$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd6d5070-b537-3f17-9959-f78d0bcac957.roa File: fd6d5070-b537-3f17-9959-f78d0bcac957.roa (raw, json) Hash identifier: dtQvsurgDLIptTZmA8NJ0HDU+HhBPNztyOdkZm/jtsw= Subject key identifier: 98:9D:A7:70:6C:26:F6:E2:83:EF:80:20:A0:43:1F:2C:CE:BA:72:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CF299AB51368A0B4355E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd6d5070-b537-3f17-9959-f78d0bcac957.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 71.228.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:f2:99:ab:51:36:8a:0b:43:55:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=9fecf504-22bd-4419-b522-ba82606a164f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:6c:27:75:a2:46:24:58:15:cb:ee:4b:c1: 7c:88:f3:79:17:d5:57:3a:41:b9:05:40:58:7a:4e: 3e:78:47:16:2d:d3:81:5c:fe:19:00:a8:67:20:28: 64:3a:f6:a3:d9:7c:99:8e:ea:99:c8:fc:c0:68:7f: 37:3f:36:b6:cf:eb:35:0a:6a:ef:8a:4e:c6:c7:69: 9f:d8:14:4e:77:8f:52:cc:92:d1:f8:67:bd:5c:2b: 74:f3:a6:5f:71:b3:3d:8e:07:f5:ec:58:dd:6c:2a: ba:6d:fa:45:f6:dd:55:f3:c9:a8:0e:af:a8:8c:3c: e3:2d:78:c7:af:8b:6d:0d:e3:83:f8:7d:68:12:93: 78:18:76:a8:9b:f0:15:ac:e9:ba:e2:bc:7f:2d:ed: 87:cb:a6:84:97:76:b6:fa:cf:e3:b3:46:55:70:50: 02:2b:02:0d:8a:ad:7d:92:5c:56:c7:97:19:d3:07: 30:fe:9b:2b:2b:50:77:95:f4:72:5c:c2:2c:dc:f5: ea:9a:f4:d4:1d:f4:03:1c:b2:74:69:04:ab:91:9e: 67:10:4d:1b:39:23:89:83:d8:0f:3a:12:a1:a4:e8: af:44:55:92:f0:33:f9:d7:2d:69:cb:6e:3b:a7:37: c6:13:d3:01:4c:20:95:06:24:9c:09:9b:ae:24:76: a7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9D:A7:70:6C:26:F6:E2:83:EF:80:20:A0:43:1F:2C:CE:BA:72:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd6d5070-b537-3f17-9959-f78d0bcac957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:44:bb:92:28:86:3d:ea:d9:36:aa:79:b1:a9:a7:09:07:96: de:17:82:a0:5d:32:42:e4:80:1a:4d:17:03:c9:fd:75:0b:eb: 51:0b:61:da:ab:9d:0f:df:32:f6:1b:fd:ef:30:0f:44:2f:06: d6:17:5f:e2:3c:21:b5:8a:4b:60:21:b0:2f:27:d4:98:76:4d: 57:aa:13:ef:aa:30:75:d0:6b:d6:43:76:fa:94:3e:3d:97:41: a3:b1:24:ef:88:88:34:f6:f8:4e:a9:b6:c5:82:08:6f:e8:b7: 62:83:e6:d3:b8:85:b1:a5:cf:67:8d:bb:0e:c3:c2:dc:44:c2: c1:07:0c:3c:66:2d:66:6e:71:d2:10:0e:ef:74:19:84:2c:0f: 33:57:16:73:69:a2:7f:06:de:b2:71:0a:b0:0b:56:49:76:75: fc:a8:2e:29:ac:90:0a:83:11:86:1a:13:56:ed:18:a5:87:1c: da:e1:da:fd:ae:77:ce:79:2f:9c:93:fa:2d:46:f2:34:4e:3d: 71:2e:8b:82:79:cb:81:52:4f:1c:76:17:40:8c:51:5e:47:a3: 7f:90:68:fa:80:06:12:d5:e5:d2:79:f6:61:6d:0a:ba:eb:0c: cc:d6:0a:2a:9d:e4:5c:55:e3:09:50:f6:ae:bd:bf:42:f0:25: a8:74:b4:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebPKZq1E2igtDVeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OWZlY2Y1MDQtMjJiZC00NDE5LWI1MjItYmE4MjYwNmExNjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4dsJ3WiRiRYFcvuS8F8iPN5F9VXOkG5BUBY ek4+eEcWLdOBXP4ZAKhnIChkOvaj2XyZjuqZyPzAaH83Pza2z+s1Cmrvik7Gx2mf 2BROd49SzJLR+Ge9XCt086ZfcbM9jgf17FjdbCq6bfpF9t1V88moDq+ojDzjLXjH r4ttDeOD+H1oEpN4GHaom/AVrOm64rx/Le2Hy6aEl3a2+s/js0ZVcFACKwINiq19 klxWx5cZ0wcw/psrK1B3lfRyXMIs3PXqmvTUHfQDHLJ0aQSrkZ5nEE0bOSOJg9gP OhKhpOivRFWS8DP51y1py247pzfGE9MBTCCVBiScCZuuJHantQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJidp3BsJvbig++AIKBDHyzOunJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmQ2ZDUwNzAtYjUzNy0z ZjE3LTk5NTktZjc4ZDBiY2FjOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+TcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtEu5Iohj3q2TaqebGppwkHlt4XgqBdMkLkgBpNFwPJ/XUL61ELYdqr nQ/fMvYb/e8wD0QvBtYXX+I8IbWKS2AhsC8n1Jh2TVeqE++qMHXQa9ZDdvqUPj2X QaOxJO+IiDT2+E6ptsWCCG/ot2KD5tO4hbGlz2eNuw7DwtxEwsEHDDxmLWZucdIQ Du90GYQsDzNXFnNpon8G3rJxCrALVkl2dfyoLimskAqDEYYaE1btGKWHHNrh2v2u d855L5yT+i1G8jROPXEui4J5y4FSTxx2F0CMUV5Ho3+QaPqABhLV5dJ59mFtCrrr DMzWCiqd5FxV4wlQ9q69v0LwJah0tHA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:25:08 2025 by rpki-client