$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4d57186-d73f-31ff-aa09-7b9c295d0c70.roa File: a4d57186-d73f-31ff-aa09-7b9c295d0c70.roa (raw, json) Hash identifier: 3J8VBNU7+9W6qwc7hRy1LMSLNtTRztEZ8QD+eP7ZEdQ= Subject key identifier: FF:69:78:10:3E:4C:C6:F5:E0:0C:36:64:EA:15:B2:CA:00:E1:58:68 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C3BCA430185EB8D23E000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4d57186-d73f-31ff-aa09-7b9c295d0c70.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 71.204.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:3b:ca:43:01:85:eb:8d:23:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=9d01812e-32da-40a4-b4fb-8e6d1b7e7bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e7:ac:3d:d4:78:ca:9c:28:19:67:c5:32:79: ab:f4:b8:11:e3:6d:ad:73:5a:87:9a:0f:b7:e7:ed: ea:ff:a8:6f:42:8a:89:c8:b2:c8:24:1d:63:97:cc: 57:9a:71:cc:35:10:05:0c:e7:ff:59:27:c1:14:b3: 3f:0c:56:26:b1:1c:2d:46:aa:0c:91:82:cb:db:1c: 43:12:8d:21:d9:01:3d:6b:36:86:62:ee:03:8a:88: b5:2c:6f:58:0f:ce:6c:c9:ae:d6:a9:0c:07:9a:4f: d9:db:0f:89:76:c3:71:e6:77:27:67:ea:62:a0:2e: 0c:b9:5c:10:ff:77:a5:2d:60:f4:0f:2d:27:bf:a2: d4:70:16:24:5a:3e:90:c6:66:ac:cd:1f:e3:b6:68: 29:2a:9d:66:c1:3c:07:a5:63:aa:27:b9:97:dc:aa: 7c:bb:96:28:07:bb:09:09:ab:25:24:bc:ef:57:44: dd:3c:e3:eb:67:11:53:be:a8:31:66:a0:8b:ba:ae: 69:c8:48:af:6f:4c:86:3e:35:ac:81:d1:b2:fc:72: d1:da:28:5d:51:ba:53:32:11:8b:c0:53:ce:b2:b2: 07:4e:60:68:26:d9:d7:13:34:e4:76:0d:34:7b:aa: 3e:88:b9:98:6a:df:f5:99:4a:13:e0:a2:7b:f1:60: 10:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:69:78:10:3E:4C:C6:F5:E0:0C:36:64:EA:15:B2:CA:00:E1:58:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4d57186-d73f-31ff-aa09-7b9c295d0c70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:fa:ea:4f:8c:4f:04:b8:25:a3:51:f4:57:0a:58:a6:9c:ab: 9c:87:39:5a:39:bd:22:90:e4:35:d9:64:b4:fe:e1:a5:f0:b1: 4a:b5:76:fa:31:ad:2c:12:24:5c:d7:5a:b7:72:0f:e0:10:ed: 39:f7:04:cf:3c:23:b8:90:b3:8d:05:21:40:cb:8a:48:a8:a4: 25:2f:b2:7e:3b:ac:ce:5a:a2:40:eb:87:65:4b:64:33:74:43: 9d:a1:48:b7:58:ab:55:62:db:5d:3f:84:51:bd:17:2f:1e:1a: 96:eb:78:9d:74:98:84:e0:81:97:61:9d:fa:bb:35:92:ef:bf: 5e:c4:1c:37:2e:43:01:82:f2:ef:9f:da:69:1d:30:d1:e0:8f: 2d:ab:2b:27:9f:2d:5f:65:56:c9:c8:e3:8c:a7:d3:3f:30:6f: 27:0c:8a:fb:52:c0:bf:d4:c6:7a:8d:61:a5:77:cc:0e:34:ee: 30:de:ba:81:6d:9b:9b:46:37:f6:e3:de:e9:e2:ca:d8:d4:30: 57:27:f6:87:7a:28:8c:ba:36:74:0a:cc:9a:07:cc:c3:c6:6c: 4c:54:1b:eb:a6:7e:d8:93:48:0f:41:3c:88:76:9f:85:d4:72: fe:42:8a:f1:e7:33:04:c1:ce:49:f2:f8:90:18:f0:a9:a0:82: b4:ca:6c:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPDvKQwGF640j4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk OWQwMTgxMmUtMzJkYS00MGE0LWI0ZmItOGU2ZDFiN2U3YmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOesPdR4ypwoGWfFMnmr9LgR422tc1qHmg+3 5+3q/6hvQoqJyLLIJB1jl8xXmnHMNRAFDOf/WSfBFLM/DFYmsRwtRqoMkYLL2xxD Eo0h2QE9azaGYu4Dioi1LG9YD85sya7WqQwHmk/Z2w+JdsNx5ncnZ+pioC4MuVwQ /3elLWD0Dy0nv6LUcBYkWj6QxmaszR/jtmgpKp1mwTwHpWOqJ7mX3Kp8u5YoB7sJ CaslJLzvV0TdPOPrZxFTvqgxZqCLuq5pyEivb0yGPjWsgdGy/HLR2ihdUbpTMhGL wFPOsrIHTmBoJtnXEzTkdg00e6o+iLmYat/1mUoT4KJ78WAQ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9peBA+TMb14Aw2ZOoVssoA4VhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTRkNTcxODYtZDczZi0z MWZmLWFhMDktN2I5YzI5NWQwYzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8xWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz66k+MTwS4JaNR9FcKWKacq5yHOVo5vSKQ5DXZZLT+4aXwsUq1dvox rSwSJFzXWrdyD+AQ7Tn3BM88I7iQs40FIUDLikiopCUvsn47rM5aokDrh2VLZDN0 Q52hSLdYq1Vi210/hFG9Fy8eGpbreJ10mITggZdhnfq7NZLvv17EHDcuQwGC8u+f 2mkdMNHgjy2rKyefLV9lVsnI44yn0z8wbycMivtSwL/UxnqNYaV3zA407jDeuoFt m5tGN/bj3uniytjUMFcn9od6KIy6NnQKzJoHzMPGbExUG+umftiTSA9BPIh2n4XU cv5CivHnMwTBzkny+JAY8KmggrTKbIs= -----END CERTIFICATE-----Generated at Mon Apr 7 06:10:05 2025 by rpki-client