$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bde60f09-1824-3e89-a9b2-e481e63216bb.roa File: bde60f09-1824-3e89-a9b2-e481e63216bb.roa (raw, json) Hash identifier: uUbGil6TD0x+dSVJ5W6A3KKu+3DKhSp7oyrnRLbXKd0= Subject key identifier: 64:AE:C5:70:A2:1C:7B:C7:84:89:AE:C2:43:11:89:A6:AF:0F:C8:FF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB097433528C305093BD2A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bde60f09-1824-3e89-a9b2-e481e63216bb.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 71.230.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:97:43:35:28:c3:05:09:3b:d2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=d36d5807-cf36-438e-a880-fe8f62cadf49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:5c:14:0e:68:41:71:2e:fb:e6:4f:48:57: f0:a2:67:d9:3a:e5:01:3f:42:b7:12:15:41:06:51: 16:5a:f2:3a:e1:f6:05:9a:34:02:8f:21:62:16:d7: e9:3d:b2:b0:34:16:34:9c:2a:20:76:f3:f8:64:84: 04:9c:87:80:58:0e:6b:ca:b3:81:df:78:ed:dd:46: 0e:a7:35:92:4e:58:e3:3b:84:3d:15:d5:e9:05:42: 1f:3a:24:df:cf:39:d1:f9:2a:f2:b4:1c:cd:50:c8: 64:b7:3d:bd:d6:23:bd:32:4e:2d:c0:79:40:38:c0: 69:b5:43:25:bc:48:e1:a9:85:9f:f1:a4:1f:0d:5b: d2:d9:34:fa:f9:d0:ea:71:5c:15:b8:a6:2d:d5:e6: 40:6c:19:4e:23:a8:1b:64:58:62:62:25:d0:6e:81: 5d:8c:6a:7b:79:80:22:84:af:34:cc:cb:4c:67:c3: 29:2b:98:3a:6a:ff:51:57:de:42:dd:ba:47:74:88: 9d:37:35:08:ee:c7:a3:9d:45:f9:7e:f6:70:51:a3: 57:8a:59:8e:4d:04:58:40:d4:c2:a1:ab:09:1a:5d: 41:a3:81:2d:b2:04:0c:ac:a4:81:18:3a:34:2b:51: 00:95:9e:15:77:8a:1e:92:9e:0c:a5:56:25:b8:7a: 9f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AE:C5:70:A2:1C:7B:C7:84:89:AE:C2:43:11:89:A6:AF:0F:C8:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bde60f09-1824-3e89-a9b2-e481e63216bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.230.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:78:be:77:87:52:77:f2:42:18:24:3d:52:15:60:93:63:13: f4:77:8e:2e:bf:d1:d9:6e:a7:87:f0:29:e5:5c:c8:83:40:29: 36:ba:2c:ac:1c:77:3d:8d:82:49:b8:95:e7:dc:c9:17:04:39: 23:e4:6b:4c:4a:72:94:f0:05:56:98:b0:db:cb:f5:5b:95:ce: 2a:74:02:80:52:6a:50:f5:b3:5a:19:56:3f:a2:3b:3b:02:68: 01:1a:9b:7a:8e:f1:cd:df:71:7d:39:2b:90:50:c1:e9:71:39: 9e:4a:6a:2e:ae:c3:6e:be:c7:20:fa:9d:5f:eb:4f:06:f8:81: 56:e2:ac:c7:2e:03:24:c3:20:f0:0c:47:a2:76:99:d2:c8:bf: 3c:fd:ed:fb:77:13:30:72:72:17:a3:c0:cc:bb:cd:41:49:b5: c8:a3:c1:9c:60:17:10:aa:c0:55:93:51:1b:ad:fb:df:78:30: 20:ba:42:f1:d2:cd:e7:db:a9:a8:c5:9f:7b:59:5f:b7:2e:13: 2e:c0:9f:6d:1f:0f:a3:be:e7:83:da:7b:06:c6:35:7b:36:86: e2:27:1a:1c:db:3c:9a:ac:eb:40:6b:6e:12:02:49:d5:16:0c: c4:7e:0f:4e:af:1f:71:9c:af:2f:b0:07:23:4b:bc:d0:da:04: 62:da:af:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssJdDNSjDBQk70qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDM2ZDU4MDctY2YzNi00MzhlLWE4ODAtZmU4ZjYyY2FkZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPlcFA5oQXEu++ZPSFfwomfZOuUBP0K3EhVB BlEWWvI64fYFmjQCjyFiFtfpPbKwNBY0nCogdvP4ZIQEnIeAWA5ryrOB33jt3UYO pzWSTljjO4Q9FdXpBUIfOiTfzznR+SrytBzNUMhktz291iO9Mk4twHlAOMBptUMl vEjhqYWf8aQfDVvS2TT6+dDqcVwVuKYt1eZAbBlOI6gbZFhiYiXQboFdjGp7eYAi hK80zMtMZ8MpK5g6av9RV95C3bpHdIidNzUI7sejnUX5fvZwUaNXilmOTQRYQNTC oasJGl1Bo4EtsgQMrKSBGDo0K1EAlZ4Vd4oekp4MpVYluHqfbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSuxXCiHHvHhImuwkMRiaavD8j/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmRlNjBmMDktMTgyNC0z ZTg5LWE5YjItZTQ4MWU2MzIxNmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+aSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE94vneHUnfyQhgkPVIVYJNjE/R3ji6/0dlup4fwKeVcyINAKTa6LKwc dz2Ngkm4lefcyRcEOSPka0xKcpTwBVaYsNvL9VuVzip0AoBSalD1s1oZVj+iOzsC aAEam3qO8c3fcX05K5BQwelxOZ5Kai6uw26+xyD6nV/rTwb4gVbirMcuAyTDIPAM R6J2mdLIvzz97ft3EzBychejwMy7zUFJtcijwZxgFxCqwFWTURut+994MCC6QvHS zefbqajFn3tZX7cuEy7An20fD6O+54PaewbGNXs2huInGhzbPJqs60BrbhICSdUW DMR+D06vH3Gcry+wByNLvNDaBGLar5E= -----END CERTIFICATE-----Generated at Sun Apr 6 23:00:28 2025 by rpki-client