$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2ea448f-ec74-37e2-bb60-8a92f6afeb69.roa File: e2ea448f-ec74-37e2-bb60-8a92f6afeb69.roa (raw, json) Hash identifier: R3lMOPv/3RXFWOQd1Xb9g44SxpSDHQXJe1bJfgVe5Is= Subject key identifier: 43:E4:CE:FB:86:A8:ED:04:3C:40:B9:E0:E1:01:E7:4A:84:54:4B:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F90F27F04EC5EB9A91A2A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2ea448f-ec74-37e2-bb60-8a92f6afeb69.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 174.171.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:0f:27:f0:4e:c5:eb:9a:91:a2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=95ba35f3-b111-4b65-b4e7-1447430b29f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:f0:04:c6:9e:be:04:0f:98:b6:6c:f6:5b: fe:8c:13:bd:a6:28:8c:79:be:12:13:87:d6:78:d9: 41:78:ac:7c:e7:af:90:7b:63:e1:69:1a:1c:90:0a: 56:27:b2:56:24:95:e6:ce:8a:64:ef:73:30:81:44: a4:6f:75:85:ec:ae:ab:f3:ee:ee:c6:39:00:f2:2d: 02:4d:42:26:9f:e3:ed:b8:57:a1:8e:7c:2a:12:a7: 70:ea:fb:d3:e0:9f:a9:16:1b:b4:74:00:e0:b0:15: 92:e4:d3:ac:90:f2:be:92:f5:5d:ff:6c:fa:55:80: 74:58:6b:12:01:a7:80:ce:f0:7e:92:9b:df:83:66: 84:40:01:7f:e9:f4:c4:ad:f6:b3:81:b1:6e:ea:32: 65:3c:13:63:74:18:21:85:6b:99:99:03:d4:f0:cd: 97:2c:2e:29:b4:f9:fb:1b:b2:6b:91:9f:03:51:a8: 46:2c:ab:d4:98:d4:d0:26:10:d0:bf:1d:8d:70:eb: a1:5b:bc:78:a4:41:e6:3d:25:c6:d8:56:f0:0a:16: e2:90:d8:4d:85:80:c7:d6:9b:b1:15:97:3c:f3:00: c7:14:59:88:d8:08:5e:48:e9:9c:b6:77:1c:32:36: 82:a8:49:7d:5c:58:ab:d0:64:57:4f:99:d9:25:9d: 19:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E4:CE:FB:86:A8:ED:04:3C:40:B9:E0:E1:01:E7:4A:84:54:4B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2ea448f-ec74-37e2-bb60-8a92f6afeb69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4c:cf:ba:3e:2d:39:0a:bd:54:17:7e:4c:28:60:72:b3:8e: 5e:a1:a1:11:d1:59:26:dc:6a:6d:55:ae:07:90:14:21:7b:e3: 91:bb:5b:7f:ea:39:ab:50:89:73:5d:72:24:39:c9:6d:15:b2: 9a:89:38:a9:cf:9b:f6:34:f5:02:0c:e4:b4:05:5f:65:48:48: d6:47:b2:83:5e:77:dd:1d:07:99:da:97:6c:8b:9e:06:ba:5b: 02:a9:ff:6d:30:e7:94:4e:50:d1:a9:7b:db:51:8f:01:2a:28: c9:26:33:33:2c:6b:fa:e5:47:a4:e3:1e:dd:e0:39:93:0b:32: a7:eb:bd:90:95:92:39:72:7c:cf:c5:3a:ac:7f:77:1b:f1:6a: db:56:62:12:18:b2:9e:d4:31:3d:a5:b1:79:0c:01:c7:9c:fa: d7:ab:a2:3d:aa:c0:b4:6a:c9:69:56:ac:ac:4d:c5:fd:79:98: 99:47:e3:5b:2d:8b:51:e9:46:b8:4e:5d:50:b7:d5:67:19:30: 43:4c:32:0f:16:96:ea:72:6d:8b:ee:e2:dc:f8:f5:1f:c3:de: 79:fb:c9:7e:5d:29:38:12:7e:6c:b7:63:6b:84:f6:09:4c:73: 54:22:fe:8d:44:28:2b:8e:80:37:3e:b1:e8:ea:5f:f1:4a:8e: 8d:19:13:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Q8n8E7F65qRoqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OTViYTM1ZjMtYjExMS00YjY1LWI0ZTctMTQ0NzQzMGIyOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO/wBMaevgQPmLZs9lv+jBO9piiMeb4SE4fW eNlBeKx856+Qe2PhaRockApWJ7JWJJXmzopk73MwgUSkb3WF7K6r8+7uxjkA8i0C TUImn+PtuFehjnwqEqdw6vvT4J+pFhu0dADgsBWS5NOskPK+kvVd/2z6VYB0WGsS AaeAzvB+kpvfg2aEQAF/6fTErfazgbFu6jJlPBNjdBghhWuZmQPU8M2XLC4ptPn7 G7JrkZ8DUahGLKvUmNTQJhDQvx2NcOuhW7x4pEHmPSXG2FbwChbikNhNhYDH1pux FZc88wDHFFmI2AheSOmctnccMjaCqEl9XFir0GRXT5nZJZ0ZQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPkzvuGqO0EPEC54OEB50qEVEtyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTJlYTQ0OGYtZWM3NC0z N2UyLWJiNjAtOGE5MmY2YWZlYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChMz7o+LTkKvVQXfkwoYHKzjl6hoRHRWSbcam1VrgeQFCF745G7W3/q OatQiXNdciQ5yW0VspqJOKnPm/Y09QIM5LQFX2VISNZHsoNed90dB5nal2yLnga6 WwKp/20w55ROUNGpe9tRjwEqKMkmMzMsa/rlR6TjHt3gOZMLMqfrvZCVkjlyfM/F Oqx/dxvxattWYhIYsp7UMT2lsXkMAcec+teroj2qwLRqyWlWrKxNxf15mJlH41st i1HpRrhOXVC31WcZMENMMg8WlupybYvu4tz49R/D3nn7yX5dKTgSfmy3Y2uE9glM c1Qi/o1EKCuOgDc+sejqX/FKjo0ZE14= -----END CERTIFICATE-----Generated at Mon Apr 7 06:28:02 2025 by rpki-client