$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd64b5fb-b725-310f-ac4d-a10b64feec18.roa File: fd64b5fb-b725-310f-ac4d-a10b64feec18.roa (raw, json) Hash identifier: E9Q6lb2ZTua1MAExDooffMsok3W9HinZDkZ9SNE0WHE= Subject key identifier: 3F:3A:87:AD:75:28:39:52:BC:D8:CB:CE:DA:96:F1:B5:CC:00:94:B4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB095A257CECE6302700140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd64b5fb-b725-310f-ac4d-a10b64feec18.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 71.225.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:95:a2:57:ce:ce:63:02:70:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=bd93f381-558e-46c5-8048-83246fb5e497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:44:6c:9e:e7:93:08:71:b1:36:a2:37:cb:ee: e1:9b:19:23:66:d6:55:50:df:e6:7d:df:52:f9:6c: 2f:9b:52:25:e6:7a:1a:25:c5:56:b2:05:83:18:19: a2:47:55:a9:42:79:97:a2:2b:fa:23:6a:a8:a4:8a: 6b:dd:89:b4:0c:e6:24:6f:44:75:13:92:7d:b5:1f: fc:c0:44:a0:0d:b7:8d:86:10:93:c1:76:ec:4d:b9: cc:5e:85:19:e7:62:d4:5f:a9:03:4a:cc:42:55:41: 2c:5c:bc:49:36:2a:fe:12:34:0a:70:5b:01:ef:91: fa:46:6f:d6:00:9b:5c:ac:05:22:17:1e:e0:68:ae: 5d:da:05:dd:1e:63:51:97:93:1d:a7:8f:b0:aa:a6: a3:51:1d:b5:b7:db:06:0a:09:95:5e:e7:81:55:73: d5:87:2b:5f:e1:27:e1:51:3b:9e:f3:17:e9:ca:44: bc:76:24:ff:38:b2:7b:fc:60:85:37:60:a8:69:28: a2:c2:2e:72:84:2f:cf:c9:24:26:e5:08:0c:1c:be: 86:4d:c2:37:4c:45:4d:d2:f4:78:8a:22:d8:16:31: 29:ac:fb:db:f1:75:db:04:4a:da:5f:8f:4d:d3:32: 70:c7:f1:72:f8:72:f3:8e:3e:1f:21:64:30:03:2c: e9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3A:87:AD:75:28:39:52:BC:D8:CB:CE:DA:96:F1:B5:CC:00:94:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd64b5fb-b725-310f-ac4d-a10b64feec18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:23:a5:76:a1:84:36:ad:0d:09:ef:21:55:37:39:b0:2c:e9: 19:4e:00:70:a5:be:1b:82:28:c9:c9:ed:51:cd:e1:e8:19:76: f9:37:a4:2e:95:33:3b:27:66:5f:0e:b2:64:7e:03:c0:38:78: e4:ce:07:a7:68:7d:1c:aa:c0:b7:03:c6:a4:4a:31:2c:d1:64: 3f:cd:11:2d:0c:af:f7:08:bc:0c:c2:1e:23:3b:63:3d:3e:85: c3:ad:2d:ac:d6:24:14:c5:63:ed:ec:ee:f4:4f:05:16:07:0d: 3f:fa:2d:4a:7f:49:ca:14:88:56:d7:ff:7f:ab:e9:04:0d:19: dc:db:47:66:75:0a:9e:ab:55:96:d4:cf:dd:6b:d2:63:a7:93: 4e:a5:f6:6a:c6:dd:a4:9d:ea:69:e8:6c:42:52:20:45:32:d2: ee:1d:5f:b3:1b:65:ee:2e:7f:4b:88:11:5d:a0:91:b3:8e:4d: ba:8a:17:d1:9f:b4:05:2c:70:68:b8:43:ff:23:06:3a:c8:f8: a1:03:cf:4a:28:78:83:48:bd:b1:1c:9d:c5:5b:71:19:40:b5: e2:84:91:b0:9b:96:9b:c9:5a:0c:cc:62:f7:4a:e0:27:80:b4: 8a:f7:8a:ab:62:10:5e:a3:3e:28:be:84:ae:29:5f:62:99:0e: d1:5c:f1:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssJWiV87OYwJwAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YmQ5M2YzODEtNTU4ZS00NmM1LTgwNDgtODMyNDZmYjVlNDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgERsnueTCHGxNqI3y+7hmxkjZtZVUN/mfd9S +Wwvm1Il5noaJcVWsgWDGBmiR1WpQnmXoiv6I2qopIpr3Ym0DOYkb0R1E5J9tR/8 wESgDbeNhhCTwXbsTbnMXoUZ52LUX6kDSsxCVUEsXLxJNir+EjQKcFsB75H6Rm/W AJtcrAUiFx7gaK5d2gXdHmNRl5Mdp4+wqqajUR21t9sGCgmVXueBVXPVhytf4Sfh UTue8xfpykS8diT/OLJ7/GCFN2CoaSiiwi5yhC/PySQm5QgMHL6GTcI3TEVN0vR4 iiLYFjEprPvb8XXbBEraX49N0zJwx/Fy+HLzjj4fIWQwAyzpnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD86h611KDlSvNjLztqW8bXMAJS0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmQ2NGI1ZmItYjcyNS0z MTBmLWFjNGQtYTEwYjY0ZmVlYzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR+HJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8jpXahhDatDQnvIVU3ObAs6RlOAHClvhuCKMnJ7VHN4egZdvk3pC6V MzsnZl8OsmR+A8A4eOTOB6dofRyqwLcDxqRKMSzRZD/NES0Mr/cIvAzCHiM7Yz0+ hcOtLazWJBTFY+3s7vRPBRYHDT/6LUp/ScoUiFbX/3+r6QQNGdzbR2Z1Cp6rVZbU z91r0mOnk06l9mrG3aSd6mnobEJSIEUy0u4dX7MbZe4uf0uIEV2gkbOOTbqKF9Gf tAUscGi4Q/8jBjrI+KEDz0ooeINIvbEcncVbcRlAteKEkbCblpvJWgzMYvdK4CeA tIr3iqtiEF6jPii+hK4pX2KZDtFc8V0= -----END CERTIFICATE-----Generated at Sun Apr 6 20:09:56 2025 by rpki-client