$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f80b59-1d5b-31d6-88b0-bc117a79eac2.roa File: a7f80b59-1d5b-31d6-88b0-bc117a79eac2.roa (raw, json) Hash identifier: CgVWtvE/fI+8oECJfQeHksY/fwQlhBLn5JEqxbWLltc= Subject key identifier: 31:47:AB:21:1E:44:56:B1:F9:F6:88:69:B1:B2:11:6A:7A:97:41:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F86D419B8193F9D0A560E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f80b59-1d5b-31d6-88b0-bc117a79eac2.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 71.234.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:6d:41:9b:81:93:f9:d0:a5:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=09642cf7-2d84-439e-a385-b68a4e8cc13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:21:50:56:f1:6f:33:22:50:93:3f:9e:85: 32:92:67:be:7a:bd:75:e9:dd:41:27:14:e3:2b:be: 64:af:25:41:6c:36:f4:d5:8f:1b:a1:5d:48:2a:06: 14:55:12:69:df:d9:5d:ef:47:ab:07:cc:53:7d:b5: 08:60:02:3a:a4:20:7f:57:2b:9c:a2:f5:a4:2d:d2: ef:f8:2e:3f:0c:e1:d2:5c:fb:53:36:56:14:50:d4: a8:14:0a:b4:e7:46:28:2d:0d:69:c6:05:a6:b0:38: 15:50:cc:53:b8:1f:fd:35:dc:8d:a1:eb:21:ab:c0: 8c:59:02:c9:58:d1:24:af:9b:16:b9:06:65:01:dc: 1c:73:1e:ca:b0:05:5d:d7:df:42:5e:5c:da:3f:e3: e1:57:f3:1d:4b:88:43:ad:66:bb:7c:44:10:60:9c: 20:96:6e:5e:65:26:5a:5f:0a:1e:1c:76:35:77:fe: a1:66:39:44:5b:21:e3:94:d4:23:86:98:45:bf:f4: 22:8f:6a:72:56:55:63:1b:a8:be:49:5b:3b:c7:2c: 36:3a:ea:de:d8:50:34:63:9d:97:15:ec:0e:d1:5d: b1:56:12:29:82:c0:43:c8:77:2e:ba:38:fa:d9:4c: 6d:7c:cb:ef:f6:e2:92:3e:ab:6e:c6:5c:31:a4:13: e2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:47:AB:21:1E:44:56:B1:F9:F6:88:69:B1:B2:11:6A:7A:97:41:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7f80b59-1d5b-31d6-88b0-bc117a79eac2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.234.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:de:a8:b6:62:50:38:72:3d:02:62:db:c0:ce:58:1e:7f:4a: 82:9f:7b:30:01:15:21:51:2c:40:88:fb:ba:1f:b0:d7:0f:f1: 3c:ff:2e:d7:ac:17:4d:42:3e:3e:63:7c:64:fb:f6:1e:49:2e: 07:a5:d2:ee:49:35:f9:7f:8c:57:8a:5e:e3:7d:70:49:29:15: a1:d4:0d:4d:cc:0a:29:ab:9e:3f:3d:9a:61:a0:13:20:85:97: bb:04:da:e9:df:bd:e9:51:61:ad:eb:2a:4a:14:09:e5:c5:0e: 8b:98:e1:32:3e:d2:83:03:c5:bb:d2:f9:72:08:2d:df:49:73: 7b:3f:70:e2:a4:96:b3:d3:fc:74:41:4b:4f:63:8e:b4:1d:15: ef:ab:e3:31:99:41:e2:23:16:08:53:70:32:86:92:7a:ce:ba: 3b:71:fd:f7:62:f3:14:98:f9:46:e4:ea:44:3f:28:19:3c:13: d6:37:63:34:89:c7:fb:eb:b7:f0:fc:a5:f6:d9:83:01:ac:4c: fe:ad:09:19:07:49:60:da:b3:8b:1c:c5:d5:64:98:c2:dd:1a: 7a:cc:7b:2f:5f:9a:4f:d9:37:18:a4:bd:c6:2f:0c:9c:16:52: c6:43:7c:a6:c4:da:e8:e2:3e:ad:17:30:5a:ef:89:ed:a1:5a: 88:a5:7a:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+G1Bm4GT+dClYOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MDk2NDJjZjctMmQ4NC00MzllLWEzODUtYjY4YTRlOGNjMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWwhUFbxbzMiUJM/noUykme+er116d1BJxTj K75kryVBbDb01Y8boV1IKgYUVRJp39ld70erB8xTfbUIYAI6pCB/VyucovWkLdLv +C4/DOHSXPtTNlYUUNSoFAq050YoLQ1pxgWmsDgVUMxTuB/9NdyNoeshq8CMWQLJ WNEkr5sWuQZlAdwccx7KsAVd199CXlzaP+PhV/MdS4hDrWa7fEQQYJwglm5eZSZa XwoeHHY1d/6hZjlEWyHjlNQjhphFv/Qij2pyVlVjG6i+SVs7xyw2Oure2FA0Y52X FewO0V2xVhIpgsBDyHcuujj62UxtfMvv9uKSPqtuxlwxpBPiBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFHqyEeRFax+faIabGyEWp6l0H4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdmODBiNTktMWQ1Yi0z MWQ2LTg4YjAtYmMxMTdhNzllYWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+rwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzeqLZiUDhyPQJi28DOWB5/SoKfezABFSFRLECI+7ofsNcP8Tz/Ltes F01CPj5jfGT79h5JLgel0u5JNfl/jFeKXuN9cEkpFaHUDU3MCimrnj89mmGgEyCF l7sE2unfvelRYa3rKkoUCeXFDouY4TI+0oMDxbvS+XIILd9Jc3s/cOKklrPT/HRB S09jjrQdFe+r4zGZQeIjFghTcDKGknrOujtx/fdi8xSY+Ubk6kQ/KBk8E9Y3YzSJ x/vrt/D8pfbZgwGsTP6tCRkHSWDas4scxdVkmMLdGnrMey9fmk/ZNxikvcYvDJwW UsZDfKbE2ujiPq0XMFrvie2hWoilesA= -----END CERTIFICATE-----Generated at Sun Apr 6 09:41:06 2025 by rpki-client