$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3306856-d4f3-31f3-a9d5-d1797ec24c1c.roa File: d3306856-d4f3-31f3-a9d5-d1797ec24c1c.roa (raw, json) Hash identifier: IQwUHU9/L8VnxnfNd9eTfeoJQ9JQcHX47HFgYTTtCN4= Subject key identifier: 4D:4D:99:10:F2:52:C5:A4:DB:C9:94:31:83:4A:2E:EB:A8:85:F1:20 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C2D6006C9862E0BB96500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3306856-d4f3-31f3-a9d5-d1797ec24c1c.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 173.14.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:2d:60:06:c9:86:2e:0b:b9:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=0c767e1b-1efe-4f8e-8cb4-7f450afdcb1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:47:75:18:8e:9f:d8:f6:1c:36:32:4b:d1: 61:e2:31:1b:df:91:f4:4e:7e:cd:91:f5:cc:9c:f4: d3:ad:05:b1:07:f8:3f:97:14:e5:fa:cb:db:c7:74: 10:93:8a:9f:b9:fa:3f:cc:29:ad:4e:3f:ed:c5:0b: a3:e1:96:d9:6d:a8:f0:94:d8:b6:7b:78:d1:29:29: 2e:d3:c3:10:10:0b:13:3d:64:c0:b5:f9:cd:62:0d: 86:23:2d:5d:e8:63:9c:19:aa:cc:8b:9f:26:0d:5f: 3a:86:2b:7d:0e:d8:18:7c:db:40:ce:71:d6:3e:b8: 98:c8:1b:94:73:99:ee:a7:d5:ad:fb:56:6e:c7:8b: 0b:20:b4:27:90:3d:ac:da:22:5d:9e:12:09:46:f3: 3e:89:8b:82:18:1d:a0:0c:b5:04:c7:9b:5a:1b:bc: 91:78:3a:ff:ab:23:9d:e4:cc:d6:86:04:8f:7c:87: b5:9b:9d:75:74:d8:36:40:95:66:ef:54:c1:4e:b8: ef:35:c8:94:b0:dd:27:e3:ba:ef:ec:ee:a5:e5:9b: 67:f2:75:2a:d5:d3:44:94:af:e2:53:e5:80:17:8a: 49:70:c7:8c:13:f4:3e:1f:dd:62:37:e8:5d:0c:82: 5d:00:62:f3:29:28:7f:5c:e1:63:77:32:f8:66:1d: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4D:99:10:F2:52:C5:A4:DB:C9:94:31:83:4A:2E:EB:A8:85:F1:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3306856-d4f3-31f3-a9d5-d1797ec24c1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 173.14.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:14:82:a6:db:ca:44:32:59:9e:5d:51:c1:18:78:3a:18:77: 60:48:13:a4:00:41:53:56:96:3d:a0:b6:ab:79:97:8a:20:0b: b2:58:d3:1b:9f:d5:96:0f:89:8b:1a:8e:dc:0b:eb:a0:a4:64: be:eb:8a:4c:24:75:07:af:41:03:37:47:4e:f5:98:8c:6b:6a: 0e:63:34:f1:97:04:f1:b8:51:a2:3e:07:96:9f:dd:a0:f0:c6: bf:18:db:f1:d3:73:5f:08:b4:db:e3:35:12:3d:b4:b3:73:49: 4e:18:b7:41:a9:e5:00:7f:89:7f:46:d6:3d:b5:0e:85:0a:9a: 17:7e:ba:1f:5d:24:14:01:8b:6b:59:82:17:3e:a8:0d:f6:24: 06:1e:eb:ad:a4:a7:dd:b1:0f:55:25:eb:47:d9:62:14:67:a0: 8f:73:04:60:05:ea:5a:3f:00:b5:b3:ef:97:2f:85:22:50:fe: 72:04:c8:db:07:ea:40:ed:3f:94:6f:98:5a:04:ac:2e:e5:42: 2a:89:7d:c1:80:b2:db:40:11:8a:79:76:23:37:91:fa:8a:3a: a5:f0:2d:4e:94:89:10:e1:65:ad:f6:77:60:87:b4:3d:53:21: 83:53:69:b4:34:fc:24:cc:2a:4e:6a:a9:a1:12:e6:0f:c3:49: 73:6c:59:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebC1gBsmGLgu5ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MGM3NjdlMWItMWVmZS00ZjhlLThjYjQtN2Y0NTBhZmRjYjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3VHdRiOn9j2HDYyS9Fh4jEb35H0Tn7NkfXM nPTTrQWxB/g/lxTl+svbx3QQk4qfufo/zCmtTj/txQuj4ZbZbajwlNi2e3jRKSku 08MQEAsTPWTAtfnNYg2GIy1d6GOcGarMi58mDV86hit9DtgYfNtAznHWPriYyBuU c5nup9Wt+1Zux4sLILQnkD2s2iJdnhIJRvM+iYuCGB2gDLUEx5taG7yReDr/qyOd 5MzWhgSPfIe1m511dNg2QJVm71TBTrjvNciUsN0n47rv7O6l5Ztn8nUq1dNElK/i U+WAF4pJcMeME/Q+H91iN+hdDIJdAGLzKSh/XOFjdzL4Zh0xMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1NmRDyUsWk28mUMYNKLuuohfEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDMzMDY4NTYtZDRmMy0z MWYzLWE5ZDUtZDE3OTdlYzI0YzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrQ6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQUgqbbykQyWZ5dUcEYeDoYd2BIE6QAQVNWlj2gtqt5l4ogC7JY0xuf 1ZYPiYsajtwL66CkZL7rikwkdQevQQM3R071mIxrag5jNPGXBPG4UaI+B5af3aDw xr8Y2/HTc18ItNvjNRI9tLNzSU4Yt0Gp5QB/iX9G1j21DoUKmhd+uh9dJBQBi2tZ ghc+qA32JAYe662kp92xD1Ul60fZYhRnoI9zBGAF6lo/ALWz75cvhSJQ/nIEyNsH 6kDtP5RvmFoErC7lQiqJfcGAsttAEYp5diM3kfqKOqXwLU6UiRDhZa32d2CHtD1T IYNTabQ0/CTMKk5qqaES5g/DSXNsWec= -----END CERTIFICATE-----Generated at Sun Apr 6 09:37:50 2025 by rpki-client