$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99dc2bec-147a-3ad4-a102-099edf063898.roa File: 99dc2bec-147a-3ad4-a102-099edf063898.roa (raw, json) Hash identifier: 6Jtw2SEMpKAE7sxQ1ab1UO0uB2SejZoLfWAP9E+5Q9k= Subject key identifier: A6:ED:F5:9B:43:18:90:B7:0D:57:B1:11:69:49:FB:D6:60:03:37:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C4D4157293C7599CB81C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99dc2bec-147a-3ad4-a102-099edf063898.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 71.195.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:4d:41:57:29:3c:75:99:cb:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=21e34a81-a1e8-4ed8-a33a-6b02d608ac8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:17:b5:b9:a9:1d:64:6c:95:eb:9c:a6:ee:ee: 8e:79:b4:db:2b:15:73:2c:e1:c1:5f:f9:c6:db:e1: 09:a8:a2:3f:cc:47:4f:5b:a5:c2:29:24:5a:2e:f4: 1c:86:97:d6:78:b0:d4:a7:85:f6:4c:1a:1f:f3:53: 2f:6c:14:1b:a1:15:e1:c0:8d:d2:e2:bb:12:8b:ff: 83:09:49:40:13:3a:34:3d:39:cb:3f:80:da:9b:20: 0c:fe:29:ef:7b:e9:69:de:9f:dc:d5:35:44:ed:e2: b7:4c:2c:7a:fd:87:71:0e:6b:65:7a:a6:73:ec:e2: f9:2c:0d:d4:aa:63:91:3a:b8:61:c3:64:18:0e:ba: b3:2a:74:c2:e0:fa:9c:e0:0b:c1:4f:50:d9:9a:6f: dd:a4:f7:89:31:1e:b6:1b:d0:27:1b:37:ed:90:0a: 64:41:93:8e:b4:b8:80:46:cb:08:09:9b:d8:33:c3: ac:36:5d:dc:06:e0:9a:a6:1e:a9:04:c3:f3:97:0a: e4:7e:95:41:92:06:f2:2f:71:f0:7d:a6:7e:19:d3: 62:c9:fb:28:a8:1a:55:2b:cb:ac:75:8e:18:74:de: c7:28:22:0d:a1:83:c2:d4:8e:15:81:ba:84:0b:1c: 2b:bd:25:ae:e3:3c:97:34:49:be:99:d4:43:89:53: 50:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:ED:F5:9B:43:18:90:B7:0D:57:B1:11:69:49:FB:D6:60:03:37:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99dc2bec-147a-3ad4-a102-099edf063898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.195.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:34:c1:1d:a2:10:90:19:5b:34:06:2f:fc:99:a3:ec:68:ec: df:ae:48:1f:2f:5f:22:32:8f:ae:9d:9f:e6:0e:64:89:dc:99: e5:61:d0:46:3d:00:0f:f7:7e:f6:1c:aa:34:cd:ed:ff:9d:c8: 58:86:41:29:3d:f0:9a:80:3c:92:b4:5a:35:a5:64:33:c7:36: 56:ed:58:a5:39:ed:a9:7c:25:57:7b:20:31:b5:8c:03:c8:ee: f4:27:a4:d6:44:46:4d:a9:43:8d:85:9e:61:5d:01:0d:0d:50: ce:8b:6e:0d:f2:1f:1d:05:7c:67:da:80:40:4a:c9:36:61:73: 0a:8c:a6:8f:c5:92:ce:46:8e:72:54:36:3a:ac:62:5c:d9:bd: 97:b5:26:6c:fb:4f:12:2c:65:4b:3d:67:b6:27:eb:21:a8:4e: 74:63:72:7d:ef:18:82:ee:1d:27:3f:cc:8e:19:93:9a:da:a3: 98:85:72:95:b9:77:98:5e:22:41:00:74:d1:4f:2f:6a:76:36: 81:9a:a1:21:2a:db:9d:d6:fe:7e:35:91:e6:f1:01:bd:53:a4: ca:86:99:bd:28:c6:68:68:f8:40:72:0a:2d:8a:04:f1:92:02: a4:2f:59:49:0a:9f:cb:e2:d6:aa:f7:18:6e:38:f3:85:20:13: b6:f5:8e:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebE1BVyk8dZnLgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MjFlMzRhODEtYTFlOC00ZWQ4LWEzM2EtNmIwMmQ2MDhhYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBe1uakdZGyV65ym7u6OebTbKxVzLOHBX/nG 2+EJqKI/zEdPW6XCKSRaLvQchpfWeLDUp4X2TBof81MvbBQboRXhwI3S4rsSi/+D CUlAEzo0PTnLP4DamyAM/inve+lp3p/c1TVE7eK3TCx6/YdxDmtleqZz7OL5LA3U qmOROrhhw2QYDrqzKnTC4Pqc4AvBT1DZmm/dpPeJMR62G9AnGzftkApkQZOOtLiA RssICZvYM8OsNl3cBuCaph6pBMPzlwrkfpVBkgbyL3HwfaZ+GdNiyfsoqBpVK8us dY4YdN7HKCINoYPC1I4VgbqECxwrvSWu4zyXNEm+mdRDiVNQyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbt9ZtDGJC3DVexEWlJ+9ZgAzf9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTlkYzJiZWMtMTQ3YS0z YWQ0LWExMDItMDk5ZWRmMDYzODk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8MUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA80wR2iEJAZWzQGL/yZo+xo7N+uSB8vXyIyj66dn+YOZIncmeVh0EY9 AA/3fvYcqjTN7f+dyFiGQSk98JqAPJK0WjWlZDPHNlbtWKU57al8JVd7IDG1jAPI 7vQnpNZERk2pQ42FnmFdAQ0NUM6Lbg3yHx0FfGfagEBKyTZhcwqMpo/Fks5GjnJU NjqsYlzZvZe1Jmz7TxIsZUs9Z7Yn6yGoTnRjcn3vGILuHSc/zI4Zk5rao5iFcpW5 d5heIkEAdNFPL2p2NoGaoSEq253W/n41kebxAb1TpMqGmb0oxmho+EByCi2KBPGS AqQvWUkKn8vi1qr3GG4484UgE7b1jqg= -----END CERTIFICATE-----Generated at Mon Apr 7 09:38:56 2025 by rpki-client