$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5ed4554-2a1c-384b-bc2a-a47e415c7d92.roa File: b5ed4554-2a1c-384b-bc2a-a47e415c7d92.roa (raw, json) Hash identifier: UfKdW29UpdphB8cO9u+NQJsbsA9jiiIzHnOfKemaXAk= Subject key identifier: 6D:48:B6:D0:E5:9E:2C:10:71:83:8F:E1:FF:5E:A3:42:16:8A:89:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8C9F27CB8DA9273C73D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5ed4554-2a1c-384b-bc2a-a47e415c7d92.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 107.4.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:c9:f2:7c:b8:da:92:73:c7:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d6e7d370-939b-415a-baa5-d170b0e48d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a7:ed:c4:17:39:d3:90:04:36:f5:32:4e:3b: cd:39:5e:4c:93:fe:13:ad:bc:fb:84:4a:f3:5e:8b: 2a:ef:bd:40:f2:13:43:c3:1e:97:5e:57:a0:98:4e: fc:58:47:89:ce:17:0a:bc:b0:97:d2:7c:fe:8f:27: 97:46:bb:28:96:ec:e3:e4:6b:da:b9:4c:93:c6:54: 1b:a6:4c:ee:e5:79:07:7e:6d:ce:7c:2b:a8:5e:e6: 3b:e3:e0:04:0d:db:a3:71:aa:fa:38:3d:3c:d1:f0: cc:a6:ec:e6:5b:94:17:c8:b3:3b:ce:50:6b:fc:e0: f9:b7:d9:6e:04:f4:e7:2f:1d:33:2a:df:4a:3f:5d: a0:32:56:a9:2c:aa:c4:cb:4e:0d:be:32:a3:5d:f9: 98:0c:00:c1:35:4c:33:b6:7b:73:34:7a:7d:71:04: a4:cb:48:41:bf:96:94:5d:15:8b:07:8f:15:82:d1: aa:15:f9:bf:b5:34:84:a6:30:a7:50:19:d0:2b:c6: 0b:dc:36:d3:38:47:c1:29:7a:f9:a0:90:f1:37:94: 2e:cc:07:b8:2d:6b:74:d9:51:64:12:05:51:b6:74: e4:89:e2:ec:fb:d4:3b:e3:6e:d5:b3:43:47:0f:af: 8f:77:14:15:bf:6f:ce:a4:e3:fb:2d:65:73:18:c7: ca:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:48:B6:D0:E5:9E:2C:10:71:83:8F:E1:FF:5E:A3:42:16:8A:89:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5ed4554-2a1c-384b-bc2a-a47e415c7d92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.4.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7b:5c:ae:bd:8e:5d:45:8f:e4:53:e7:1a:6b:f1:26:ea:c6: 25:db:36:75:d7:61:79:33:b7:4d:29:ed:1b:55:8e:11:70:2e: b6:3a:a2:95:b3:d3:f2:62:70:08:1f:a7:96:a3:7e:7b:a0:0a: 41:30:3f:97:fe:99:bc:b4:f2:9e:a1:6e:93:9e:07:95:10:c4: 82:9a:df:70:22:29:69:70:4e:85:40:af:b0:d5:f7:db:b7:50: 39:68:93:e5:8b:51:85:0c:e9:2b:05:78:82:9d:58:b9:6e:b1: 2c:b1:ac:31:2e:15:cb:25:07:0a:a8:de:7b:db:e4:c9:0c:e2: 5c:9e:9c:7f:8f:1e:13:e3:b8:8e:c2:58:38:80:23:b3:70:a7: 54:59:9f:20:8d:88:db:76:04:26:a4:19:44:43:f5:b4:69:55: 16:13:a2:97:a9:50:00:29:d0:cf:18:3e:aa:7c:e8:a3:de:fe: ac:e9:e4:de:1e:eb:9a:d4:88:01:74:55:b7:84:9b:32:1e:76: 65:b7:56:af:44:e3:c2:f7:af:3f:f4:c6:d3:69:89:e7:9f:0d: 16:da:68:4c:0f:74:45:a5:dc:d7:08:35:82:ad:4f:64:39:58: 70:9c:cb:64:da:c4:d5:22:dc:cb:08:76:e6:28:03:77:35:e8: 8b:9c:85:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+MnyfLjaknPHPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDZlN2QzNzAtOTM5Yi00MTVhLWJhYTUtZDE3MGIwZTQ4ZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqftxBc505AENvUyTjvNOV5Mk/4Trbz7hErz Xosq771A8hNDwx6XXlegmE78WEeJzhcKvLCX0nz+jyeXRrsoluzj5GvauUyTxlQb pkzu5XkHfm3OfCuoXuY74+AEDdujcar6OD080fDMpuzmW5QXyLM7zlBr/OD5t9lu BPTnLx0zKt9KP12gMlapLKrEy04NvjKjXfmYDADBNUwztntzNHp9cQSky0hBv5aU XRWLB48VgtGqFfm/tTSEpjCnUBnQK8YL3DbTOEfBKXr5oJDxN5QuzAe4LWt02VFk EgVRtnTkieLs+9Q7427Vs0NHD6+PdxQVv2/OpOP7LWVzGMfKywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1IttDlniwQcYOP4f9eo0IWionDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjVlZDQ1NTQtMmExYy0z ODRiLWJjMmEtYTQ3ZTQxNWM3ZDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBawQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHp7XK69jl1Fj+RT5xpr8SbqxiXbNnXXYXkzt00p7RtVjhFwLrY6opWz 0/JicAgfp5ajfnugCkEwP5f+mby08p6hbpOeB5UQxIKa33AiKWlwToVAr7DV99u3 UDlok+WLUYUM6SsFeIKdWLlusSyxrDEuFcslBwqo3nvb5MkM4lyenH+PHhPjuI7C WDiAI7Nwp1RZnyCNiNt2BCakGURD9bRpVRYTopepUAAp0M8YPqp86KPe/qzp5N4e 65rUiAF0VbeEmzIedmW3Vq9E48L3rz/0xtNpieefDRbaaEwPdEWl3NcINYKtT2Q5 WHCcy2TaxNUi3MsIduYoA3c16IuchVg= -----END CERTIFICATE-----Generated at Mon Apr 7 05:49:12 2025 by rpki-client