$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c35ca2bf-eba8-398a-b5fa-9c74519ae163.roa File: c35ca2bf-eba8-398a-b5fa-9c74519ae163.roa (raw, json) Hash identifier: ZarMTma7pYimqLRoij96yL77yT6GGp88IPi3+4a4QNk= Subject key identifier: E0:EE:6F:88:33:F4:19:49:E2:6C:A5:FC:79:41:00:77:F3:70:70:BE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7D73F2D4FFD34A2D80740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c35ca2bf-eba8-398a-b5fa-9c74519ae163.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 174.171.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:d7:3f:2d:4f:fd:34:a2:d8:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ca1eaa3d-f055-4e4c-94d0-e6b567eb8064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e2:bf:f5:fd:ce:b0:48:8a:c5:2a:0f:aa:7a: 1f:79:59:38:7b:09:f5:62:af:51:d3:78:a3:c2:ba: be:81:48:1b:eb:f3:79:e3:3b:fe:27:fa:a2:ad:29: 2c:24:23:f2:a5:5d:78:61:cb:01:0c:a6:21:1e:7b: 22:0d:ff:9b:b9:61:ef:b3:5b:42:ec:d5:de:7e:50: 32:d3:e4:17:af:46:94:80:e7:b5:33:a4:5b:13:06: 03:af:27:1e:66:ea:af:03:39:a3:86:ef:45:0f:5d: d7:d8:0e:f6:08:a6:82:02:c8:36:0f:a8:ec:55:64: 9f:d7:4c:b0:92:c4:e9:eb:73:00:ce:7e:5f:f4:f8: fc:24:1a:a5:fb:5f:c3:12:43:42:d9:c3:61:6b:e5: 3e:91:ea:5a:75:23:a0:76:63:4a:f2:33:cd:15:0c: c6:03:21:21:1a:1c:28:2d:c0:ef:57:8f:8c:0c:1c: c1:18:a9:ab:e9:af:6f:41:50:0a:f3:92:ce:c2:c7: 87:fa:07:bc:3a:d4:ba:30:88:d9:48:c4:c9:86:d1: c1:85:b8:08:8b:e7:de:9a:4f:01:52:9c:5d:b8:dc: 46:c7:f8:e7:57:71:42:c6:a6:45:b2:87:81:85:12: 0a:1c:a8:02:fb:c4:18:8e:db:7a:2a:c1:db:ab:63: c0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EE:6F:88:33:F4:19:49:E2:6C:A5:FC:79:41:00:77:F3:70:70:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c35ca2bf-eba8-398a-b5fa-9c74519ae163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5e:5b:c1:92:08:ea:4c:30:96:23:8d:d1:01:89:10:c9:0e: 2d:ce:d6:da:03:b0:ac:5f:16:5f:6d:be:02:d4:d4:7f:ea:8a: 82:54:1a:9b:8e:25:6a:96:1c:4e:d9:c5:70:f3:84:4c:ac:be: c1:e5:8f:5a:66:b6:c4:22:92:dc:73:a0:1f:06:42:27:2e:09: c7:fa:cb:f1:35:54:db:3a:d5:39:63:75:6e:cd:5f:55:6f:f7: f1:45:06:19:e3:e2:af:08:1d:74:04:0b:6d:94:d9:8c:49:e7: ff:75:4c:98:45:b5:7e:3f:fa:f9:c8:d9:29:e0:a0:17:4b:a1: b9:17:9d:fb:43:5f:f9:90:76:66:96:dd:1a:1d:52:8f:9a:52: dd:af:c0:06:94:2a:e2:8c:ad:5c:81:df:85:09:f9:82:bd:58: d4:d2:19:03:54:25:79:53:5e:12:a7:57:4a:53:c6:a6:97:d7: df:a6:21:91:d5:1e:46:c5:0d:77:83:aa:88:25:2c:4c:02:c7: d2:cb:c0:d7:4e:3a:f8:8d:30:50:6d:14:3c:d8:af:02:47:91: 10:04:b9:5d:3d:e3:d3:ab:f4:fd:36:03:c7:9c:ef:76:0d:a0: c7:56:95:cc:f4:bf:5a:2f:b2:9b:f2:73:15:f6:38:b0:1f:15: a1:f1:1b:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj099c/LU/9NKLYB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk Y2ExZWFhM2QtZjA1NS00ZTRjLTk0ZDAtZTZiNTY3ZWI4MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+K/9f3OsEiKxSoPqnofeVk4ewn1Yq9R03ij wrq+gUgb6/N54zv+J/qirSksJCPypV14YcsBDKYhHnsiDf+buWHvs1tC7NXeflAy 0+QXr0aUgOe1M6RbEwYDryceZuqvAzmjhu9FD13X2A72CKaCAsg2D6jsVWSf10yw ksTp63MAzn5f9Pj8JBql+1/DEkNC2cNha+U+kepadSOgdmNK8jPNFQzGAyEhGhwo LcDvV4+MDBzBGKmr6a9vQVAK85LOwseH+ge8OtS6MIjZSMTJhtHBhbgIi+femk8B UpxduNxGx/jnV3FCxqZFsoeBhRIKHKgC+8QYjtt6KsHbq2PAiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODub4gz9BlJ4myl/HlBAHfzcHC+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzM1Y2EyYmYtZWJhOC0z OThhLWI1ZmEtOWM3NDUxOWFlMTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrquYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFeW8GSCOpMMJYjjdEBiRDJDi3O1toDsKxfFl9tvgLU1H/qioJUGpuO JWqWHE7ZxXDzhEysvsHlj1pmtsQiktxzoB8GQicuCcf6y/E1VNs61TljdW7NX1Vv 9/FFBhnj4q8IHXQEC22U2YxJ5/91TJhFtX4/+vnI2SngoBdLobkXnftDX/mQdmaW 3RodUo+aUt2vwAaUKuKMrVyB34UJ+YK9WNTSGQNUJXlTXhKnV0pTxqaX19+mIZHV HkbFDXeDqoglLEwCx9LLwNdOOviNMFBtFDzYrwJHkRAEuV0949Or9P02A8ec73YN oMdWlcz0v1ovspvycxX2OLAfFaHxGxs= -----END CERTIFICATE-----Generated at Mon Apr 7 06:33:22 2025 by rpki-client