$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0f166cf-d2bb-39a5-a447-eb68a0b063b5.roa File: d0f166cf-d2bb-39a5-a447-eb68a0b063b5.roa (raw, json) Hash identifier: cIq+obPrl0xB+Ee4WvdPPotjayCpPbsr295Qv4hjhfE= Subject key identifier: B6:B6:83:03:E5:43:7A:E5:72:D9:E7:C8:B0:FC:D8:B5:45:B3:7E:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C9A7884CB6243D24E9EC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0f166cf-d2bb-39a5-a447-eb68a0b063b5.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33491 IP address blocks: 69.139.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:9a:78:84:cb:62:43:d2:4e:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=a69c89e7-95f6-40a9-ab4e-8bd998847caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a0:8f:37:c8:15:cc:ad:de:32:44:5c:65:d2: 3b:07:15:f2:d3:21:af:99:1e:b8:36:f3:33:60:43: ac:77:10:8b:30:33:fa:fc:7e:88:a0:b8:d9:20:4e: 46:84:60:c2:cf:b3:47:c7:80:33:66:35:bb:c7:62: 0a:56:d4:91:c6:57:89:bd:00:b7:3b:f8:43:22:19: 13:cc:48:8a:1f:3e:dc:06:b2:48:49:1d:3b:53:27: 4e:13:ee:74:7a:f8:bf:06:07:d7:f7:fd:78:99:f1: 77:98:e3:6b:34:cb:8a:3c:58:c4:e1:9b:0a:36:d8: c4:af:88:4e:06:1a:48:2d:e7:77:f6:9b:d9:fd:6f: 61:30:91:80:8b:cc:63:2d:8b:3a:6b:65:29:75:97: ae:7d:73:4a:7d:33:72:99:67:fc:3a:81:b9:89:8d: 2f:c0:3e:1d:0c:f1:23:4b:c0:44:82:11:ed:3a:db: bc:7d:3f:7a:04:ec:5b:34:1b:e7:a7:47:74:48:73: cc:bb:e9:fb:2c:f7:3c:6a:b7:31:ea:93:54:bb:c3: 48:43:13:de:8e:bb:e3:15:64:f8:5e:f0:6e:f9:9e: 99:90:15:7e:df:72:e4:7d:83:04:f2:2f:1c:fe:b8: 88:5d:6a:44:fa:a0:4a:a6:28:0c:45:f2:7c:e7:e2: 76:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B6:83:03:E5:43:7A:E5:72:D9:E7:C8:B0:FC:D8:B5:45:B3:7E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0f166cf-d2bb-39a5-a447-eb68a0b063b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.139.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:d9:24:c4:f2:1b:08:f2:d8:b7:c8:f9:a8:c1:34:9c:da:49: 70:58:1b:0f:75:c3:15:20:13:d9:ff:a0:f2:b8:3b:c1:18:bf: f0:af:5a:ac:dd:6c:17:14:5c:be:67:5b:09:f6:11:3e:95:9a: 98:2b:fe:fd:ea:8c:73:e0:01:be:a1:73:f1:99:01:d8:7b:05: 21:7f:5f:49:dc:2d:66:6c:f7:56:ed:d8:62:7f:79:df:d8:3f: 9d:94:8f:c3:b0:14:66:a0:fb:01:ba:10:6f:dc:52:fa:47:a3: 95:ed:5c:19:e1:61:6c:d4:3c:49:0d:e3:d5:5f:92:d3:ab:2d: 05:74:3e:3c:c3:5f:70:3b:5c:67:fd:ac:9b:d5:de:39:61:cf: 89:76:f9:78:4d:db:39:04:02:f6:94:a3:52:d8:04:b1:94:44: d0:7d:47:00:b6:ad:2a:bb:c6:3c:f0:28:f9:30:fe:76:06:2b: b7:c4:d3:2e:ce:ee:7d:92:e7:cd:f7:d8:e6:5a:4c:b0:9b:0a: 57:09:6b:96:1f:b6:78:3c:5c:e5:e1:a3:2b:8f:da:db:cf:52: 01:ca:c0:82:a8:07:74:bb:53:44:e7:03:e3:b6:a4:06:ec:94: e8:81:db:06:ac:c8:c4:8f:c4:3b:cf:8b:21:c7:0c:bc:1b:84: a2:1c:83:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebJp4hMtiQ9JOnsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YTY5Yzg5ZTctOTVmNi00MGE5LWFiNGUtOGJkOTk4ODQ3Y2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6CPN8gVzK3eMkRcZdI7BxXy0yGvmR64NvMz YEOsdxCLMDP6/H6IoLjZIE5GhGDCz7NHx4AzZjW7x2IKVtSRxleJvQC3O/hDIhkT zEiKHz7cBrJISR07UydOE+50evi/BgfX9/14mfF3mONrNMuKPFjE4ZsKNtjEr4hO BhpILed39pvZ/W9hMJGAi8xjLYs6a2UpdZeufXNKfTNymWf8OoG5iY0vwD4dDPEj S8BEghHtOtu8fT96BOxbNBvnp0d0SHPMu+n7LPc8arcx6pNUu8NIQxPejrvjFWT4 XvBu+Z6ZkBV+33LkfYME8i8c/riIXWpE+qBKpigMRfJ85+J2zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLa2gwPlQ3rlctnnyLD82LVFs36PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDBmMTY2Y2YtZDJiYi0z OWE1LWE0NDctZWI2OGEwYjA2M2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARYuHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvZJMTyGwjy2LfI+ajBNJzaSXBYGw91wxUgE9n/oPK4O8EYv/CvWqzd bBcUXL5nWwn2ET6Vmpgr/v3qjHPgAb6hc/GZAdh7BSF/X0ncLWZs91bt2GJ/ed/Y P52Uj8OwFGag+wG6EG/cUvpHo5XtXBnhYWzUPEkN49VfktOrLQV0PjzDX3A7XGf9 rJvV3jlhz4l2+XhN2zkEAvaUo1LYBLGURNB9RwC2rSq7xjzwKPkw/nYGK7fE0y7O 7n2S58332OZaTLCbClcJa5Yftng8XOXhoyuP2tvPUgHKwIKoB3S7U0TnA+O2pAbs lOiB2wasyMSPxDvPiyHHDLwbhKIcg1c= -----END CERTIFICATE-----Generated at Mon Apr 7 06:08:22 2025 by rpki-client