$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a15ac79b-1b3e-31c0-a294-dee0eb22f112.roa File: a15ac79b-1b3e-31c0-a294-dee0eb22f112.roa (raw, json) Hash identifier: HnzSgWETw4hA/mxEllwoItv6l23/EjhVLWCxf3GJp2Y= Subject key identifier: B1:98:78:8B:7C:70:65:F6:28:CE:8C:8A:39:F5:9B:42:E7:66:F3:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C9A7D8D91E42938E0DC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a15ac79b-1b3e-31c0-a294-dee0eb22f112.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 71.204.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:9a:7d:8d:91:e4:29:38:e0:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=fe10f982-1f2a-400d-824e-54bf9f881848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:17:65:5b:79:ce:f4:96:96:e3:f6:4f:d1:39: ab:80:85:c7:ea:2f:74:e8:39:4f:14:f9:d7:36:44: 68:8a:99:74:a1:09:56:5b:69:6c:e5:f7:30:cd:a7: 89:39:ba:ee:d2:b0:7e:69:11:a2:f7:79:71:45:75: a3:78:0b:e6:4b:ff:50:e7:da:d2:ce:ca:3e:d7:19: 34:c6:fa:d6:9d:95:98:53:fc:2f:f6:69:17:2c:56: 14:51:0b:8e:ad:13:29:fe:84:12:a0:95:93:7b:6d: 4b:fa:94:05:82:46:73:54:0e:59:ae:85:b5:c4:23: ab:65:02:be:a8:ec:d7:99:a7:b4:a7:5b:37:34:6e: 39:e1:d7:7a:88:f5:3e:b6:08:aa:97:3c:59:83:a8: 46:30:87:15:75:5b:23:e1:91:b7:59:69:ed:40:b0: 69:d1:9f:85:4b:eb:d7:37:34:75:13:39:04:a5:7b: 64:ba:2e:4b:95:be:82:b5:d6:4f:cb:b6:ac:6c:d8: f1:54:de:41:e4:02:b3:bf:9c:18:55:2c:b8:15:99: 76:3f:0d:8d:82:f0:ba:cd:33:a2:d7:42:fd:f6:f4: b8:79:ce:1d:fd:64:03:64:16:4a:82:f6:d3:02:42: 54:11:8b:b8:f8:13:8b:6c:d1:cf:87:05:b2:de:02: 86:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:98:78:8B:7C:70:65:F6:28:CE:8C:8A:39:F5:9B:42:E7:66:F3:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a15ac79b-1b3e-31c0-a294-dee0eb22f112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:86:10:d9:c7:cd:19:74:c4:cf:31:94:b4:61:2c:ab:95:0f: fc:48:49:62:f0:a8:c9:a8:3b:4b:ef:81:cd:0b:57:13:2e:7d: a0:64:ae:59:ff:e0:e1:05:0c:a6:f3:05:8d:11:41:df:28:5d: cd:20:4d:35:3a:c2:a3:76:e4:a2:41:11:a0:7a:05:25:f3:30: aa:c1:bc:f8:e6:f2:6f:f4:2d:5e:87:53:cd:f0:14:46:d5:bf: be:28:98:ed:cf:66:13:76:b8:46:5c:b2:5f:8b:dd:a1:b1:aa: df:53:6a:ae:25:24:2f:46:f7:fd:52:ea:61:12:e8:da:b0:0b: 4f:08:a6:38:33:39:4d:e1:a1:4b:2e:6a:1e:64:0a:c1:77:db: 2e:0c:58:07:07:bf:81:14:66:7a:03:dc:55:0a:9a:1f:1b:4a: 6c:dc:11:12:d3:73:b1:8c:95:0a:e3:a6:01:5a:38:4f:66:12: 79:74:6b:59:63:c9:83:73:7b:05:c4:24:53:ce:55:d3:42:37: f6:12:65:e0:78:09:b0:c7:da:21:5a:d2:06:64:ff:55:6c:e1: c2:fa:40:88:3a:84:d7:2d:86:70:09:49:f3:c9:f8:ac:7d:af: f7:c2:0a:92:00:ac:03:96:84:fd:34:31:b7:ec:6b:54:a8:9c: ed:ce:1d:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPJp9jZHkKTjg3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk ZmUxMGY5ODItMWYyYS00MDBkLTgyNGUtNTRiZjlmODgxODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxdlW3nO9JaW4/ZP0TmrgIXH6i906DlPFPnX NkRoipl0oQlWW2ls5fcwzaeJObru0rB+aRGi93lxRXWjeAvmS/9Q59rSzso+1xk0 xvrWnZWYU/wv9mkXLFYUUQuOrRMp/oQSoJWTe21L+pQFgkZzVA5ZroW1xCOrZQK+ qOzXmae0p1s3NG454dd6iPU+tgiqlzxZg6hGMIcVdVsj4ZG3WWntQLBp0Z+FS+vX NzR1EzkEpXtkui5Llb6CtdZPy7asbNjxVN5B5AKzv5wYVSy4FZl2Pw2NgvC6zTOi 10L99vS4ec4d/WQDZBZKgvbTAkJUEYu4+BOLbNHPhwWy3gKGKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGYeIt8cGX2KM6Mijn1m0LnZvPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTE1YWM3OWItMWIzZS0z MWMwLWEyOTQtZGVlMGViMjJmMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8woMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSGENnHzRl0xM8xlLRhLKuVD/xISWLwqMmoO0vvgc0LVxMufaBkrln/ 4OEFDKbzBY0RQd8oXc0gTTU6wqN25KJBEaB6BSXzMKrBvPjm8m/0LV6HU83wFEbV v74omO3PZhN2uEZcsl+L3aGxqt9Taq4lJC9G9/1S6mES6NqwC08IpjgzOU3hoUsu ah5kCsF32y4MWAcHv4EUZnoD3FUKmh8bSmzcERLTc7GMlQrjpgFaOE9mEnl0a1lj yYNzewXEJFPOVdNCN/YSZeB4CbDH2iFa0gZk/1Vs4cL6QIg6hNcthnAJSfPJ+Kx9 r/fCCpIArAOWhP00Mbfsa1SonO3OHW8= -----END CERTIFICATE-----Generated at Mon Apr 7 06:08:13 2025 by rpki-client