$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9a40f0-6999-3e9a-860d-c84c134acd1e.roa File: bf9a40f0-6999-3e9a-860d-c84c134acd1e.roa (raw, json) Hash identifier: DGeOP1x4JACXPIjOuM0DgYoLcV88iMkGJFjH/t/usX8= Subject key identifier: 0E:FB:10:F7:AD:CC:9B:BC:F0:19:1E:94:D6:5F:10:97:00:34:B8:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFEED7BBE9A5EAB11F8F10 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9a40f0-6999-3e9a-860d-c84c134acd1e.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 71.202.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:ee:d7:bb:e9:a5:ea:b1:1f:8f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=56eee568-fe36-48a3-a653-80ddfd6892ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:33:87:a5:34:77:6e:1b:5f:b7:8e:eb:e7:f5: 46:5c:b4:27:0d:0e:6a:26:51:8e:30:8e:e5:22:3a: c7:f9:2d:23:bf:0a:e2:1f:8b:75:2e:1a:bc:fd:cb: 2c:35:b9:fb:c9:84:19:7f:4a:56:b2:f6:a7:a6:b0: ce:77:e3:10:eb:31:4a:dc:bd:c6:cd:eb:81:92:0b: 54:eb:ec:8f:5b:61:13:7b:27:36:8b:78:22:e2:8a: bf:48:3b:ff:63:ca:6d:23:8a:70:27:65:75:fa:3f: b1:db:c9:19:4a:07:36:4e:74:02:2d:b4:b5:0f:aa: 42:e8:ca:61:6c:13:f8:ca:8f:c3:3c:99:66:55:a2: d4:b7:8d:34:d6:16:90:c8:96:44:86:4f:ff:c0:02: 81:d4:ae:04:39:65:18:7c:af:c0:33:da:ab:f8:4f: 50:6b:70:bd:ff:7d:88:02:42:d7:b1:a0:0c:21:4c: d8:9b:11:ee:3d:21:3e:89:06:20:76:19:c5:cc:be: 77:b3:51:8e:16:33:5c:dc:1a:34:96:6e:f1:54:cb: 4a:fa:e5:4d:3f:bb:5e:ad:56:c0:67:b6:91:6e:68: c1:98:f7:51:11:6d:81:c1:6c:c5:62:50:b9:2c:5e: 40:bc:d3:68:38:63:0c:43:63:94:09:e8:6e:be:b1: d0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FB:10:F7:AD:CC:9B:BC:F0:19:1E:94:D6:5F:10:97:00:34:B8:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9a40f0-6999-3e9a-860d-c84c134acd1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.202.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:23:8e:39:a7:1d:00:84:86:01:07:58:16:e4:c6:bb:da:bd: 17:3b:c9:66:a3:6b:b8:ef:c8:25:8d:63:f6:2a:54:94:8b:9b: 06:33:dc:9d:be:11:41:5f:44:db:21:f2:10:77:be:29:95:a4: 50:73:06:ef:d3:10:29:ed:af:95:87:22:61:94:b7:a3:10:c9: 82:6b:8b:6f:a1:71:21:63:ec:3c:f9:73:a0:07:96:37:93:a3: fe:4a:fd:56:07:15:8e:b4:d5:48:96:4e:99:8b:c5:98:f3:28: fa:9e:76:9b:5c:9b:00:db:0e:b3:74:3b:4b:51:17:9c:59:b1: dd:84:83:e3:23:7e:38:82:64:42:ef:89:de:1d:e3:40:34:2e: e0:65:aa:12:eb:a9:a3:c7:dc:c4:c5:7e:61:b8:f7:ae:0b:f8: c3:3b:8a:10:e6:4f:0f:49:d0:86:66:5a:75:17:50:1f:9a:56: e5:9f:0d:f4:a4:24:c1:9a:d0:79:ac:ad:ac:93:fc:87:a3:0b: 3b:57:c0:6b:ae:fa:9b:eb:d3:f1:1a:58:28:15:6f:b4:96:34: 5b:55:db:46:e4:48:e0:c8:72:f1:e7:1c:d8:4b:78:e0:45:6f: 20:2e:e5:19:05:53:84:21:35:50:17:90:2b:c0:9f:97:d7:35: c6:5b:21:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr+7Xu+ml6rEfjxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NTZlZWU1NjgtZmUzNi00OGEzLWE2NTMtODBkZGZkNjg5MmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzOHpTR3bhtft47r5/VGXLQnDQ5qJlGOMI7l IjrH+S0jvwriH4t1Lhq8/cssNbn7yYQZf0pWsvanprDOd+MQ6zFK3L3GzeuBkgtU 6+yPW2ETeyc2i3gi4oq/SDv/Y8ptI4pwJ2V1+j+x28kZSgc2TnQCLbS1D6pC6Mph bBP4yo/DPJlmVaLUt4001haQyJZEhk//wAKB1K4EOWUYfK/AM9qr+E9Qa3C9/32I AkLXsaAMIUzYmxHuPSE+iQYgdhnFzL53s1GOFjNc3Bo0lm7xVMtK+uVNP7terVbA Z7aRbmjBmPdREW2BwWzFYlC5LF5AvNNoOGMMQ2OUCehuvrHQvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA77EPetzJu88BkelNZfEJcANLilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY5YTQwZjAtNjk5OS0z ZTlhLTg2MGQtYzg0YzEzNGFjZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8owMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwjjjmnHQCEhgEHWBbkxrvavRc7yWaja7jvyCWNY/YqVJSLmwYz3J2+ EUFfRNsh8hB3vimVpFBzBu/TECntr5WHImGUt6MQyYJri2+hcSFj7Dz5c6AHljeT o/5K/VYHFY601UiWTpmLxZjzKPqedptcmwDbDrN0O0tRF5xZsd2Eg+MjfjiCZELv id4d40A0LuBlqhLrqaPH3MTFfmG4964L+MM7ihDmTw9J0IZmWnUXUB+aVuWfDfSk JMGa0HmsrayT/IejCztXwGuu+pvr0/EaWCgVb7SWNFtV20bkSODIcvHnHNhLeOBF byAu5RkFU4QhNVAXkCvAn5fXNcZbIZw= -----END CERTIFICATE-----Generated at Mon Apr 7 09:31:24 2025 by rpki-client