$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f858c95a-fd39-39ff-a0b8-f3d292143cf8.roa File: f858c95a-fd39-39ff-a0b8-f3d292143cf8.roa (raw, json) Hash identifier: HwLJV6FCJPTKZWTxkx/tAP4n/Wt4/jqlodgSFkHWf1M= Subject key identifier: 4A:37:FF:47:A4:52:2D:A4:B5:6C:43:51:12:B4:87:C4:EE:E8:67:33 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CC8A84ED651DC72CF3F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f858c95a-fd39-39ff-a0b8-f3d292143cf8.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7922 IP address blocks: 71.226.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:c8:a8:4e:d6:51:dc:72:cf:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=63cfca8c-84ab-4663-8f1b-230140838aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:95:e3:49:78:53:41:48:89:d5:5b:13:6f:6c: d0:dd:26:60:a5:37:7e:07:69:20:02:f4:ff:65:ed: b0:83:60:f1:19:5e:90:4d:24:6e:e5:32:c5:2e:1c: 16:5c:35:b5:96:29:1b:98:2b:80:2e:b5:78:06:ba: e9:86:bd:48:df:67:58:25:f3:84:04:1c:54:69:e8: bb:42:a6:06:98:70:af:64:d3:ef:59:3d:8e:38:15: f2:c9:68:d1:b5:80:f8:85:37:1e:18:6f:fe:ac:82: dc:fd:61:d7:4c:68:31:7b:9d:a3:8b:53:75:8a:96: 1d:a5:0d:51:df:39:4c:05:d3:7c:27:94:24:46:61: da:a0:12:7b:58:ef:c5:ba:21:39:64:bb:f9:8c:e3: 02:67:ff:f3:59:c5:eb:94:e0:ff:ce:ec:34:02:3f: b5:6e:bd:d5:a2:5b:e1:d6:f4:25:2d:e4:d4:f5:7c: 25:63:f5:f0:ca:d9:77:16:f9:56:39:73:eb:34:55: 53:c2:dd:15:69:f3:00:6d:c4:bc:16:83:74:66:10: 66:89:b7:0a:ae:8e:7b:12:b9:ef:98:be:b4:e3:f6: 2e:86:86:95:57:aa:6d:37:d7:fc:e2:cb:b5:62:61: 80:b2:82:3a:71:08:4e:25:17:cb:87:5a:2a:d4:36: 7f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:37:FF:47:A4:52:2D:A4:B5:6C:43:51:12:B4:87:C4:EE:E8:67:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f858c95a-fd39-39ff-a0b8-f3d292143cf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.226.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:8f:a2:8c:b3:6c:55:67:4c:06:68:81:a0:91:b1:d9:b2:d0: 5d:01:0a:bc:2f:70:2d:dc:38:a8:6a:e2:d8:4c:af:a1:eb:9a: 8b:80:61:74:21:2a:e2:b2:90:73:ce:5f:bc:c8:85:ff:a1:8e: 89:89:65:c9:38:0d:b9:49:b4:3e:40:3d:dd:86:fc:b0:5d:2a: ac:91:3f:0c:68:3f:e5:ab:d0:2d:f4:c9:f8:3f:ca:21:1b:8a: 49:6a:1d:00:ed:87:94:41:ca:a4:27:55:0c:c9:4c:9c:80:4d: 7c:e7:38:76:fd:27:75:5e:a9:b3:de:a8:f0:e6:ab:07:ad:f4: 44:02:aa:2e:15:b7:78:1a:db:c2:05:7d:84:91:eb:45:b0:1d: 81:66:cd:64:e6:be:a8:22:7c:7e:4c:85:cc:3c:33:96:34:9e: 2a:c1:2f:0e:cf:ee:9d:b9:f8:a8:7c:80:8b:ce:b7:d3:a1:65: f6:98:09:c7:2c:1a:1e:88:3f:bd:db:dc:41:ac:23:66:53:e6: 8d:9c:f6:87:98:17:b5:07:77:ce:1d:8f:e8:c7:99:59:5e:2d: 1c:56:d6:4b:b9:14:a9:3a:f7:d4:ed:bc:2f:c4:f9:3c:a2:66: d5:77:a2:b0:e5:18:c0:0a:93:fa:ea:c2:c7:ee:cf:1e:b7:8c: b8:e9:14:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebMioTtZR3HLPPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NjNjZmNhOGMtODRhYi00NjYzLThmMWItMjMwMTQwODM4YWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JXjSXhTQUiJ1VsTb2zQ3SZgpTd+B2kgAvT/ Ze2wg2DxGV6QTSRu5TLFLhwWXDW1likbmCuALrV4Brrphr1I32dYJfOEBBxUaei7 QqYGmHCvZNPvWT2OOBXyyWjRtYD4hTceGG/+rILc/WHXTGgxe52ji1N1ipYdpQ1R 3zlMBdN8J5QkRmHaoBJ7WO/FuiE5ZLv5jOMCZ//zWcXrlOD/zuw0Aj+1br3Volvh 1vQlLeTU9XwlY/Xwytl3FvlWOXPrNFVTwt0VafMAbcS8FoN0ZhBmibcKro57Ernv mL604/YuhoaVV6ptN9f84su1YmGAsoI6cQhOJRfLh1oq1DZ/0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEo3/0ekUi2ktWxDURK0h8Tu6GczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjg1OGM5NWEtZmQzOS0z OWZmLWEwYjgtZjNkMjkyMTQzY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER+KwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGePooyzbFVnTAZogaCRsdmy0F0BCrwvcC3cOKhq4thMr6HrmouAYXQh KuKykHPOX7zIhf+hjomJZck4DblJtD5APd2G/LBdKqyRPwxoP+Wr0C30yfg/yiEb iklqHQDth5RByqQnVQzJTJyATXznOHb9J3VeqbPeqPDmqwet9EQCqi4Vt3ga28IF fYSR60WwHYFmzWTmvqgifH5Mhcw8M5Y0nirBLw7P7p25+Kh8gIvOt9OhZfaYCccs Gh6IP73b3EGsI2ZT5o2c9oeYF7UHd84dj+jHmVleLRxW1ku5FKk699TtvC/E+Tyi ZtV3orDlGMAKk/rqwsfuzx63jLjpFOk= -----END CERTIFICATE-----Generated at Sat Apr 5 11:11:31 2025 by rpki-client