$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d48f8bc1-a43e-3ae5-ad20-51534577c03c.roa File: d48f8bc1-a43e-3ae5-ad20-51534577c03c.roa (raw, json) Hash identifier: BMy3d3s6d2WpF0R7yfd63PRY7a/JJDkUG6ukEI1odCo= Subject key identifier: FE:31:FA:EC:4A:63:E8:C8:91:34:C2:88:9C:F4:77:64:CB:43:15:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6C16C988F1278EB5EBE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d48f8bc1-a43e-3ae5-ad20-51534577c03c.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 71.59.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:c1:6c:98:8f:12:78:eb:5e:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=66f3b559-6ab7-4204-a35c-8e809fedd6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9f:50:46:fe:13:8e:d6:f6:9b:78:5e:6b:76: e4:87:d2:b4:0b:5a:2c:65:3a:51:86:ae:43:bd:1f: 0f:ff:f3:cf:9d:e8:a4:d5:da:4c:ca:0b:5d:17:7c: 04:36:3a:f1:03:b1:6b:81:1c:0d:16:f5:dd:4b:07: 18:25:0e:bb:14:3a:0d:e3:88:be:10:be:2a:84:fc: 4a:ae:40:c8:65:e8:72:8a:55:05:18:24:10:78:72: ac:8e:f0:91:8d:15:58:04:e0:aa:b0:51:83:c6:5d: 7e:49:03:c9:ef:d7:10:78:68:71:33:6f:48:bf:18: 45:27:d5:a4:82:43:7e:2f:eb:fb:55:1e:23:26:4f: 03:7c:7a:11:1e:2c:0f:58:7e:df:06:e5:2e:3e:48: 31:72:5c:4c:de:4b:2a:41:56:05:48:1b:e7:68:7e: 8a:99:c5:00:f9:98:30:3d:a0:06:a7:3f:23:56:82: d6:66:3e:4e:6b:0f:64:b7:ec:02:eb:00:78:49:ba: 5f:b1:81:d2:15:76:73:f7:ff:b5:a0:86:99:30:a1: 9a:7b:2e:c9:26:b2:26:f1:06:3b:b4:b8:27:8b:0b: cc:f0:65:fd:ba:d7:74:c7:13:16:3a:94:e8:3c:63: 95:60:b7:f5:da:2d:07:74:57:9e:2e:4e:73:86:3c: f5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:31:FA:EC:4A:63:E8:C8:91:34:C2:88:9C:F4:77:64:CB:43:15:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d48f8bc1-a43e-3ae5-ad20-51534577c03c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.59.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:b5:35:1c:ca:3e:16:84:f1:d9:11:6f:a6:51:87:33:3d:ce: d3:59:8f:08:4b:2c:21:a9:6a:64:b6:0a:79:5e:18:8e:55:00: b5:5e:a1:67:6a:48:08:21:5f:49:b7:c2:a3:97:5e:06:85:74: 05:34:16:38:0a:46:1e:db:c2:a1:7b:97:d9:45:a8:2b:c5:6e: 17:45:45:71:37:47:1b:df:99:3e:38:62:71:b1:5e:33:d9:b7: 76:df:34:13:7d:bb:ea:eb:87:ee:c4:41:f6:a3:7c:9d:2c:82: 0c:e5:6b:4d:dd:6d:8f:f7:81:5a:78:f3:3a:3a:11:f5:fc:22: c8:95:5e:19:b6:cc:43:a6:e5:9f:40:7d:49:44:66:1e:c9:dc: a6:41:71:eb:b9:08:cd:d9:df:1d:de:04:6a:23:aa:e6:d0:e5: 52:91:74:5c:af:58:c4:3d:e1:81:61:13:89:1d:13:3a:26:86: 5e:73:86:d2:d6:23:82:0e:9e:0a:8d:3b:3c:79:4a:27:6a:0f: a7:27:08:52:d1:a2:4e:87:81:68:1e:28:dd:0b:7d:40:ae:5a: 51:88:34:c2:7f:0d:8a:62:c7:ec:12:3c:81:f1:ac:ea:77:f7: 4f:99:b7:a2:f0:84:2d:74:0b:87:10:59:42:71:2f:a3:ca:78: 46:06:1f:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09sFsmI8SeOtevgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NjZmM2I1NTktNmFiNy00MjA0LWEzNWMtOGU4MDlmZWRkNmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ9QRv4Tjtb2m3hea3bkh9K0C1osZTpRhq5D vR8P//PPneik1dpMygtdF3wENjrxA7FrgRwNFvXdSwcYJQ67FDoN44i+EL4qhPxK rkDIZehyilUFGCQQeHKsjvCRjRVYBOCqsFGDxl1+SQPJ79cQeGhxM29IvxhFJ9Wk gkN+L+v7VR4jJk8DfHoRHiwPWH7fBuUuPkgxclxM3ksqQVYFSBvnaH6KmcUA+Zgw PaAGpz8jVoLWZj5Oaw9kt+wC6wB4SbpfsYHSFXZz9/+1oIaZMKGaey7JJrIm8QY7 tLgniwvM8GX9utd0xxMWOpToPGOVYLf12i0HdFeeLk5zhjz1xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4x+uxKY+jIkTTCiJz0d2TLQxVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDQ4ZjhiYzEtYTQzZS0z YWU1LWFkMjAtNTE1MzQ1NzdjMDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRzvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANy1NRzKPhaE8dkRb6ZRhzM9ztNZjwhLLCGpamS2CnleGI5VALVeoWdq SAghX0m3wqOXXgaFdAU0FjgKRh7bwqF7l9lFqCvFbhdFRXE3RxvfmT44YnGxXjPZ t3bfNBN9u+rrh+7EQfajfJ0sggzla03dbY/3gVp48zo6EfX8IsiVXhm2zEOm5Z9A fUlEZh7J3KZBceu5CM3Z3x3eBGojqubQ5VKRdFyvWMQ94YFhE4kdEzomhl5zhtLW I4IOngqNOzx5SidqD6cnCFLRok6HgWgeKN0LfUCuWlGINMJ/DYpix+wSPIHxrOp3 90+Zt6LwhC10C4cQWUJxL6PKeEYGH0c= -----END CERTIFICATE-----Generated at Mon Apr 7 05:54:19 2025 by rpki-client