$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f684f67e-6208-3a52-b1b7-6552a64556e3.roa File: f684f67e-6208-3a52-b1b7-6552a64556e3.roa (raw, json) Hash identifier: XvmYfbEGzEGnFI5vBwdd0uMSJAMVMw2kStCvoqq+VBE= Subject key identifier: 08:9A:68:FA:E7:6A:5B:B6:15:50:A6:7A:53:A5:34:E8:60:CB:D0:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFED128D7B300A4C4B5E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f684f67e-6208-3a52-b1b7-6552a64556e3.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 71.198.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:ed:12:8d:7b:30:0a:4c:4b:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=6e511b64-7c9a-4677-81af-abe13ab0e2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6f:42:0b:65:11:fd:1d:c2:05:6e:3d:df:72: bf:a6:e4:c8:f1:54:ff:ad:06:21:59:bd:f9:9f:d7: ae:4b:d9:c8:f1:6c:5b:4e:7f:86:d6:38:56:6c:b2: d3:a9:77:0b:a4:a2:1f:f3:5f:50:78:8d:eb:54:48: ca:c3:76:a8:5f:a4:8d:9b:35:41:28:f8:c7:7c:8b: ee:cf:ee:2b:5f:66:d4:64:56:6f:58:5d:4e:95:3b: c9:7b:dc:2b:fa:4f:e5:20:27:93:85:b7:aa:7f:1d: d2:e0:bd:99:94:a3:51:8d:b6:48:7b:5e:93:f4:91: 33:47:98:6e:32:e9:6d:f1:65:6f:2b:6f:c5:c8:3a: 5b:2b:95:83:33:f3:24:84:88:c7:f4:ce:61:cf:98: 02:76:fb:73:bc:66:86:04:af:24:ae:2f:81:e0:9c: e9:31:80:6c:31:61:5d:41:0d:f3:69:52:7f:be:a9: a4:a8:e2:f0:16:7c:a9:14:10:32:73:c3:ce:98:e2: 2d:cf:ea:e9:23:a2:2b:c3:dd:84:67:10:ef:70:8c: e7:b9:19:ee:ab:c6:78:3c:02:df:b5:dd:d9:2d:00: 2b:e0:69:6a:d6:6c:0c:b2:29:87:9c:21:a6:67:c9: 62:74:b6:3f:d8:8e:14:6d:23:50:2c:5e:a3:9d:40: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9A:68:FA:E7:6A:5B:B6:15:50:A6:7A:53:A5:34:E8:60:CB:D0:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f684f67e-6208-3a52-b1b7-6552a64556e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.198.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:81:44:25:f3:e5:14:c3:17:c2:f4:3d:f2:13:21:d6:e3:0e: 17:2f:e2:b8:d7:4a:ec:df:59:21:c5:61:62:11:64:dd:c5:18: 1c:03:e3:e8:49:08:81:d2:06:60:dc:78:57:2c:a1:05:b9:5d: 1e:3a:15:f2:44:9f:53:4b:70:85:3b:d1:eb:9c:24:04:60:ff: c5:ef:10:fd:86:58:82:64:63:f0:6b:64:e2:ba:0f:fd:00:74: ca:6c:73:78:9a:ae:09:04:c8:9e:dd:8f:6c:5e:88:25:a0:28: fd:36:c2:2e:8d:b1:7b:b4:28:25:a6:11:57:e2:e9:07:f8:2b: 55:87:32:bd:8a:8d:b6:81:c1:f7:db:82:a8:80:10:95:b9:ab: ec:e7:58:b9:3e:1a:fb:a5:cb:fe:7d:6b:ae:32:a8:4a:d6:a1: 54:64:30:22:51:ee:49:e6:7f:02:69:c7:b4:e8:57:87:8f:ee: 92:75:0f:3e:20:5f:6c:1f:b9:a5:55:86:2c:b0:79:93:13:8c: 4d:04:87:1d:0b:7a:f5:a9:13:fe:62:ad:88:cf:78:f3:58:65: f6:b2:37:c6:38:5e:61:52:87:0f:bf:86:5a:f9:0b:52:60:ae: aa:a4:76:6b:a4:69:5b:95:51:b5:67:13:18:09:98:fe:4b:f2: 8a:e0:8f:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr+0SjXswCkxLXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NmU1MTFiNjQtN2M5YS00Njc3LTgxYWYtYWJlMTNhYjBlMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA029CC2UR/R3CBW4933K/puTI8VT/rQYhWb35 n9euS9nI8WxbTn+G1jhWbLLTqXcLpKIf819QeI3rVEjKw3aoX6SNmzVBKPjHfIvu z+4rX2bUZFZvWF1OlTvJe9wr+k/lICeThbeqfx3S4L2ZlKNRjbZIe16T9JEzR5hu Mult8WVvK2/FyDpbK5WDM/MkhIjH9M5hz5gCdvtzvGaGBK8kri+B4JzpMYBsMWFd QQ3zaVJ/vqmkqOLwFnypFBAyc8POmOItz+rpI6Irw92EZxDvcIznuRnuq8Z4PALf td3ZLQAr4Glq1mwMsimHnCGmZ8lidLY/2I4UbSNQLF6jnUA0MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiaaPrnalu2FVCmelOlNOhgy9C8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjY4NGY2N2UtNjIwOC0z YTUyLWIxYjctNjU1MmE2NDU1NmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8YkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGBRCXz5RTDF8L0PfITIdbjDhcv4rjXSuzfWSHFYWIRZN3FGBwD4+hJ CIHSBmDceFcsoQW5XR46FfJEn1NLcIU70eucJARg/8XvEP2GWIJkY/BrZOK6D/0A dMpsc3iargkEyJ7dj2xeiCWgKP02wi6NsXu0KCWmEVfi6Qf4K1WHMr2KjbaBwffb gqiAEJW5q+znWLk+Gvuly/59a64yqErWoVRkMCJR7knmfwJpx7ToV4eP7pJ1Dz4g X2wfuaVVhiyweZMTjE0Ehx0LevWpE/5irYjPePNYZfayN8Y4XmFShw+/hlr5C1Jg rqqkdmukaVuVUbVnExgJmP5L8orgj1w= -----END CERTIFICATE-----Generated at Mon Apr 7 06:29:39 2025 by rpki-client