$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfec08c3-4a83-3145-bf05-3948cc8d6283.roa File: dfec08c3-4a83-3145-bf05-3948cc8d6283.roa (raw, json) Hash identifier: J8rvWy0HwfPKhR8nioX70XUpGQOen2fp02XXKf7eVWk= Subject key identifier: 4E:FC:A5:90:9B:FD:2D:57:42:11:70:50:16:45:8D:F2:2B:1E:94:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F829D74D950F70AA53EA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfec08c3-4a83-3145-bf05-3948cc8d6283.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 71.236.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:29:d7:4d:95:0f:70:aa:53:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=3f7ad575-5171-4b39-8e9a-119e15eeb048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:61:f5:43:46:28:00:f5:68:2a:43:4e:f4:54: 95:34:ea:9e:26:ee:5c:c5:49:98:58:64:00:11:c7: 7b:30:28:2e:f0:10:32:25:08:5d:81:be:3b:b0:fa: 67:01:3f:7f:36:ca:a1:c1:1f:c0:e1:1f:81:19:7d: 67:ec:e9:b5:07:6b:ea:27:93:b6:a3:08:d0:93:55: 45:a6:65:1a:cb:e7:8b:be:12:de:dd:f1:af:f5:bc: 8f:74:a6:47:a1:d4:fb:a5:23:91:ce:03:49:46:4b: 44:cd:6b:3b:83:5a:95:05:5e:a1:18:21:09:a4:ea: de:a2:09:3d:60:46:3c:ed:52:cc:26:8b:c6:25:5e: 27:af:97:eb:5e:c5:20:78:de:75:6d:09:24:e2:75: 55:00:9d:3e:cd:c3:dc:01:52:63:51:f1:39:05:f4: f1:db:72:ae:1e:d7:03:b7:62:47:e1:8d:7b:3d:d7: d2:30:c6:04:d7:c6:65:f7:1c:cf:7c:32:93:52:03: d0:cb:0f:0c:bd:f6:93:28:2c:28:6a:99:af:85:53: 7c:42:6b:ee:88:0c:bd:30:4f:f0:b3:18:08:34:40: c1:5c:64:c9:26:e7:7c:c5:bc:6d:28:1d:6d:ed:65: bb:9e:4a:e8:ed:c6:9c:9c:01:74:99:87:16:b4:23: 91:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FC:A5:90:9B:FD:2D:57:42:11:70:50:16:45:8D:F2:2B:1E:94:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfec08c3-4a83-3145-bf05-3948cc8d6283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.236.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f7:e0:74:af:d6:e3:8b:f8:fa:ef:f8:a1:85:58:c1:b7:b2: c5:85:1e:89:72:2b:81:57:bf:2b:90:a2:40:06:4a:14:11:90: c6:a0:5e:a1:3c:ab:76:3f:af:6b:02:f5:e4:17:9c:64:dc:4e: b0:9f:b2:ae:c0:a5:d5:37:a6:de:ce:fe:78:60:c3:a1:53:84: d3:0d:a5:04:cb:bb:ad:3c:0d:d3:e3:c6:34:76:b8:2d:81:bf: 09:b2:0e:c3:c3:f6:ef:c9:48:ae:9f:15:2b:d8:8b:ff:64:99: 30:42:63:94:01:fa:45:05:51:39:60:f8:84:f0:c3:9b:c6:e9: 58:2e:4c:1a:d0:0f:2c:51:c1:22:3a:ff:01:ee:22:2a:6b:4a: 04:3f:ef:f3:a8:91:98:22:f4:e6:ae:35:81:db:d7:74:5e:48: 0f:2b:84:18:97:9e:95:27:cc:fe:62:b6:3a:af:ea:a0:01:ef: 3f:11:85:e6:e4:00:06:4b:f5:eb:2a:43:c3:a9:0b:2d:b5:54: 72:7f:8d:9b:5d:30:cb:13:5c:83:99:93:3e:57:92:7c:71:d4: 36:c0:6f:c0:d9:ee:ef:6d:16:87:38:df:d1:c3:50:c8:db:5a: d1:92:c2:9e:3d:cf:74:45:34:f6:30:d1:c8:78:11:86:a0:c2: aa:7d:80:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+CnXTZUPcKpT6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk M2Y3YWQ1NzUtNTE3MS00YjM5LThlOWEtMTE5ZTE1ZWViMDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2H1Q0YoAPVoKkNO9FSVNOqeJu5cxUmYWGQA Ecd7MCgu8BAyJQhdgb47sPpnAT9/NsqhwR/A4R+BGX1n7Om1B2vqJ5O2owjQk1VF pmUay+eLvhLe3fGv9byPdKZHodT7pSORzgNJRktEzWs7g1qVBV6hGCEJpOreogk9 YEY87VLMJovGJV4nr5frXsUgeN51bQkk4nVVAJ0+zcPcAVJjUfE5BfTx23KuHtcD t2JH4Y17PdfSMMYE18Zl9xzPfDKTUgPQyw8MvfaTKCwoapmvhVN8QmvuiAy9ME/w sxgINEDBXGTJJud8xbxtKB1t7WW7nkro7cacnAF0mYcWtCORpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE78pZCb/S1XQhFwUBZFjfIrHpSyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZlYzA4YzMtNGE4My0z MTQ1LWJmMDUtMzk0OGNjOGQ2MjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+zsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT34HSv1uOL+Prv+KGFWMG3ssWFHolyK4FXvyuQokAGShQRkMagXqE8 q3Y/r2sC9eQXnGTcTrCfsq7ApdU3pt7O/nhgw6FThNMNpQTLu608DdPjxjR2uC2B vwmyDsPD9u/JSK6fFSvYi/9kmTBCY5QB+kUFUTlg+ITww5vG6VguTBrQDyxRwSI6 /wHuIiprSgQ/7/OokZgi9OauNYHb13ReSA8rhBiXnpUnzP5itjqv6qAB7z8Rhebk AAZL9esqQ8OpCy21VHJ/jZtdMMsTXIOZkz5Xknxx1DbAb8DZ7u9tFoc439HDUMjb WtGSwp49z3RFNPYw0ch4EYagwqp9gBg= -----END CERTIFICATE-----Generated at Mon Apr 7 06:31:01 2025 by rpki-client