$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cab398f7-b2d3-39df-bbd7-2a1d721a8f10.roa File: cab398f7-b2d3-39df-bbd7-2a1d721a8f10.roa (raw, json) Hash identifier: a7kR9sC6LxaMgmpcXeZlODuFYPdISgQHODbbFIDI310= Subject key identifier: FB:52:54:4E:CB:49:9E:83:E5:87:9D:F0:55:67:8D:20:07:C2:6D:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C6F59E2A45BD74BF6BB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cab398f7-b2d3-39df-bbd7-2a1d721a8f10.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 33287 IP address blocks: 71.225.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:6f:59:e2:a4:5b:d7:4b:f6:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=791d0bad-0e16-46b2-8556-c38a1437e037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:f5:a9:6d:e6:e6:8a:a7:4e:68:43:16:52: fe:1f:15:99:7c:23:8d:7a:b3:07:f9:de:23:3a:b8: 09:81:f2:a7:81:ed:b7:35:0c:c8:0b:ce:3a:37:08: 42:3e:37:62:3a:17:31:11:43:53:f0:30:1a:ed:cb: bf:78:50:46:fe:46:38:e6:d3:d5:b5:31:5b:bb:84: 33:90:b3:5d:b1:22:37:ae:68:6a:7a:31:15:36:b9: 34:aa:68:96:57:dd:d0:08:6c:5f:22:6b:6c:9e:fa: 32:ae:4d:a3:81:9d:d8:5f:67:70:2e:fd:1f:f3:80: b1:7d:f8:05:f1:f7:31:60:1f:ff:5f:da:df:2e:d1: a6:30:eb:ca:1b:98:b9:12:08:61:2e:9a:2b:59:ca: 76:e4:ba:97:ae:b5:ce:25:ab:a7:69:e7:4a:a0:2c: e2:86:e3:c9:48:12:e5:80:21:b9:cb:85:70:e4:48: 24:c6:61:70:3b:17:a3:5a:6b:9e:33:62:c6:80:ca: 0e:f1:1e:ff:61:43:5b:42:0c:26:ff:24:fb:a2:c1: 20:62:c4:12:0a:13:e3:b1:98:7f:89:f5:d6:66:f5: 2f:da:1c:5a:30:85:eb:be:55:c6:c0:27:4d:be:c6: 34:a9:55:f2:3f:4c:5e:3e:23:52:6c:99:52:fb:18: 2c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:52:54:4E:CB:49:9E:83:E5:87:9D:F0:55:67:8D:20:07:C2:6D:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cab398f7-b2d3-39df-bbd7-2a1d721a8f10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c6:f8:ae:f6:45:bf:6e:65:67:65:5d:cf:83:ff:c5:bb:f0: 89:ee:93:71:22:2e:ae:c0:67:ef:c3:2c:69:9e:9a:3d:a5:60: 8c:f8:7c:7e:ea:45:ad:cd:59:77:ee:b8:6f:89:fd:82:61:57: a6:c5:5e:89:57:3d:74:dd:7e:60:f8:e0:98:33:fd:93:dd:f8: fd:77:8a:6f:20:68:14:43:d7:df:e5:f5:90:ad:f7:76:e0:1d: c2:3d:5c:2f:d2:df:2d:db:ed:9f:ed:bb:25:cc:48:ee:11:bb: 2e:78:71:58:57:a5:65:63:d0:b8:96:52:6d:90:d8:fd:23:a6: de:e1:02:77:cb:7d:a8:dd:b3:e6:1a:d8:9a:87:0f:83:98:cd: 59:f8:ff:ab:2f:e0:c1:b3:d2:a0:04:a6:80:44:1a:53:10:13: 94:10:88:c3:15:95:45:ce:46:8a:67:3c:f4:0c:f1:28:26:7b: 99:49:87:ce:ac:19:a5:5d:fe:5e:50:74:4c:5d:ab:85:ba:9c: 6d:20:b9:c6:ed:5e:04:ce:d2:ec:01:1d:0a:e4:77:8a:9a:7e: 6d:22:1c:06:47:17:aa:77:ea:c3:25:5f:0d:0f:73:c4:6a:6d: 4c:60:cf:be:c0:aa:1b:ed:85:7c:5c:8e:59:a4:a7:4f:91:4e: f8:59:71:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPG9Z4qRb10v2u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk NzkxZDBiYWQtMGUxNi00NmIyLTg1NTYtYzM4YTE0MzdlMDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6f1qW3m5oqnTmhDFlL+HxWZfCONerMH+d4j OrgJgfKnge23NQzIC846NwhCPjdiOhcxEUNT8DAa7cu/eFBG/kY45tPVtTFbu4Qz kLNdsSI3rmhqejEVNrk0qmiWV93QCGxfImtsnvoyrk2jgZ3YX2dwLv0f84CxffgF 8fcxYB//X9rfLtGmMOvKG5i5EghhLporWcp25LqXrrXOJaunaedKoCzihuPJSBLl gCG5y4Vw5EgkxmFwOxejWmueM2LGgMoO8R7/YUNbQgwm/yT7osEgYsQSChPjsZh/ ifXWZvUv2hxaMIXrvlXGwCdNvsY0qVXyP0xePiNSbJlS+xgsPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtSVE7LSZ6D5Yed8FVnjSAHwm3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2FiMzk4ZjctYjJkMy0z OWRmLWJiZDctMmExZDcyMWE4ZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+HYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzG+K72Rb9uZWdlXc+D/8W78Inuk3EiLq7AZ+/DLGmemj2lYIz4fH7q Ra3NWXfuuG+J/YJhV6bFXolXPXTdfmD44Jgz/ZPd+P13im8gaBRD19/l9ZCt93bg HcI9XC/S3y3b7Z/tuyXMSO4Ruy54cVhXpWVj0LiWUm2Q2P0jpt7hAnfLfajds+Ya 2JqHD4OYzVn4/6sv4MGz0qAEpoBEGlMQE5QQiMMVlUXORopnPPQM8Sgme5lJh86s GaVd/l5QdExdq4W6nG0gucbtXgTO0uwBHQrkd4qafm0iHAZHF6p36sMlXw0Pc8Rq bUxgz77AqhvthXxcjlmkp0+RTvhZceE= -----END CERTIFICATE-----Generated at Wed Apr 9 08:09:49 2025 by rpki-client