamDx7h4SS1EDgE2vw23z308Wy3U+ZvIHm0mM1Wpqw6CGfQjUqkKm90x 5riRr1DrfVza1KR5kfVaieowNwd3xKDh4kfvOzroVQxOCB4kWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbifvAR9Ehoe1BzyyptmLSJ4mhNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGUyNWRiMWYtZGM5My0z OWE3LTkyZWUtZjQ5YjI0MWRiZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqrQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVeAhbfbcDfufdoNmKccA/eZhNsyUH98C4s9vk6ZsIRqPHr/BNyLJ3c SmNXi/vHeeBaQlEjKLvS4JCsFmbXU1/fj3Gam7AwX0wbYaGmqCQzNYDC842jSXb0 QdOudUEdR7TWMVNEp8EGPQjv7XuGsR01PO2BA8qKOAPkAdrt2SE+JGZfQWHG+Wic JecFl6N7AI3bAcdvk9twiR+gWFLc1hLAAb0Gsos9AW8pM2TuJAjMvQWvld3f78s8 6AYgIH32pgRrl3UAt5aeex7ZkBF2B+Ey5xQ1tfCqsOL7S6bmG054vGvm5piQcfjc eoh3M0WmsFIYsXqvdZVFujrRWnf5DQs= -----END CERTIFICATE-----Generated at Mon Apr 7 06:17:33 2025 by rpki-client