$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c80679e0-1c6c-39d9-b5bb-88780e7916fa.roa File: c80679e0-1c6c-39d9-b5bb-88780e7916fa.roa (raw, json) Hash identifier: yYF/h9I3AZMGmHxUKQmEWU92smrY9pN7UbnffLgLo7I= Subject key identifier: 94:85:37:31:E6:1F:63:27:50:5A:7F:BF:C3:98:4A:CA:59:69:E4:07 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C3C98445164AD49069400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c80679e0-1c6c-39d9-b5bb-88780e7916fa.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 71.236.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:3c:98:44:51:64:ad:49:06:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=8aedec6a-b467-489e-bd91-7c5c1f6a9d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:dc:bf:55:da:46:be:b4:b3:5e:b0:37:3e:23: 1b:f4:06:cc:5f:2f:3a:68:96:c7:f0:5a:e7:a4:9b: c8:31:c0:36:a8:a4:3b:9d:43:f6:a6:85:36:e2:3c: ed:b2:19:43:c3:2f:a7:2e:5b:94:d1:a5:07:53:57: 93:ba:5b:1e:01:52:3a:9f:f1:0e:20:30:86:b3:18: ae:20:1a:01:a7:58:4b:bb:df:39:d7:91:a7:5c:8a: ff:e7:6c:de:c5:e4:47:d9:71:90:10:82:69:c8:e8: 59:32:6b:34:be:a6:12:0d:b9:9c:78:6b:48:2a:7b: 70:ad:88:af:3f:5a:46:a3:24:de:3b:58:81:bc:7b: aa:f3:ac:f2:ca:0e:a7:b5:a8:2d:b7:55:0a:60:52: 43:be:0f:30:33:b4:34:95:20:81:6c:2c:f3:4b:a4: 1a:eb:4a:86:7e:52:6b:dc:d5:03:32:b9:61:d4:c1: b6:9f:3b:4d:41:a5:e7:59:68:b1:a5:43:88:39:e2: 01:bd:6d:a2:97:35:31:99:68:c2:5e:69:e9:1a:d9: c7:79:a8:2c:c6:03:23:b3:3e:31:fa:68:2c:ef:a0: e6:fc:9b:d2:d3:10:e7:68:11:70:c4:05:39:38:23: 17:29:3c:a1:94:ad:95:78:28:cf:9b:15:e2:c2:b4: a6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:85:37:31:E6:1F:63:27:50:5A:7F:BF:C3:98:4A:CA:59:69:E4:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c80679e0-1c6c-39d9-b5bb-88780e7916fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.236.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:70:84:72:3c:75:e9:95:12:e3:51:49:08:ec:10:8d:49:60: 87:29:1c:2b:e7:7c:1d:e6:60:47:9b:60:13:28:cc:b4:19:67: 9d:3e:52:69:00:b2:0f:71:cb:6f:13:05:91:3c:2d:38:d6:1c: a8:b7:a6:ec:fb:d3:c9:37:a0:ba:be:75:86:55:fe:99:2f:db: f7:f1:64:e9:29:44:7f:93:ab:a1:1a:a0:52:2b:d8:31:9b:32: 92:d4:59:c0:77:9d:16:40:83:6c:9f:2a:5e:29:bc:20:f1:b1: d5:e9:a6:a2:81:d6:1d:fb:e5:98:a0:5a:d2:54:44:d5:8d:e9: 3c:d7:ef:62:b3:c5:28:2f:e6:81:4b:c0:93:18:1d:a2:16:bb: 04:4b:1f:7e:39:54:f4:3c:da:71:9f:a8:8f:c8:75:b2:2e:f6: 12:13:2e:3d:80:cb:db:41:11:67:2c:21:2b:b6:d9:71:26:54: 98:ff:70:a2:74:43:ad:c0:6f:35:24:94:5d:9f:25:a8:5e:97: a2:71:0d:93:1f:26:ef:fb:bb:00:3d:09:e3:70:02:e2:a2:78: 8b:bd:9d:fe:1d:73:db:9c:d6:b7:92:01:6b:49:ef:11:5a:c5: eb:a1:ad:d9:97:a2:a6:2f:be:50:65:27:9d:65:1a:66:52:95: 42:7e:64:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPDyYRFFkrUkGlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk OGFlZGVjNmEtYjQ2Ny00ODllLWJkOTEtN2M1YzFmNmE5ZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ny/VdpGvrSzXrA3PiMb9AbMXy86aJbH8Frn pJvIMcA2qKQ7nUP2poU24jztshlDwy+nLluU0aUHU1eTulseAVI6n/EOIDCGsxiu IBoBp1hLu98515GnXIr/52zexeRH2XGQEIJpyOhZMms0vqYSDbmceGtIKntwrYiv P1pGoyTeO1iBvHuq86zyyg6ntagtt1UKYFJDvg8wM7Q0lSCBbCzzS6Qa60qGflJr 3NUDMrlh1MG2nztNQaXnWWixpUOIOeIBvW2ilzUxmWjCXmnpGtnHeagsxgMjsz4x +mgs76Dm/JvS0xDnaBFwxAU5OCMXKTyhlK2VeCjPmxXiwrSmiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSFNzHmH2MnUFp/v8OYSspZaeQHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzgwNjc5ZTAtMWM2Yy0z OWQ5LWI1YmItODg3ODBlNzkxNmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+wUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBwhHI8demVEuNRSQjsEI1JYIcpHCvnfB3mYEebYBMozLQZZ50+UmkA sg9xy28TBZE8LTjWHKi3puz708k3oLq+dYZV/pkv2/fxZOkpRH+Tq6EaoFIr2DGb MpLUWcB3nRZAg2yfKl4pvCDxsdXppqKB1h375ZigWtJURNWN6TzX72KzxSgv5oFL wJMYHaIWuwRLH345VPQ82nGfqI/IdbIu9hITLj2Ay9tBEWcsISu22XEmVJj/cKJ0 Q63AbzUklF2fJahel6JxDZMfJu/7uwA9CeNwAuKieIu9nf4dc9uc1reSAWtJ7xFa xeuhrdmXoqYvvlBlJ51lGmZSlUJ+ZDc= -----END CERTIFICATE-----Generated at Sun Apr 13 03:24:41 2025 by rpki-client