$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7f67f0-86c9-3249-ac2b-d7c117bf7dd8.roa File: bd7f67f0-86c9-3249-ac2b-d7c117bf7dd8.roa (raw, json) Hash identifier: cKZPxHV9oIEX0PciJ5iZ7o1Z51itfd9Mso7tqJyJs08= Subject key identifier: 24:DA:9C:D4:9A:68:99:B4:A3:02:B0:85:A5:21:17:AB:52:8D:B3:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CF2E1D137C9AC40B9D000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7f67f0-86c9-3249-ac2b-d7c117bf7dd8.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 71.228.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:f2:e1:d1:37:c9:ac:40:b9:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=3edf3da5-da62-4a08-b424-7687c72a5f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:59:6c:59:b3:3f:0d:38:d8:6a:da:da:1a:36: 84:cb:8c:c8:1d:2e:64:7a:ab:76:85:12:26:95:e9: 03:ce:95:b2:d4:8c:c9:56:f1:4a:52:53:44:01:dc: 9b:0d:a6:35:95:57:69:6b:08:d5:1b:41:d4:f5:ce: 3f:57:9a:72:ca:1e:26:60:4d:e6:70:1f:14:90:54: ab:f4:61:6f:fa:db:74:cd:d9:42:e7:72:a9:80:ac: 5b:dd:eb:7b:de:ec:34:80:36:c9:f4:37:54:6e:ce: 14:83:eb:95:2a:09:67:4d:a4:ea:88:38:45:ea:36: 02:09:3e:48:6f:15:ac:b5:27:d6:a2:d1:3f:9c:5e: 19:c4:15:6d:50:63:d0:39:96:d0:f9:8e:00:0b:7f: 07:a5:fc:b1:91:1d:a0:51:b4:c5:05:c7:7a:2a:22: 40:1c:4f:a7:de:de:4f:20:11:c3:98:2f:d0:81:13: e7:c0:e7:e9:88:63:93:be:59:70:db:a8:14:c6:3b: 32:b0:c0:ae:ac:b3:0d:31:4c:93:c9:1e:54:2c:7f: 17:d4:55:1e:c5:5e:c5:cf:30:ba:03:fb:dd:b3:4c: c5:08:4f:9a:4f:8e:78:06:7e:b3:60:5c:e4:61:95: 57:cf:27:2b:06:53:fd:ec:98:3d:2f:5b:5b:b0:af: 96:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DA:9C:D4:9A:68:99:B4:A3:02:B0:85:A5:21:17:AB:52:8D:B3:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd7f67f0-86c9-3249-ac2b-d7c117bf7dd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:43:2b:c3:31:3a:63:ce:36:b9:18:1b:09:79:89:3a:49:46: f4:1e:4d:b9:3c:24:25:ed:55:a4:fa:79:9d:b7:ae:a9:29:42: 8e:38:bd:74:9d:93:18:f3:d8:bc:9f:ae:1e:d2:c3:59:a1:1a: 34:23:35:76:fd:17:98:ad:ea:3d:32:21:c9:f7:ad:e9:98:72: 00:b1:3b:0d:02:43:15:df:79:f6:87:8d:7e:18:fe:49:7a:91: 66:8c:d9:17:6d:d8:2a:1b:32:a7:8d:3b:7d:f3:66:e5:6b:3b: f5:a2:5e:55:79:87:47:a9:19:13:89:5a:2f:83:73:df:14:2b: f7:78:1e:55:a2:f2:c1:3a:dc:31:4c:ed:a6:48:e1:df:d2:e6: c7:ba:3d:9d:69:29:04:ca:4d:cb:67:b4:ad:5f:9b:a1:a1:63: 31:74:a5:97:4f:09:78:e5:c9:7a:a1:d1:80:85:34:3e:3b:c4: 83:ff:d0:00:ce:6e:d3:64:61:50:45:d5:43:59:6c:dd:14:73: 45:ca:1d:87:e8:11:6d:69:ed:61:d8:52:09:02:fc:b1:b9:2f: 39:21:74:fe:e1:cf:d2:6a:d8:bd:6f:d4:48:9e:30:d2:63:6f: 76:e3:ba:f0:4a:a9:b9:e7:77:cc:22:c9:c4:a5:c1:fa:44:85: e1:80:8c:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebPLh0TfJrEC50AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk M2VkZjNkYTUtZGE2Mi00YTA4LWI0MjQtNzY4N2M3MmE1ZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAillsWbM/DTjYatraGjaEy4zIHS5keqt2hRIm lekDzpWy1IzJVvFKUlNEAdybDaY1lVdpawjVG0HU9c4/V5pyyh4mYE3mcB8UkFSr 9GFv+tt0zdlC53KpgKxb3et73uw0gDbJ9DdUbs4Ug+uVKglnTaTqiDhF6jYCCT5I bxWstSfWotE/nF4ZxBVtUGPQOZbQ+Y4AC38HpfyxkR2gUbTFBcd6KiJAHE+n3t5P IBHDmC/QgRPnwOfpiGOTvllw26gUxjsysMCurLMNMUyTyR5ULH8X1FUexV7FzzC6 A/vds0zFCE+aT454Bn6zYFzkYZVXzycrBlP97Jg9L1tbsK+W1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTanNSaaJm0owKwhaUhF6tSjbO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQ3ZjY3ZjAtODZjOS0z MjQ5LWFjMmItZDdjMTE3YmY3ZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+T0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxDK8MxOmPONrkYGwl5iTpJRvQeTbk8JCXtVaT6eZ23rqkpQo44vXSd kxjz2Lyfrh7Sw1mhGjQjNXb9F5it6j0yIcn3remYcgCxOw0CQxXfefaHjX4Y/kl6 kWaM2Rdt2CobMqeNO33zZuVrO/WiXlV5h0epGROJWi+Dc98UK/d4HlWi8sE63DFM 7aZI4d/S5se6PZ1pKQTKTctntK1fm6GhYzF0pZdPCXjlyXqh0YCFND47xIP/0ADO btNkYVBF1UNZbN0Uc0XKHYfoEW1p7WHYUgkC/LG5LzkhdP7hz9Jq2L1v1EieMNJj b3bjuvBKqbnnd8wiycSlwfpEheGAjH4= -----END CERTIFICATE-----Generated at Mon Apr 7 06:34:28 2025 by rpki-client