$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7f2241-bd47-30f4-ad8c-16cbf65f1b4f.roa File: be7f2241-bd47-30f4-ad8c-16cbf65f1b4f.roa (raw, json) Hash identifier: dd9Klw+5lofV4GnOmjjvZ45WsdvQxf61BiXzVeGvMAc= Subject key identifier: 3F:D1:CA:07:67:05:D1:43:DE:2E:B6:B1:8F:D4:1F:BD:59:A8:C2:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFEF4A28087398E0627180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7f2241-bd47-30f4-ad8c-16cbf65f1b4f.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 71.204.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:ef:4a:28:08:73:98:e0:62:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=2df82b38-142e-4130-a0a0-2439307951ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:35:1f:08:84:42:3e:56:88:ad:78:e8:45:84: 93:c4:bc:68:f4:da:e4:d2:73:fb:f7:a3:81:12:b3: 9d:56:63:5e:fa:1f:64:1d:01:ff:ab:c9:b5:a4:63: 83:3a:88:85:44:4f:c1:b5:33:c0:0e:40:a4:61:8d: 36:9e:9d:0b:46:4e:69:30:e2:5c:2b:99:ba:44:73: 55:49:87:fc:3b:86:f1:ca:9b:e1:15:1f:9e:5b:37: a7:bb:54:a8:ca:fd:62:c9:e3:15:f4:72:3b:a7:47: db:f5:e2:d7:53:90:6e:cd:63:9a:46:b4:8a:c5:5a: b0:7f:c5:09:99:2a:ca:90:2b:1b:e7:4a:e2:5b:14: ca:fa:fd:f1:df:54:e8:e1:d3:15:25:6c:7d:2c:29: 9d:d5:25:fb:56:f9:68:45:a5:2c:0e:49:e4:c5:73: 18:09:d2:4c:a1:0e:7e:80:e2:e6:1e:58:42:dc:e6: a9:18:13:09:13:7c:7b:0b:41:dc:aa:c8:bf:e0:b9: c3:bf:a7:1c:d7:c4:6e:7f:53:52:ca:b7:d2:86:ad: bc:46:77:06:c0:d8:6f:07:d0:98:02:59:00:22:a4: ad:e7:14:f1:c4:73:1a:9f:c5:f4:a3:73:12:c9:3a: a7:a7:86:60:24:dd:e8:9b:02:c0:1d:82:89:29:47: 22:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D1:CA:07:67:05:D1:43:DE:2E:B6:B1:8F:D4:1F:BD:59:A8:C2:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be7f2241-bd47-30f4-ad8c-16cbf65f1b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:f2:bf:73:a1:02:f2:16:a8:66:60:84:6c:fe:1b:b3:2d:05: 46:1d:bd:bb:43:25:3d:87:5d:77:bd:51:97:65:61:65:b5:c8: 35:15:a4:d2:47:82:38:04:ed:5a:bc:ac:df:f5:e1:39:f3:ac: 38:0c:f8:01:16:8a:f3:21:07:21:bc:b3:04:ec:b8:8d:75:52: 66:db:f9:22:52:c4:f5:01:19:f3:4d:a4:22:af:4a:05:17:20: 4d:5b:7c:3d:95:74:b1:0b:1a:1b:3d:2b:cc:25:06:6b:90:32: 19:1d:3c:e5:f0:39:5f:78:fa:4b:57:ae:3d:81:62:c3:8e:af: 28:29:37:e4:e1:b7:5d:02:a7:64:21:82:f5:ce:65:e3:0b:75: a2:bd:d6:61:cb:ce:29:d1:6a:8f:5f:e7:95:a4:ed:51:b7:fb: 06:00:cb:a0:0e:74:2a:e9:57:f9:52:b8:c4:5a:7d:f4:ea:8d: 14:08:35:ba:e3:5c:74:1b:52:a5:11:7e:15:07:22:c7:31:3b: 9a:b5:15:a6:85:c8:80:5c:c1:7e:d2:84:03:57:70:0a:1a:7f: 70:0d:0e:e4:b2:1d:65:21:ad:34:79:5c:ed:b8:3b:33:62:a3: 30:d0:87:ff:ba:93:65:df:5b:e9:53:55:24:a0:7b:60:c5:26: b7:58:21:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr+9KKAhzmOBicYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MmRmODJiMzgtMTQyZS00MTMwLWEwYTAtMjQzOTMwNzk1MWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijUfCIRCPlaIrXjoRYSTxLxo9Nrk0nP796OB ErOdVmNe+h9kHQH/q8m1pGODOoiFRE/BtTPADkCkYY02np0LRk5pMOJcK5m6RHNV SYf8O4bxypvhFR+eWzenu1Soyv1iyeMV9HI7p0fb9eLXU5BuzWOaRrSKxVqwf8UJ mSrKkCsb50riWxTK+v3x31To4dMVJWx9LCmd1SX7VvloRaUsDknkxXMYCdJMoQ5+ gOLmHlhC3OapGBMJE3x7C0Hcqsi/4LnDv6cc18Ruf1NSyrfShq28RncGwNhvB9CY AlkAIqSt5xTxxHMan8X0o3MSyTqnp4ZgJN3omwLAHYKJKUciuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/RygdnBdFD3i62sY/UH71ZqMLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmU3ZjIyNDEtYmQ0Ny0z MGY0LWFkOGMtMTZjYmY2NWYxYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8yoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLyv3OhAvIWqGZghGz+G7MtBUYdvbtDJT2HXXe9UZdlYWW1yDUVpNJH gjgE7Vq8rN/14TnzrDgM+AEWivMhByG8swTsuI11Umbb+SJSxPUBGfNNpCKvSgUX IE1bfD2VdLELGhs9K8wlBmuQMhkdPOXwOV94+ktXrj2BYsOOrygpN+Tht10Cp2Qh gvXOZeMLdaK91mHLzinRao9f55Wk7VG3+wYAy6AOdCrpV/lSuMRaffTqjRQINbrj XHQbUqURfhUHIscxO5q1FaaFyIBcwX7ShANXcAoaf3ANDuSyHWUhrTR5XO24OzNi ozDQh/+6k2XfW+lTVSSge2DFJrdYIbI= -----END CERTIFICATE-----Generated at Mon Apr 7 05:46:32 2025 by rpki-client