$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af711a11-a82c-3c61-92f5-f82a1b8fa883.roa File: af711a11-a82c-3c61-92f5-f82a1b8fa883.roa (raw, json) Hash identifier: QgmLVVgZPUM1FwSOewWe9PdJCPBKHbApPRTB9VmuAjw= Subject key identifier: 84:BD:D4:91:C7:DF:E1:08:C9:4D:31:87:89:7A:2B:46:0C:0B:BF:21 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848AF2B89848830729D1DD21400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af711a11-a82c-3c61-92f5-f82a1b8fa883.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 33661 IP address blocks: 173.10.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:89:84:88:30:72:9d:1d:d2:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=2169b527-b660-41a3-b483-903de8f2d4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:96:64:81:3e:d2:cf:1f:17:62:7b:aa:64:87: 91:24:5d:cf:30:fa:ea:ea:a3:fc:61:87:de:94:a9: 17:82:34:9d:13:61:3e:31:7e:93:ec:5c:75:99:81: 5e:40:dd:18:1a:0b:cf:2d:9d:fb:19:dc:ee:c5:a4: f8:fd:0c:72:63:a3:7c:bf:22:bd:1a:bb:09:ae:a5: f5:c7:90:bc:97:0d:6c:b7:74:f1:14:89:9e:33:80: 36:94:b5:34:e0:05:8e:ab:2f:b3:6e:59:28:b3:e0: c8:6a:ae:fb:4c:3c:bd:18:ae:82:f6:38:6e:10:ac: 5e:d8:75:19:69:38:d2:87:44:3e:b2:5d:e7:25:5d: 0d:2f:57:85:7c:6f:00:18:e2:16:fe:11:c2:7a:68: 0c:de:1b:ba:d6:49:ab:d4:46:50:d5:0e:cb:34:6f: cd:06:98:ab:53:10:78:84:09:82:6b:b7:0b:2b:65: d3:e1:d3:2d:c9:df:54:e6:1d:b7:a8:96:48:ae:17: 05:8a:4a:2d:d7:fa:40:d8:75:cc:95:29:57:24:3c: a3:57:60:6d:fc:ec:15:a0:a7:dc:e9:68:4e:ac:2c: f5:6c:93:f3:bb:4b:72:6f:3d:a1:56:1e:95:53:15: 5e:04:4e:fc:1c:e5:d9:53:a0:11:8f:a8:0f:23:5e: 9e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BD:D4:91:C7:DF:E1:08:C9:4D:31:87:89:7A:2B:46:0C:0B:BF:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af711a11-a82c-3c61-92f5-f82a1b8fa883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 173.10.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:8a:f3:3c:e9:c4:52:5e:35:9e:f0:14:90:a4:d8:16:fb:43: c7:56:20:b1:ab:70:ff:f4:3c:a0:69:33:b8:64:50:99:c0:14: 26:d4:65:60:1f:96:57:5f:5b:2c:90:05:f6:25:e9:ef:c2:c3: 5e:71:a7:d9:f0:ff:05:e6:01:5a:f2:51:7e:89:39:93:db:a8: 2c:98:c1:be:05:fa:27:74:10:15:2c:a8:18:e9:9c:b5:1b:59: c9:29:64:d4:3f:2a:46:a5:47:bc:18:fa:e7:89:40:9a:27:62: e6:0a:fb:17:f7:e5:10:68:dd:92:8d:0a:24:b1:98:fb:4e:5f: 62:ad:53:33:48:7e:ff:82:e5:4b:74:92:7a:16:46:72:77:e2: 33:d7:cd:6c:cf:f9:ef:15:be:dc:4e:ee:14:47:22:4c:e4:b1: 0a:d3:aa:ff:54:1a:f6:67:ae:6e:e9:a1:0c:a7:d7:19:c1:14: f4:08:6f:cd:58:2f:63:09:45:0d:c0:d8:f6:57:27:7b:be:57: 06:b1:9b:09:49:cd:71:f0:cc:ec:e1:9e:99:31:5c:99:c9:5e: 15:1b:a9:88:37:7e:d3:34:b7:8b:6c:87:4c:30:47:8c:65:e4: cb:26:07:24:48:48:67:cd:52:4b:79:74:83:be:13:71:a1:82: 1e:e9:37:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK4mEiDBynR3SFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk MjE2OWI1MjctYjY2MC00MWEzLWI0ODMtOTAzZGU4ZjJkNGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipZkgT7Szx8XYnuqZIeRJF3PMPrq6qP8YYfe lKkXgjSdE2E+MX6T7Fx1mYFeQN0YGgvPLZ37GdzuxaT4/QxyY6N8vyK9GrsJrqX1 x5C8lw1st3TxFImeM4A2lLU04AWOqy+zblkos+DIaq77TDy9GK6C9jhuEKxe2HUZ aTjSh0Q+sl3nJV0NL1eFfG8AGOIW/hHCemgM3hu61kmr1EZQ1Q7LNG/NBpirUxB4 hAmCa7cLK2XT4dMtyd9U5h23qJZIrhcFikot1/pA2HXMlSlXJDyjV2Bt/OwVoKfc 6WhOrCz1bJPzu0tybz2hVh6VUxVeBE78HOXZU6ARj6gPI16eBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS91JHH3+EIyU0xh4l6K0YMC78hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY3MTFhMTEtYTgyYy0z YzYxLTkyZjUtZjgyYTFiOGZhODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrQrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCK8zzpxFJeNZ7wFJCk2Bb7Q8dWILGrcP/0PKBpM7hkUJnAFCbUZWAf lldfWyyQBfYl6e/Cw15xp9nw/wXmAVryUX6JOZPbqCyYwb4F+id0EBUsqBjpnLUb WckpZNQ/KkalR7wY+ueJQJonYuYK+xf35RBo3ZKNCiSxmPtOX2KtUzNIfv+C5Ut0 knoWRnJ34jPXzWzP+e8VvtxO7hRHIkzksQrTqv9UGvZnrm7poQyn1xnBFPQIb81Y L2MJRQ3A2PZXJ3u+VwaxmwlJzXHwzOzhnpkxXJnJXhUbqYg3ftM0t4tsh0wwR4xl 5MsmByRISGfNUkt5dIO+E3Ghgh7pN90= -----END CERTIFICATE-----Generated at Mon Apr 7 05:46:10 2025 by rpki-client