$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a55df61c-1de0-3f21-ada1-53df9f79aa32.roa File: a55df61c-1de0-3f21-ada1-53df9f79aa32.roa (raw, json) Hash identifier: tORdQYltJZI7440PduyGlQEZCB8SVSPRTx3zk5ZndZA= Subject key identifier: 4B:08:8D:F0:92:28:68:00:BC:10:8C:F1:D8:97:6F:95:A1:24:12:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB17C64BAAF43DE4A8181C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a55df61c-1de0-3f21-ada1-53df9f79aa32.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 69.181.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:7c:64:ba:af:43:de:4a:81:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=394a111b-5c36-45ae-9a91-d6621a61b04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a6:58:23:96:b6:21:3c:bc:ab:ac:46:97:c0: f4:27:f7:ed:f6:4b:9c:ef:d4:78:dd:9a:26:ab:d4: d1:5d:96:52:7b:2f:7d:ec:a1:2d:1e:57:80:2c:f3: 1a:4e:04:98:89:d9:5f:5a:2e:ae:3a:d7:55:25:b6: 78:28:44:0c:a8:99:f1:3e:5e:c5:2c:b7:7b:2a:a7: 88:a3:66:38:77:8a:51:01:43:4f:b5:e3:e2:ca:11: b3:d9:42:b9:60:99:3f:be:ea:96:8f:ed:cd:76:aa: ab:36:7b:d8:8e:1f:29:a0:43:e9:46:67:6c:48:23: ca:47:b1:c9:6f:ee:09:f0:cd:cf:73:2e:7b:24:e6: 08:d8:d3:6d:c6:d9:1b:4b:62:39:f6:99:4c:75:06: 2e:dd:f5:9f:2c:64:23:d2:ad:29:c0:80:7a:6f:26: 57:6a:f4:ed:76:b6:10:f3:ac:c2:dc:ba:8b:c3:29: f3:c2:10:60:d3:47:b8:f6:1b:8a:15:ef:28:17:13: 35:03:2a:e5:1c:9e:86:2e:d0:81:9a:1f:79:7d:bc: 4c:b2:64:2e:41:52:2e:20:3b:58:65:a6:47:9e:0e: 3b:32:26:99:c7:5e:4b:21:c2:83:f6:4f:f6:b9:54: 5f:03:4c:69:72:c9:73:ff:57:7e:3f:4b:23:77:54: 85:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:08:8D:F0:92:28:68:00:BC:10:8C:F1:D8:97:6F:95:A1:24:12:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a55df61c-1de0-3f21-ada1-53df9f79aa32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.181.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:2e:21:37:9a:35:ac:f4:d1:e0:a2:8a:16:63:1e:54:c3:19: 78:7c:b6:ea:90:13:81:6f:ca:a2:24:26:d3:ef:76:ee:5f:19: ae:7b:64:62:a6:19:ea:a1:77:83:a4:96:2c:fd:44:08:8f:be: e2:ea:6a:07:df:ed:25:40:77:c6:00:df:43:a7:77:16:47:a3: 26:74:2d:22:b9:81:c2:f9:19:34:65:84:7b:de:5e:ee:4e:91: d0:92:b6:b4:0e:bb:ef:65:3f:eb:2b:29:ad:e9:c7:0b:66:f1: 62:58:e9:3f:5f:65:84:dd:00:b3:a2:bb:32:db:6c:cf:20:de: da:f2:60:c0:1e:05:50:48:2e:10:f1:4f:ad:d5:35:01:23:23: bc:f1:d8:fe:17:9c:6b:7c:ed:d5:1b:a8:d9:a6:ef:c0:f5:d9: 1c:3f:12:1b:24:c4:22:d3:a1:93:8e:ce:32:44:e9:4b:c9:c4: 99:71:6d:7c:e5:64:e5:2a:36:9b:6b:35:93:11:69:5c:f3:f7: 0a:30:c3:96:8a:12:29:b4:08:76:58:95:54:93:33:44:7e:17: 72:ab:68:e2:03:84:c7:52:a1:a0:f6:9d:bd:a5:b8:1b:97:47: 9a:3d:24:f9:24:93:d3:62:42:f4:5c:59:59:71:d4:64:20:98: 1a:e0:ed:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssXxkuq9D3kqBgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk Mzk0YTExMWItNWMzNi00NWFlLTlhOTEtZDY2MjFhNjFiMDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaZYI5a2ITy8q6xGl8D0J/ft9kuc79R43Zom q9TRXZZSey997KEtHleALPMaTgSYidlfWi6uOtdVJbZ4KEQMqJnxPl7FLLd7KqeI o2Y4d4pRAUNPtePiyhGz2UK5YJk/vuqWj+3NdqqrNnvYjh8poEPpRmdsSCPKR7HJ b+4J8M3Pcy57JOYI2NNtxtkbS2I59plMdQYu3fWfLGQj0q0pwIB6byZXavTtdrYQ 86zC3LqLwynzwhBg00e49huKFe8oFxM1AyrlHJ6GLtCBmh95fbxMsmQuQVIuIDtY ZaZHng47MiaZx15LIcKD9k/2uVRfA0xpcslz/1d+P0sjd1SFXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsIjfCSKGgAvBCM8diXb5WhJBIFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTU1ZGY2MWMtMWRlMC0z ZjIxLWFkYTEtNTNkZjlmNzlhYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRbW4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcuITeaNaz00eCiihZjHlTDGXh8tuqQE4FvyqIkJtPvdu5fGa57ZGKm Geqhd4Okliz9RAiPvuLqagff7SVAd8YA30OndxZHoyZ0LSK5gcL5GTRlhHveXu5O kdCStrQOu+9lP+srKa3pxwtm8WJY6T9fZYTdALOiuzLbbM8g3tryYMAeBVBILhDx T63VNQEjI7zx2P4XnGt87dUbqNmm78D12Rw/EhskxCLToZOOzjJE6UvJxJlxbXzl ZOUqNptrNZMRaVzz9woww5aKEim0CHZYlVSTM0R+F3KraOIDhMdSoaD2nb2luBuX R5o9JPkkk9NiQvRcWVlx1GQgmBrg7cw= -----END CERTIFICATE-----Generated at Mon Apr 7 05:47:17 2025 by rpki-client