$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6ea46d7-68e6-3f12-98b5-f547e172d40c.roa File: a6ea46d7-68e6-3f12-98b5-f547e172d40c.roa (raw, json) Hash identifier: S2i8OWYiyZCjiZftdM8UMBIKyrS81HQUYHIWOJ3mh2s= Subject key identifier: 6C:95:06:AF:C6:A2:BE:BD:81:1C:C9:F2:02:90:D0:C9:8F:7E:47:9A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F82BCB2175D41D660CC400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6ea46d7-68e6-3f12-98b5-f547e172d40c.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 71.238.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:2b:cb:21:75:d4:1d:66:0c:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=bc1c947d-0a81-4628-9314-2ae79a656142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0c:00:88:fd:b2:2e:01:3f:9a:cc:5b:5f:61: 8b:3b:8e:23:b9:38:9e:c3:d6:dd:5e:23:f8:2d:7a: fd:79:ce:4b:98:db:3b:9d:f1:24:47:fb:39:de:44: 71:67:af:c3:10:03:bb:d3:1f:95:00:e2:c8:16:0a: 8e:67:a0:8c:33:b7:43:77:0c:f8:fd:91:db:ea:b1: 8d:cf:82:35:e8:49:b6:3b:f1:06:af:a8:3e:7f:85: 8b:52:d0:fb:24:d6:f2:4f:5e:cf:ec:0d:85:0a:d6: 83:3d:9f:bf:dc:db:ef:b7:22:fd:95:48:73:62:dc: 90:a1:40:0e:7f:a0:5b:41:5a:b6:04:7a:e5:51:ad: 16:07:79:c9:5a:ef:33:5a:d9:17:76:01:81:73:41: bb:99:e0:16:fa:bc:fe:b8:4d:61:1b:58:7f:dd:0b: 15:14:0d:f0:15:00:5a:d0:b1:1d:4e:bf:63:07:a9: f6:48:82:36:41:7d:bd:e4:38:70:4b:38:07:d5:46: 60:fc:55:5f:3f:08:e0:06:78:1c:b9:06:93:d0:fa: 79:79:f2:48:d7:d4:43:9f:75:6c:ce:92:91:05:1c: 49:33:ac:3b:2c:93:29:03:8c:23:84:ef:44:cd:3e: 7d:e2:cf:0e:45:6e:bf:4e:25:b1:47:d9:70:dc:bf: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:95:06:AF:C6:A2:BE:BD:81:1C:C9:F2:02:90:D0:C9:8F:7E:47:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6ea46d7-68e6-3f12-98b5-f547e172d40c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:a4:3a:ab:8c:b3:51:91:64:fc:f3:79:00:5a:a8:59:63:ba: af:89:8f:90:96:60:4e:c8:47:f0:25:ac:36:33:b7:8d:67:13: 0b:71:38:f7:41:00:76:c2:ef:f7:33:86:b1:01:86:72:92:36: fe:27:33:52:a2:d5:b9:7c:94:e5:fc:95:2b:a0:f3:e3:17:d2: 0f:9c:5a:b6:ed:2e:ac:4b:67:9a:fd:8a:36:a3:08:7e:05:71: 07:87:3b:29:a8:4a:50:de:0d:36:e2:f0:09:6e:4a:e1:ff:88: 3b:68:0d:3e:1c:cb:87:9a:98:28:4e:38:83:52:2b:d8:00:68: d7:b1:db:90:fc:8c:b5:25:4a:69:62:89:d7:c4:5d:89:63:79: 30:eb:2d:cc:43:45:f1:69:5e:b1:55:e6:f3:8a:af:92:66:a7: b6:48:1d:fb:77:d7:ca:e4:78:20:3b:b6:a1:15:c9:e0:85:98: f1:61:01:7f:bb:f0:eb:7a:a8:ac:d8:78:62:a6:0e:ef:fc:22: 83:ae:9a:8b:01:f0:c6:b1:b4:fd:5b:1f:5b:c2:ee:a3:fd:22: 7a:f8:02:ce:a8:d6:e4:3f:49:5f:fb:11:e2:54:b7:18:bc:be: d3:23:da:ac:9b:0f:51:a2:6e:55:f7:94:50:5d:e2:cd:57:2c: 6a:da:5e:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+CvLIXXUHWYMxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YmMxYzk0N2QtMGE4MS00NjI4LTkzMTQtMmFlNzlhNjU2MTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAwAiP2yLgE/msxbX2GLO44juTiew9bdXiP4 LXr9ec5LmNs7nfEkR/s53kRxZ6/DEAO70x+VAOLIFgqOZ6CMM7dDdwz4/ZHb6rGN z4I16Em2O/EGr6g+f4WLUtD7JNbyT17P7A2FCtaDPZ+/3NvvtyL9lUhzYtyQoUAO f6BbQVq2BHrlUa0WB3nJWu8zWtkXdgGBc0G7meAW+rz+uE1hG1h/3QsVFA3wFQBa 0LEdTr9jB6n2SII2QX295DhwSzgH1UZg/FVfPwjgBngcuQaT0Pp5efJI19RDn3Vs zpKRBRxJM6w7LJMpA4wjhO9EzT594s8ORW6/TiWxR9lw3L9phQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyVBq/Gor69gRzJ8gKQ0MmPfkeaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTZlYTQ2ZDctNjhlNi0z ZjEyLTk4YjUtZjU0N2UxNzJkNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+kOquMs1GRZPzzeQBaqFljuq+Jj5CWYE7IR/AlrDYzt41nEwtxOPdB AHbC7/czhrEBhnKSNv4nM1Ki1bl8lOX8lSug8+MX0g+cWrbtLqxLZ5r9ijajCH4F cQeHOymoSlDeDTbi8AluSuH/iDtoDT4cy4eamChOOINSK9gAaNex25D8jLUlSmli idfEXYljeTDrLcxDRfFpXrFV5vOKr5Jmp7ZIHft318rkeCA7tqEVyeCFmPFhAX+7 8Ot6qKzYeGKmDu/8IoOumosB8MaxtP1bH1vC7qP9Inr4As6o1uQ/SV/7EeJUtxi8 vtMj2qybD1GiblX3lFBd4s1XLGraXsg= -----END CERTIFICATE-----Generated at Mon Apr 7 05:49:19 2025 by rpki-client