$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5216fc9-8306-30f2-91a4-a9f71b298a46.roa File: c5216fc9-8306-30f2-91a4-a9f71b298a46.roa (raw, json) Hash identifier: gQeUbAO3pWYPfn0kkqLFXINhiGrK/7yNGvTitUfTIBs= Subject key identifier: E1:98:76:96:10:1E:0D:B6:C0:7D:69:3C:EB:EC:90:EE:AA:9B:8E:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CF31CE51FF2913C450E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5216fc9-8306-30f2-91a4-a9f71b298a46.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 71.236.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:f3:1c:e5:1f:f2:91:3c:45:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=ccf47290-9687-4c56-b0b4-e30064c190e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:a2:34:65:1c:de:df:90:1c:ee:73:50:ce: 7d:fb:cc:91:cc:18:d9:04:4a:19:45:d4:da:ba:42: bd:2f:c4:36:e0:2c:9e:c5:7e:c3:c1:62:9e:23:20: 2f:12:a2:fb:13:b2:72:cc:e3:45:40:98:66:90:a9: c6:d1:9d:40:84:5b:80:5a:f6:a7:6f:c4:0a:78:04: 46:8c:ca:c8:34:a3:2d:52:f9:57:f2:ff:3f:f7:8a: 8c:b6:1a:ce:4b:9c:26:24:dd:57:31:b2:f9:26:4b: 11:4d:ca:82:44:42:5c:95:f5:0f:ad:a5:89:9d:e9: 3f:cc:5d:79:e6:47:08:75:e2:ee:dd:e2:5d:3d:63: 1d:ab:50:10:bb:fb:a1:13:f4:15:dd:92:92:e9:c2: 42:08:8a:5d:3f:4c:8a:fc:7e:4e:57:65:49:78:0f: 7d:9e:ce:44:59:47:8a:aa:30:05:c7:2a:6d:b6:0f: 20:99:84:cb:32:07:3c:a6:7d:d9:bc:7e:f1:9c:80: b2:06:c1:67:38:1e:42:c6:35:4c:de:c7:9e:65:42: 09:d2:6a:cf:43:4c:e5:7c:95:81:52:91:34:5d:60: a5:64:c2:9d:fe:a3:80:37:61:4d:e7:57:0c:fe:4f: de:f1:b0:b0:36:50:1b:10:ae:78:35:a3:d0:18:d5: 1f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:98:76:96:10:1E:0D:B6:C0:7D:69:3C:EB:EC:90:EE:AA:9B:8E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5216fc9-8306-30f2-91a4-a9f71b298a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.236.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:81:8d:08:c8:68:ab:ab:dd:b6:6a:6c:f4:0f:ae:db:16:73: ec:1e:e6:11:02:22:c1:1b:e9:3d:ef:d3:e3:bb:27:33:ea:4d: 51:65:d5:ad:e2:e2:6a:31:88:d1:e4:ca:e2:94:e8:19:1e:56: 93:8a:14:fd:d3:e4:73:2c:c8:c3:b1:69:e9:bc:1a:ce:5f:23: 99:df:94:72:6d:18:38:76:cc:40:17:93:c1:3e:2a:a8:57:0a: dc:c1:7d:a3:2c:41:11:d7:de:ac:08:89:25:ad:cc:8f:10:e8: 20:88:32:a1:a8:ea:fe:6d:ee:30:56:05:0f:70:74:71:86:a7: 5f:46:67:27:1e:b4:d0:e2:d9:37:30:13:53:ad:69:43:3d:aa: 0c:b5:61:c0:85:2e:39:35:45:7d:a5:4f:8c:e8:e3:d2:52:3d: 07:ed:a5:63:a0:87:92:31:69:73:db:03:b9:47:b5:2e:de:45: 3c:c3:74:dd:52:c0:a6:e7:85:16:39:0b:73:f0:33:6a:b3:54: 2d:83:54:72:b4:82:3a:9a:37:30:09:94:8a:05:2f:3e:dd:b9: 42:cf:0f:89:ea:44:fb:39:05:26:2a:d0:76:a8:ad:1d:4f:24: ae:51:f2:54:42:08:aa:33:b9:c0:80:5e:7b:79:f2:55:c2:95: 40:57:4f:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebPMc5R/ykTxFDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Y2NmNDcyOTAtOTY4Ny00YzU2LWIwYjQtZTMwMDY0YzE5MGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkSiNGUc3t+QHO5zUM59+8yRzBjZBEoZRdTa ukK9L8Q24CyexX7DwWKeIyAvEqL7E7JyzONFQJhmkKnG0Z1AhFuAWvanb8QKeARG jMrINKMtUvlX8v8/94qMthrOS5wmJN1XMbL5JksRTcqCREJclfUPraWJnek/zF15 5kcIdeLu3eJdPWMdq1AQu/uhE/QV3ZKS6cJCCIpdP0yK/H5OV2VJeA99ns5EWUeK qjAFxypttg8gmYTLMgc8pn3ZvH7xnICyBsFnOB5CxjVM3seeZUIJ0mrPQ0zlfJWB UpE0XWClZMKd/qOAN2FN51cM/k/e8bCwNlAbEK54NaPQGNUf7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGYdpYQHg22wH1pPOvskO6qm45kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzUyMTZmYzktODMwNi0z MGYyLTkxYTQtYTlmNzFiMjk4YTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+woMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyBjQjIaKur3bZqbPQPrtsWc+we5hECIsEb6T3v0+O7JzPqTVFl1a3i 4moxiNHkyuKU6BkeVpOKFP3T5HMsyMOxaem8Gs5fI5nflHJtGDh2zEAXk8E+KqhX CtzBfaMsQRHX3qwIiSWtzI8Q6CCIMqGo6v5t7jBWBQ9wdHGGp19GZycetNDi2Tcw E1OtaUM9qgy1YcCFLjk1RX2lT4zo49JSPQftpWOgh5IxaXPbA7lHtS7eRTzDdN1S wKbnhRY5C3PwM2qzVC2DVHK0gjqaNzAJlIoFLz7duULPD4nqRPs5BSYq0HaorR1P JK5R8lRCCKozucCAXnt58lXClUBXT9o= -----END CERTIFICATE-----Generated at Mon Apr 7 05:56:02 2025 by rpki-client