$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9370d49e-1689-363b-9c58-d59daa4c8c6a.roa File: 9370d49e-1689-363b-9c58-d59daa4c8c6a.roa (raw, json) Hash identifier: 2oGZ2Ekyos2VYWVpOfq8ULER14gviOZmQS8xCDr9hBE= Subject key identifier: BC:E7:C2:94:1F:DA:80:56:B3:03:78:CE:65:7F:41:59:3E:BB:F0:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8F6334D841309AAE4DA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9370d49e-1689-363b-9c58-d59daa4c8c6a.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 71.227.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:f6:33:4d:84:13:09:aa:e4:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=0a219ebd-d1c3-42e0-99e2-4ad399977895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:c2:25:73:db:b1:18:ac:df:6b:39:8d:2b: b4:d7:38:23:ee:5c:09:5f:dd:33:c2:a3:93:ef:5b: 80:18:66:5f:a6:5f:e0:d8:2e:f4:90:5a:b0:f8:94: 2c:e6:e0:22:f9:4e:e5:9c:6b:1d:ae:44:cc:48:38: 34:94:e2:88:28:b7:a1:56:12:bf:0e:44:c4:6a:d4: 88:28:02:9e:51:af:92:ac:68:53:89:f3:73:06:bc: fa:94:6e:b5:02:f0:bb:e8:ca:33:93:b0:71:2b:b1: 52:b3:0a:ee:07:6a:c1:55:9e:13:f6:27:1f:87:61: 8b:76:c8:a5:9a:36:87:b0:64:c4:c8:17:97:88:cc: 64:a8:de:0d:9e:dd:07:19:7a:cb:e6:06:6a:c5:40: 3f:b7:76:c6:39:26:5d:45:f7:30:e4:1d:f2:ab:29: fb:a4:85:85:f6:af:92:38:58:56:ef:c3:e1:9f:67: a9:c8:7d:cd:30:ce:21:4d:5f:b2:8b:56:ab:f3:1a: 9d:f6:c6:5c:6c:48:85:a8:a6:cf:04:61:09:cb:56: f2:74:69:72:cb:67:0e:66:92:bb:58:bb:17:de:ce: 77:4a:fd:15:23:36:5e:f9:19:2d:cd:a1:6c:47:2c: 05:6f:57:39:57:81:11:7d:e7:a8:62:32:d0:80:d9: bf:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E7:C2:94:1F:DA:80:56:B3:03:78:CE:65:7F:41:59:3E:BB:F0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9370d49e-1689-363b-9c58-d59daa4c8c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.227.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:1f:09:aa:2c:ff:fb:7c:28:24:50:c3:03:42:9c:53:29:85: 56:1f:f3:9f:db:ea:49:24:de:5b:bd:a6:e9:ad:06:52:33:33: d2:40:1b:59:1f:f8:e2:aa:8b:52:9d:d9:5a:86:73:dd:21:13: 78:fe:32:4c:eb:22:57:3b:58:e4:9a:2f:0d:65:83:89:63:63: 48:67:19:1e:2b:76:1c:f6:9c:88:72:34:6e:12:57:39:15:92: 50:23:6c:dc:0a:40:75:22:59:e2:cb:32:b4:43:7c:99:b0:b4: 3c:14:e9:b7:87:6e:61:a4:62:67:9c:a1:ab:e4:f1:4a:43:af: 59:18:35:2a:e9:6e:0a:ba:c2:0f:77:4e:08:75:00:f7:eb:ca: 69:e3:8d:1a:85:28:8f:3a:30:3c:5e:d1:84:dc:31:d8:e5:80: d5:75:8c:33:8c:db:18:28:d0:ff:fa:22:63:00:0c:0e:b8:38: b6:c2:57:c4:a2:a5:22:1a:8f:09:34:32:1d:a6:50:9c:7a:14: b3:cd:fe:7c:92:cb:c6:65:ca:66:87:6c:d2:d5:ab:2f:d3:f1: 16:5f:dc:d0:66:02:fb:7c:3f:38:e7:07:3c:aa:68:8d:3c:09: ba:ce:ff:0e:67:42:3e:5d:28:4c:fc:f3:10:07:59:f9:1d:9b: fd:8e:df:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+PYzTYQTCark2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MGEyMTllYmQtZDFjMy00MmUwLTk5ZTItNGFkMzk5OTc3ODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+bCJXPbsRis32s5jSu01zgj7lwJX90zwqOT 71uAGGZfpl/g2C70kFqw+JQs5uAi+U7lnGsdrkTMSDg0lOKIKLehVhK/DkTEatSI KAKeUa+SrGhTifNzBrz6lG61AvC76Mozk7BxK7FSswruB2rBVZ4T9icfh2GLdsil mjaHsGTEyBeXiMxkqN4Nnt0HGXrL5gZqxUA/t3bGOSZdRfcw5B3yqyn7pIWF9q+S OFhW78Phn2epyH3NMM4hTV+yi1ar8xqd9sZcbEiFqKbPBGEJy1bydGlyy2cOZpK7 WLsX3s53Sv0VIzZe+RktzaFsRywFb1c5V4ERfeeoYjLQgNm/HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLznwpQf2oBWswN4zmV/QVk+u/DQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTM3MGQ0OWUtMTY4OS0z NjNiLTljNTgtZDU5ZGFhNGM4YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+NgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgfCaos//t8KCRQwwNCnFMphVYf85/b6kkk3lu9pumtBlIzM9JAG1kf +OKqi1Kd2VqGc90hE3j+MkzrIlc7WOSaLw1lg4ljY0hnGR4rdhz2nIhyNG4SVzkV klAjbNwKQHUiWeLLMrRDfJmwtDwU6beHbmGkYmecoavk8UpDr1kYNSrpbgq6wg93 Tgh1APfrymnjjRqFKI86MDxe0YTcMdjlgNV1jDOM2xgo0P/6ImMADA64OLbCV8Si pSIajwk0Mh2mUJx6FLPN/nySy8ZlymaHbNLVqy/T8RZf3NBmAvt8PzjnBzyqaI08 CbrO/w5nQj5dKEz88xAHWfkdm/2O388= -----END CERTIFICATE-----Generated at Mon Apr 7 06:15:27 2025 by rpki-client