$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7e34a09-9f65-3c2c-ad71-24cf84daffd9.roa File: e7e34a09-9f65-3c2c-ad71-24cf84daffd9.roa (raw, json) Hash identifier: p1lIfquePsqeWb2GSFPvYFJO8iI05roANPdlAcPA0N0= Subject key identifier: F6:33:41:34:31:F8:79:5D:9C:1C:80:70:58:23:8F:68:38:99:5F:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B8A5F4153CE78839DE180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7e34a09-9f65-3c2c-ad71-24cf84daffd9.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 71.203.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:8a:5f:41:53:ce:78:83:9d:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=99287681-f1cb-4d09-a215-1c017a345320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b0:db:5f:3b:c2:09:36:e7:17:bd:68:5e:9a: 46:c7:68:da:19:68:85:e8:8b:e0:e4:de:91:49:a4: 8d:1e:ca:ae:fe:e5:ab:39:34:66:2d:9b:db:11:a6: b2:c0:b2:dd:25:17:b4:ce:0e:ca:4f:47:ec:af:47: 70:e3:7a:48:6e:b9:8e:75:da:48:b3:00:43:d2:0e: d5:8b:91:46:21:1e:21:0a:e8:09:ba:8b:c3:31:a3: 94:5a:7d:53:97:06:81:fa:91:df:28:91:ad:80:67: 7c:4a:05:56:88:aa:c6:5d:cd:3b:41:9f:8e:9e:47: 2a:bb:1d:e4:49:00:53:4e:b8:b1:aa:6f:17:86:79: 26:f7:e0:cd:6f:99:9f:a6:6d:4f:21:84:f3:9b:57: 14:b4:5f:fd:72:fb:d6:94:b7:b7:7c:ad:ae:8c:dd: 78:9e:52:22:b9:f0:89:91:35:0e:a8:29:68:81:b9: d6:e5:e8:22:da:49:21:58:ee:07:85:dd:3f:a7:81: b2:01:1e:ce:1b:87:39:ee:6b:0a:e7:e5:fe:9d:81: 9c:c3:e1:75:f4:35:55:5a:05:c2:f9:34:15:e9:8c: f7:00:8b:de:b9:09:9d:88:ec:49:02:41:ca:39:89: 6e:be:78:2f:f0:de:30:c0:42:22:97:70:e1:11:bb: 90:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:33:41:34:31:F8:79:5D:9C:1C:80:70:58:23:8F:68:38:99:5F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7e34a09-9f65-3c2c-ad71-24cf84daffd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.203.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ad:9a:d4:50:5a:3d:f0:5e:f0:5b:a7:99:38:46:27:8a:e3: 8d:57:a6:d4:1c:2f:a4:fa:73:bc:0c:f7:f5:27:97:d9:37:b7: 1f:8f:1d:e0:9f:51:d9:13:f1:c1:0b:30:fb:a6:2d:39:1c:ec: 1d:8b:a5:81:b6:dc:2d:f9:a5:ae:90:9a:e5:54:22:ac:5d:a7: f4:f7:4e:3d:f4:b2:d5:1f:31:12:d7:10:c4:02:8b:70:73:14: 8b:f1:e3:f5:59:a8:06:84:62:33:5e:d8:ac:ba:77:79:47:86: 88:23:b2:e9:87:af:fa:f5:0d:2a:37:6f:f1:d8:bd:78:5e:19: 9c:db:3e:41:ac:64:eb:7d:27:a0:f8:27:2d:40:66:1f:70:48: d9:f1:0e:90:f8:1c:40:03:07:7c:47:61:f1:05:f5:98:e5:34: a7:ab:39:4d:b6:f7:d9:95:c4:cc:7c:61:26:f2:f9:e4:c3:c7: 46:f4:78:bd:f7:53:15:11:68:f3:fc:fe:53:38:b9:8f:e6:92: ff:e4:89:0a:f1:ed:d7:17:e6:9d:49:73:38:dc:fe:b7:e9:87: 53:67:9e:96:15:32:9d:ab:47:db:87:ad:75:b4:35:d5:93:9b: db:af:91:a4:d9:37:cf:8c:df:ad:b4:ab:dc:c7:7e:59:dc:b5: 1a:b2:17:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea4pfQVPOeIOd4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OTkyODc2ODEtZjFjYi00ZDA5LWEyMTUtMWMwMTdhMzQ1MzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7DbXzvCCTbnF71oXppGx2jaGWiF6Ivg5N6R SaSNHsqu/uWrOTRmLZvbEaaywLLdJRe0zg7KT0fsr0dw43pIbrmOddpIswBD0g7V i5FGIR4hCugJuovDMaOUWn1TlwaB+pHfKJGtgGd8SgVWiKrGXc07QZ+Onkcqux3k SQBTTrixqm8Xhnkm9+DNb5mfpm1PIYTzm1cUtF/9cvvWlLe3fK2ujN14nlIiufCJ kTUOqClogbnW5egi2kkhWO4Hhd0/p4GyAR7OG4c57msK5+X+nYGcw+F19DVVWgXC +TQV6Yz3AIveuQmdiOxJAkHKOYluvngv8N4wwEIil3DhEbuQ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYzQTQx+HldnByAcFgjj2g4mV/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTdlMzRhMDktOWY2NS0z YzJjLWFkNzEtMjRjZjg0ZGFmZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR8vIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmtmtRQWj3wXvBbp5k4RieK441XptQcL6T6c7wM9/Unl9k3tx+PHeCf UdkT8cELMPumLTkc7B2LpYG23C35pa6QmuVUIqxdp/T3Tj30stUfMRLXEMQCi3Bz FIvx4/VZqAaEYjNe2Ky6d3lHhogjsumHr/r1DSo3b/HYvXheGZzbPkGsZOt9J6D4 Jy1AZh9wSNnxDpD4HEADB3xHYfEF9ZjlNKerOU2299mVxMx8YSby+eTDx0b0eL33 UxURaPP8/lM4uY/mkv/kiQrx7dcX5p1Jczjc/rfph1NnnpYVMp2rR9uHrXW0NdWT m9uvkaTZN8+M3620q9zHflnctRqyF74= -----END CERTIFICATE-----Generated at Mon Apr 7 05:52:20 2025 by rpki-client