$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9305802-5fdf-3da8-bce1-791d4c1d66b2.roa File: b9305802-5fdf-3da8-bce1-791d4c1d66b2.roa (raw, json) Hash identifier: x+CkWSfH9OxpkPTwORIa2XrjQcQorInMJ7fiGmjaH5Q= Subject key identifier: E2:18:DA:7D:4A:58:51:86:27:3C:9E:B6:E6:B1:19:91:47:11:FF:4E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0E2542B8C494A8027AF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9305802-5fdf-3da8-bce1-791d4c1d66b2.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 71.201.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:e2:54:2b:8c:49:4a:80:27:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=282c7120-00bc-4053-825f-d3c6c7e369cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7f:c3:1f:8c:b6:96:87:b6:79:59:fd:53:9f: fb:3a:59:79:ff:4f:94:c2:69:0d:b6:22:05:00:bd: f6:db:6a:26:ee:96:ae:26:bf:a7:e0:2a:67:99:2e: 36:eb:e4:4a:03:f3:bd:0e:63:bc:9e:fe:43:c1:45: 99:ac:fe:97:6f:c6:61:cc:a3:93:80:55:06:86:e3: 60:75:71:84:6f:79:f8:f1:60:84:1d:cf:de:68:b3: e2:9a:ff:eb:ca:cf:d0:41:16:7e:50:a5:22:70:f9: 8c:0d:af:d5:92:e2:db:58:cb:2c:7d:81:60:03:fc: 74:c3:3a:b3:08:29:03:77:cf:63:d0:3b:75:02:dd: fc:76:d6:dc:2c:37:1f:e7:f3:99:99:30:c0:84:c0: 3c:cb:df:de:87:1c:2b:8a:5e:28:ce:b0:b0:b0:84: 27:c0:58:b1:b4:57:20:db:9c:40:43:59:30:4c:63: 65:5a:9d:9e:ea:30:aa:09:71:b3:5f:30:eb:da:77: 03:cf:39:3d:c8:8e:01:bf:eb:be:3a:5b:66:02:18: a3:79:fe:15:9f:df:60:76:82:a5:ef:5e:14:a2:d6: e0:3f:32:39:cc:39:37:ff:cb:0c:5e:02:d6:26:ab: 15:0c:22:e6:99:e1:8a:ca:7f:28:39:63:61:80:de: 32:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:18:DA:7D:4A:58:51:86:27:3C:9E:B6:E6:B1:19:91:47:11:FF:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9305802-5fdf-3da8-bce1-791d4c1d66b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:b5:a4:7e:e5:24:67:44:66:26:11:f4:6e:53:58:5a:68:3c: b7:82:65:55:b5:a9:a4:74:f1:84:0d:e6:a4:5d:1a:aa:85:e0: e8:d1:95:6e:c8:55:2c:ea:78:6c:a8:97:96:54:62:47:35:53: af:f9:41:da:51:91:45:a6:1f:91:bc:2e:be:d2:12:3b:e8:a7: e9:b0:01:85:75:50:d4:e9:8d:1a:ef:e2:45:ee:15:56:67:da: fc:57:3b:4f:06:41:44:ff:19:27:c3:5e:31:5b:0b:bd:c3:6e: 47:78:dd:80:56:2b:a0:0b:f4:2c:a3:f8:df:80:8c:62:6f:27: a2:21:f8:78:8b:6e:00:17:70:76:12:81:14:d6:86:65:0e:01: b2:aa:8b:d9:76:c0:91:65:20:c1:40:d9:18:34:a3:2c:84:3e: 1f:90:68:a5:e2:fc:b5:f3:30:e9:61:73:2f:27:7a:ce:ad:f4: 72:52:55:9e:a8:08:07:f1:b2:08:3d:51:fa:18:8f:98:f1:ce: 1c:fd:4c:3b:a5:45:54:b7:6f:c5:2c:e6:e3:44:ac:58:c0:03: 75:8b:07:d3:f5:8e:ee:eb:de:7e:08:62:85:2a:f4:85:70:15: 0d:25:cb:5b:b1:e2:8b:e5:45:c5:19:e6:e5:5f:7b:c9:2d:56: ad:91:12:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssOJUK4xJSoAnr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MjgyYzcxMjAtMDBiYy00MDUzLTgyNWYtZDNjNmM3ZTM2OWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX/DH4y2loe2eVn9U5/7Oll5/0+UwmkNtiIF AL3222om7pauJr+n4CpnmS426+RKA/O9DmO8nv5DwUWZrP6Xb8ZhzKOTgFUGhuNg dXGEb3n48WCEHc/eaLPimv/rys/QQRZ+UKUicPmMDa/VkuLbWMssfYFgA/x0wzqz CCkDd89j0Dt1At38dtbcLDcf5/OZmTDAhMA8y9/ehxwril4ozrCwsIQnwFixtFcg 25xAQ1kwTGNlWp2e6jCqCXGzXzDr2ncDzzk9yI4Bv+u+OltmAhijef4Vn99gdoKl 714UotbgPzI5zDk3/8sMXgLWJqsVDCLmmeGKyn8oOWNhgN4yPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIY2n1KWFGGJzyetuaxGZFHEf9OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjkzMDU4MDItNWZkZi0z ZGE4LWJjZTEtNzkxZDRjMWQ2NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8kSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJi1pH7lJGdEZiYR9G5TWFpoPLeCZVW1qaR08YQN5qRdGqqF4OjRlW7I VSzqeGyol5ZUYkc1U6/5QdpRkUWmH5G8Lr7SEjvop+mwAYV1UNTpjRrv4kXuFVZn 2vxXO08GQUT/GSfDXjFbC73Dbkd43YBWK6AL9Cyj+N+AjGJvJ6Ih+HiLbgAXcHYS gRTWhmUOAbKqi9l2wJFlIMFA2Rg0oyyEPh+QaKXi/LXzMOlhcy8nes6t9HJSVZ6o CAfxsgg9UfoYj5jxzhz9TDulRVS3b8Us5uNErFjAA3WLB9P1ju7r3n4IYoUq9IVw FQ0ly1ux4ovlRcUZ5uVfe8ktVq2RElA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:10:36 2025 by rpki-client