$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f989e52-c25d-36d5-aed0-e9ff98901e71.roa File: 3f989e52-c25d-36d5-aed0-e9ff98901e71.roa (raw, json) Hash identifier: 3cB6t383ud/U9Qkp/Z1foTtheVGzYYw/pXmEdXCcAn8= Subject key identifier: 2A:DF:34:B1:97:D5:05:31:BA:28:7B:A1:48:2C:B2:96:7E:05:01:CF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F86BEED3565454554E7480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f989e52-c25d-36d5-aed0-e9ff98901e71.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 71.233.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:6b:ee:d3:56:54:54:55:4e:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=65f085e4-3b9e-4bea-b906-e5a51d4eb812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:85:6a:3b:b4:6f:ba:2c:1c:06:0d:af:d8:2a: a5:bf:fa:22:17:49:b9:cd:9e:57:6f:36:75:14:87: 67:bd:ed:c7:0d:bb:7c:26:fc:6a:e9:39:19:de:c7: 50:9d:46:de:d9:1a:08:e9:1d:03:5d:3a:97:ed:22: f7:76:01:fd:a6:ad:e7:ce:77:3e:cc:66:6b:2c:b9: 03:31:30:aa:26:53:a4:31:59:f4:a0:0b:da:ea:09: fe:51:02:3f:6b:04:69:44:07:b5:8a:9f:ed:59:5c: ed:fb:44:40:aa:5c:89:c0:49:73:e6:b5:5f:07:1d: 2f:f9:df:ea:9f:5a:2c:38:c1:df:77:d8:9c:5d:40: 62:46:7f:11:19:5f:e6:f9:79:3e:a3:24:bc:a5:c9: 91:0e:9c:45:27:de:01:1f:b3:7b:e9:90:31:74:c9: 1b:62:f4:37:6d:4d:77:a2:bd:02:d2:8d:6e:ab:d7: cd:41:df:a8:08:d4:ee:0f:4c:45:d2:2f:72:8e:ae: 9d:09:8f:c6:bf:81:7c:71:8a:84:89:7a:7d:69:40: 8e:c7:be:18:58:95:cf:ac:82:9c:b7:f6:e4:28:94: 6f:de:22:5e:b6:73:e0:f3:52:56:ba:3f:00:46:66: d7:af:a8:d8:43:95:0d:e9:7e:fe:d8:46:5f:5f:fc: 83:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DF:34:B1:97:D5:05:31:BA:28:7B:A1:48:2C:B2:96:7E:05:01:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f989e52-c25d-36d5-aed0-e9ff98901e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.233.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:46:35:4d:03:55:32:20:b6:33:ae:74:97:45:7f:09:54:8b: 9f:4c:ea:6f:b3:57:30:68:8a:fa:42:a4:70:17:92:ea:72:d7: ea:d2:c9:08:03:c5:79:2e:7d:d6:a5:2d:a1:5f:23:7f:2b:50: 40:aa:6e:f4:37:72:02:5f:19:bc:c5:62:4c:12:52:72:e5:99: b5:0d:d4:e9:0a:12:99:ab:17:61:3a:12:32:1c:4c:b0:d3:13: 3d:7b:f7:c2:b5:04:6c:e8:66:01:d7:76:28:b3:91:c5:9c:a3: 5b:37:99:94:ad:a9:2d:ee:38:07:e1:32:54:12:19:c1:27:4a: 4e:f1:1b:56:28:71:b7:cc:b2:a0:62:cf:de:58:97:7c:a2:19: 32:1d:73:eb:1a:ad:fc:fc:e9:9d:e3:dc:c7:c9:e7:be:4f:9c: d1:f0:38:70:c4:c2:48:38:13:2c:a3:1c:29:f9:11:a5:9c:79: f1:a5:4f:9b:97:df:e5:63:e3:d7:08:9e:4f:2b:03:f9:53:45: 5f:80:5e:f0:50:28:73:3c:58:c9:ae:a8:cc:12:ec:d5:07:4a: 9b:9c:f2:e9:a0:18:21:6c:29:70:70:f7:e2:bf:d0:8c:dd:6d: 23:3b:61:cd:39:6d:16:43:02:59:d0:fa:0a:2d:cb:2e:65:11: b0:34:00:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Gvu01ZUVFVOdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NjVmMDg1ZTQtM2I5ZS00YmVhLWI5MDYtZTVhNTFkNGViODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoVqO7RvuiwcBg2v2Cqlv/oiF0m5zZ5XbzZ1 FIdnve3HDbt8Jvxq6TkZ3sdQnUbe2RoI6R0DXTqX7SL3dgH9pq3nznc+zGZrLLkD MTCqJlOkMVn0oAva6gn+UQI/awRpRAe1ip/tWVzt+0RAqlyJwElz5rVfBx0v+d/q n1osOMHfd9icXUBiRn8RGV/m+Xk+oyS8pcmRDpxFJ94BH7N76ZAxdMkbYvQ3bU13 or0C0o1uq9fNQd+oCNTuD0xF0i9yjq6dCY/Gv4F8cYqEiXp9aUCOx74YWJXPrIKc t/bkKJRv3iJetnPg81JWuj8ARmbXr6jYQ5UN6X7+2EZfX/yDoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrfNLGX1QUxuih7oUgsspZ+BQHPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y5ODllNTItYzI1ZC0z NmQ1LWFlZDAtZTlmZjk4OTAxZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+n6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1GNU0DVTIgtjOudJdFfwlUi59M6m+zVzBoivpCpHAXkupy1+rSyQgD xXkufdalLaFfI38rUECqbvQ3cgJfGbzFYkwSUnLlmbUN1OkKEpmrF2E6EjIcTLDT Ez1798K1BGzoZgHXdiizkcWco1s3mZStqS3uOAfhMlQSGcEnSk7xG1YocbfMsqBi z95Yl3yiGTIdc+sarfz86Z3j3MfJ575PnNHwOHDEwkg4EyyjHCn5EaWcefGlT5uX 3+Vj49cInk8rA/lTRV+AXvBQKHM8WMmuqMwS7NUHSpuc8umgGCFsKXBw9+K/0Izd bSM7Yc05bRZDAlnQ+gotyy5lEbA0AIk= -----END CERTIFICATE-----Generated at Sat May 10 09:50:54 2025 by rpki-client