$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aff64e4a-0e74-3cc5-8b40-570786d8a17f.roa File: aff64e4a-0e74-3cc5-8b40-570786d8a17f.roa (raw, json) Hash identifier: PpwaEVW2N+RgJz3NY0FLWO9hJnlzmMX5Nz3VqIx8lR4= Subject key identifier: 12:4A:DC:54:17:96:D5:C9:43:45:CB:51:E3:92:68:B5:11:5D:F1:32 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6BF6C4A17BD9CCD420B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aff64e4a-0e74-3cc5-8b40-570786d8a17f.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 71.238.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:bf:6c:4a:17:bd:9c:cd:42:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=691e4caa-2a39-4a93-b60a-b4f96d331794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:39:01:09:36:be:44:ef:f7:45:46:42:60:73: a1:87:ff:03:a0:fb:09:9d:75:93:9b:a2:55:79:32: 43:5f:f4:52:16:ea:75:b3:62:27:3c:2a:e4:ef:42: 55:15:28:72:04:3c:e8:c1:94:40:15:50:07:21:44: 64:70:1a:23:c9:08:69:d3:38:0e:28:8e:13:34:e0: cb:d7:81:ab:38:64:17:b8:6f:99:3b:50:77:7c:5a: 6f:43:8c:dc:bc:0a:fe:5f:a1:92:73:4d:65:74:12: 55:7e:41:c5:1a:8a:a7:9b:89:d4:0f:18:80:5e:60: 77:6f:61:1a:f6:22:33:bf:cb:ae:f6:5c:5b:95:86: cf:43:93:a3:1e:77:7d:74:71:c5:9f:f3:12:4a:13: 42:28:f6:32:3b:55:29:01:c3:88:ca:16:69:ea:75: 97:97:48:69:08:a7:9e:32:17:5e:28:fa:09:14:51: 33:19:36:1b:d2:5f:a3:0f:55:fc:a9:f1:1b:57:ef: c8:63:e8:18:87:42:d0:da:c1:80:24:7a:bc:7d:53: a9:05:d1:46:21:3c:a9:99:9b:40:d0:b4:3f:1b:7e: cb:73:2f:a2:a8:ec:24:58:72:f7:5f:a3:47:bc:ad: 7e:a3:17:fb:93:50:c1:e2:b3:31:e4:2b:90:40:25: 4d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4A:DC:54:17:96:D5:C9:43:45:CB:51:E3:92:68:B5:11:5D:F1:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aff64e4a-0e74-3cc5-8b40-570786d8a17f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:13:67:97:e9:d6:17:c6:79:7c:4c:38:f7:08:b2:bf:2f:a7: a1:2d:04:19:bf:2b:9f:f8:34:fe:87:22:10:52:ec:b4:14:cf: 4b:a8:0f:32:fd:56:81:96:b4:5f:dc:30:4e:61:3a:75:23:81: 18:d1:59:d5:ab:a7:cf:96:6a:9c:85:0b:58:62:89:65:1d:87: aa:d4:4f:8a:62:0f:af:a0:9a:e9:65:86:05:eb:40:62:9c:66: 49:43:de:8e:75:ae:0d:5a:3b:5c:5f:cb:ad:66:be:ee:19:2b: 67:ea:01:5a:8d:18:4a:13:58:4e:57:20:e3:b1:e4:a6:e4:8f: 8d:49:9c:e0:44:10:5b:f0:7b:a0:b1:f3:62:e4:33:54:64:80: 2e:44:28:bf:8d:87:7d:3f:ad:6a:88:e8:3f:70:b7:91:c7:83: 7e:13:63:e1:24:c1:bb:e3:a7:d3:c3:2e:79:7f:4c:4e:8d:85: fa:79:af:52:58:2f:d1:6f:0e:c7:07:0e:17:e7:66:be:ac:9f: 0c:3d:98:0b:60:78:f4:58:19:74:6f:de:10:76:98:e2:2b:68: 73:58:e8:ef:01:6c:de:b8:90:7c:c7:3b:18:da:6e:cd:eb:18: e4:9c:9e:e7:6d:2c:a0:6d:69:27:d7:b8:2f:7e:01:a3:64:4e: 89:7e:f2:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09r9sShe9nM1CC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NjkxZTRjYWEtMmEzOS00YTkzLWI2MGEtYjRmOTZkMzMxNzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzkBCTa+RO/3RUZCYHOhh/8DoPsJnXWTm6JV eTJDX/RSFup1s2InPCrk70JVFShyBDzowZRAFVAHIURkcBojyQhp0zgOKI4TNODL 14GrOGQXuG+ZO1B3fFpvQ4zcvAr+X6GSc01ldBJVfkHFGoqnm4nUDxiAXmB3b2Ea 9iIzv8uu9lxblYbPQ5OjHnd9dHHFn/MSShNCKPYyO1UpAcOIyhZp6nWXl0hpCKee MhdeKPoJFFEzGTYb0l+jD1X8qfEbV+/IY+gYh0LQ2sGAJHq8fVOpBdFGITypmZtA 0LQ/G37Lcy+iqOwkWHL3X6NHvK1+oxf7k1DB4rMx5CuQQCVN7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJK3FQXltXJQ0XLUeOSaLURXfEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZmNjRlNGEtMGU3NC0z Y2M1LThiNDAtNTcwNzg2ZDhhMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0TZ5fp1hfGeXxMOPcIsr8vp6EtBBm/K5/4NP6HIhBS7LQUz0uoDzL9 VoGWtF/cME5hOnUjgRjRWdWrp8+WapyFC1hiiWUdh6rUT4piD6+gmullhgXrQGKc ZklD3o51rg1aO1xfy61mvu4ZK2fqAVqNGEoTWE5XIOOx5Kbkj41JnOBEEFvwe6Cx 82LkM1RkgC5EKL+Nh30/rWqI6D9wt5HHg34TY+Ekwbvjp9PDLnl/TE6Nhfp5r1JY L9FvDscHDhfnZr6snww9mAtgePRYGXRv3hB2mOIraHNY6O8BbN64kHzHOxjabs3r GOScnudtLKBtaSfXuC9+AaNkTol+8lQ= -----END CERTIFICATE-----Generated at Mon Apr 7 06:33:40 2025 by rpki-client