$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/beec5eb0-9544-32a8-9394-07e38e6d893a.roa File: beec5eb0-9544-32a8-9394-07e38e6d893a.roa (raw, json) Hash identifier: +NkedEOBSKblZ+7RNfKbTMJGjoKbSde0mhXQBBlo4eo= Subject key identifier: 46:12:A2:FE:FA:30:77:2E:A2:7E:2C:13:7C:5B:FD:D5:EB:F8:91:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6BBE0D75709F0147A3D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/beec5eb0-9544-32a8-9394-07e38e6d893a.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 71.236.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:bb:e0:d7:57:09:f0:14:7a:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=7332f383-adb0-472a-be57-c30adaa63534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:38:b9:32:b6:d2:39:2c:11:d5:d2:7b:fd:73: e8:b6:17:08:fc:fd:a0:59:40:34:95:6f:77:67:9a: 98:d4:93:06:55:72:77:21:f6:94:a7:c0:9e:70:d5: ed:e7:a6:85:1f:6a:df:fd:6c:cf:06:78:4c:7a:c0: ed:00:64:e0:b0:07:80:34:32:fc:ac:d1:44:ac:e3: ba:14:24:7f:30:72:fb:99:70:91:d6:14:49:9d:d3: 0f:4e:77:89:08:75:46:de:9d:2c:0d:2e:81:b6:a8: 4f:09:aa:b9:6a:69:f4:69:d6:10:4a:71:63:c1:5f: 0f:f8:0d:33:0d:2f:71:12:a0:45:18:f9:a4:3e:24: 72:da:1b:ed:b7:5d:3a:b3:04:8e:2a:8d:1b:25:d2: ff:ee:7e:22:5d:d3:d7:b9:91:d7:a5:71:79:9b:65: 8e:a3:75:5e:17:a1:13:16:57:eb:9b:98:39:ac:7e: 4c:75:e2:f2:74:03:29:99:2a:f6:5a:43:a1:73:53: 2b:a7:7e:b1:c2:3b:57:1f:2c:d5:a7:e4:8c:b3:ec: 58:30:28:d7:fc:24:7a:a2:71:26:7b:25:d4:30:4c: ef:3f:f6:c5:bb:57:a9:19:df:5d:cf:95:b7:d3:e9: a5:f7:c3:31:92:25:51:71:3b:ac:49:24:ea:be:80: 5b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:12:A2:FE:FA:30:77:2E:A2:7E:2C:13:7C:5B:FD:D5:EB:F8:91:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/beec5eb0-9544-32a8-9394-07e38e6d893a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.236.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:88:a5:5f:6d:6d:e2:35:a1:06:63:fc:ba:54:e8:e8:5c:92: 70:c1:b0:19:00:f3:0e:43:14:e1:0a:a9:74:1e:5b:03:f4:7b: 31:1c:fd:e7:be:64:af:20:1c:35:d0:df:a7:d8:65:a4:f0:4b: eb:b7:c1:b2:61:9e:82:fc:00:87:ff:15:e0:d1:66:23:6d:79: fe:40:0b:99:44:62:be:65:45:e4:51:a6:3f:29:d2:3a:0f:26: 2a:ed:45:60:45:ca:11:d6:5b:64:61:c5:28:a8:40:de:d6:9f: 96:69:82:2b:b7:4b:28:ad:50:fe:b3:e6:c9:69:57:25:5b:fb: 79:10:92:45:c5:c1:72:c4:43:66:c7:84:5c:73:93:ce:d8:d8: ec:b1:1e:61:71:6e:3d:b5:33:95:ca:96:00:8d:db:8b:9d:19: fb:c0:cf:23:f6:0d:d1:a7:e6:f6:12:2e:6c:d8:99:bc:22:6c: b6:e8:cc:66:23:d9:55:a3:8e:2b:91:31:f9:a5:8f:22:4c:8a: fc:ec:82:e4:59:3a:80:e9:53:56:3a:eb:53:89:4b:a8:66:6c: 81:b8:48:9a:fa:ba:33:0f:2b:11:b0:e9:80:d0:a9:0d:fd:8b: 7f:aa:0b:be:0b:b3:0f:c0:74:41:0a:b1:ed:93:c6:c4:da:1b: 81:b9:27:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09rvg11cJ8BR6PQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NzMzMmYzODMtYWRiMC00NzJhLWJlNTctYzMwYWRhYTYzNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzi5MrbSOSwR1dJ7/XPothcI/P2gWUA0lW93 Z5qY1JMGVXJ3IfaUp8CecNXt56aFH2rf/WzPBnhMesDtAGTgsAeANDL8rNFErOO6 FCR/MHL7mXCR1hRJndMPTneJCHVG3p0sDS6BtqhPCaq5amn0adYQSnFjwV8P+A0z DS9xEqBFGPmkPiRy2hvtt106swSOKo0bJdL/7n4iXdPXuZHXpXF5m2WOo3VeF6ET Flfrm5g5rH5MdeLydAMpmSr2WkOhc1Mrp36xwjtXHyzVp+SMs+xYMCjX/CR6onEm eyXUMEzvP/bFu1epGd9dz5W30+ml98MxkiVRcTusSSTqvoBbBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYSov76MHcuon4sE3xb/dXr+JEJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmVlYzVlYjAtOTU0NC0z MmE4LTkzOTQtMDdlMzhlNmQ4OTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR+zdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOIpV9tbeI1oQZj/LpU6OhcknDBsBkA8w5DFOEKqXQeWwP0ezEc/ee+ ZK8gHDXQ36fYZaTwS+u3wbJhnoL8AIf/FeDRZiNtef5AC5lEYr5lReRRpj8p0joP JirtRWBFyhHWW2RhxSioQN7Wn5Zpgiu3SyitUP6z5slpVyVb+3kQkkXFwXLEQ2bH hFxzk87Y2OyxHmFxbj21M5XKlgCN24udGfvAzyP2DdGn5vYSLmzYmbwibLbozGYj 2VWjjiuRMfmljyJMivzsguRZOoDpU1Y661OJS6hmbIG4SJr6ujMPKxGw6YDQqQ39 i3+qC74Lsw/AdEEKse2TxsTaG4G5JzE= -----END CERTIFICATE-----Generated at Mon Apr 7 06:35:51 2025 by rpki-client