$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9aaf4be-2a9f-3d3a-96d5-83e3cd55a97e.roa File: d9aaf4be-2a9f-3d3a-96d5-83e3cd55a97e.roa (raw, json) Hash identifier: 0gblEGek4Dvdi5HAgTMVQvIS1y84Q0UbwYy1t3DXCbE= Subject key identifier: EF:F6:56:82:73:72:3C:58:30:FE:4E:AF:AC:D5:3D:9B:8C:CC:B2:5E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6BE16C4BD54E0B7ED94A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9aaf4be-2a9f-3d3a-96d5-83e3cd55a97e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 71.237.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:be:16:c4:bd:54:e0:b7:ed:94:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=158d9906-0a8a-4e86-b918-a013ab7b6c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:20:91:cc:eb:b2:d9:5a:41:b4:f3:f9:83:46: 3b:92:1d:19:6b:50:88:93:6f:7f:6b:35:30:96:c8: 44:b8:d0:76:d5:35:94:93:3a:13:ba:ea:36:39:53: b6:75:8e:d7:2d:c0:a5:3d:9b:42:03:ea:4e:f6:21: d9:42:bd:29:2d:21:b5:f2:a7:49:83:d0:d7:40:6f: 0f:02:e6:f1:c5:68:d2:1c:bd:87:0a:c1:d7:90:8e: 69:2d:8b:33:0e:a0:a1:b6:f8:d5:5a:0d:be:86:73: 94:85:08:a3:10:22:9f:69:1c:82:07:3e:c3:69:cc: a3:c2:5c:35:c1:27:56:7c:4d:9e:c2:3b:6d:3a:db: 14:16:80:2a:27:82:57:db:28:52:a4:d5:65:80:36: c9:94:39:af:e6:30:54:7f:77:00:54:8f:4b:70:78: aa:43:52:7a:58:db:7f:65:97:90:39:50:29:6a:47: 89:1b:e6:56:b5:94:eb:73:c8:07:3f:5a:af:ec:23: 74:35:c1:c2:31:a4:21:90:0c:6b:da:d4:f6:4f:78: f4:54:64:a6:a3:83:2c:96:d0:33:22:58:26:14:24: 8c:eb:83:ce:45:7a:c1:e4:18:34:39:8a:2b:1c:0b: d2:58:b4:3b:74:18:7c:92:2c:b9:ff:24:59:af:47: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F6:56:82:73:72:3C:58:30:FE:4E:AF:AC:D5:3D:9B:8C:CC:B2:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9aaf4be-2a9f-3d3a-96d5-83e3cd55a97e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.237.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:04:39:45:34:40:f1:53:58:d6:4a:f3:58:fc:73:80:5f:5d: 17:80:57:7c:43:9f:df:04:ef:44:44:7f:73:68:42:f3:99:65: ae:8d:44:c0:0f:e6:b1:bb:7e:90:0c:18:10:90:c7:20:ad:86: 85:9f:d7:5b:e1:34:7b:81:1e:48:d7:88:8e:14:ad:f2:96:73: 74:99:b0:02:0d:ad:bc:d4:eb:f3:3d:f5:eb:28:f9:14:9f:00: 1e:35:73:16:56:92:12:fc:20:16:8a:70:1c:32:47:17:7a:68: 34:ed:c5:e5:a5:73:0e:05:5d:ca:b1:51:26:56:f7:13:7f:c3: d6:73:94:0c:be:34:82:ac:69:74:a2:14:fa:95:c2:72:aa:fd: 05:47:9d:a2:43:31:8b:8d:59:74:50:55:bb:65:cd:5e:b5:e1: 34:3c:48:a2:34:e3:22:ab:53:90:0a:c4:e2:47:4e:41:d1:ea: cd:a9:1e:ca:63:08:3f:b1:a9:24:52:c0:78:22:b4:02:9a:d1: d6:f5:25:c1:a9:9f:50:02:ad:07:f1:13:12:ff:4a:3a:97:11: e2:33:c0:65:e5:d5:8b:07:b1:28:eb:23:ba:2c:f0:72:90:a8: b0:6e:c5:4e:9d:c1:33:96:d4:35:ce:bc:7b:3a:fc:c6:84:31: a7:96:99:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09r4WxL1U4LftlKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MTU4ZDk5MDYtMGE4YS00ZTg2LWI5MTgtYTAxM2FiN2I2YzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiCRzOuy2VpBtPP5g0Y7kh0Za1CIk29/azUw lshEuNB21TWUkzoTuuo2OVO2dY7XLcClPZtCA+pO9iHZQr0pLSG18qdJg9DXQG8P AubxxWjSHL2HCsHXkI5pLYszDqChtvjVWg2+hnOUhQijECKfaRyCBz7Dacyjwlw1 wSdWfE2ewjttOtsUFoAqJ4JX2yhSpNVlgDbJlDmv5jBUf3cAVI9LcHiqQ1J6WNt/ ZZeQOVApakeJG+ZWtZTrc8gHP1qv7CN0NcHCMaQhkAxr2tT2T3j0VGSmo4MsltAz IlgmFCSM64PORXrB5Bg0OYorHAvSWLQ7dBh8kiy5/yRZr0fMOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/2VoJzcjxYMP5Or6zVPZuMzLJeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDlhYWY0YmUtMmE5Zi0z ZDNhLTk2ZDUtODNlM2NkNTVhOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEEOUU0QPFTWNZK81j8c4BfXReAV3xDn98E70REf3NoQvOZZa6NRMAP 5rG7fpAMGBCQxyCthoWf11vhNHuBHkjXiI4UrfKWc3SZsAINrbzU6/M99eso+RSf AB41cxZWkhL8IBaKcBwyRxd6aDTtxeWlcw4FXcqxUSZW9xN/w9ZzlAy+NIKsaXSi FPqVwnKq/QVHnaJDMYuNWXRQVbtlzV614TQ8SKI04yKrU5AKxOJHTkHR6s2pHspj CD+xqSRSwHgitAKa0db1JcGpn1ACrQfxExL/SjqXEeIzwGXl1YsHsSjrI7os8HKQ qLBuxU6dwTOW1DXOvHs6/MaEMaeWmTw= -----END CERTIFICATE-----Generated at Mon Apr 7 05:49:31 2025 by rpki-client