$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c362503-2052-34f2-a660-691bfd9aafa4.roa File: 4c362503-2052-34f2-a660-691bfd9aafa4.roa (raw, json) Hash identifier: 30+HsVHej3VVTcFzBfSHJVqQoBCRXf4AuwK7mpzV/Ms= Subject key identifier: 1E:4E:8E:F8:94:5E:41:13:3C:D6:24:7A:FE:FC:D6:CF:72:45:A7:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6203C64D73FA0B0EBB3C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c362503-2052-34f2-a660-691bfd9aafa4.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33489 IP address blocks: 71.228.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:20:3c:64:d7:3f:a0:b0:eb:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=8f42083f-ec52-4543-b2a3-d0b044566c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e6:ce:04:f3:aa:61:35:f9:0e:c2:02:a3:ca: 1e:25:1e:e3:df:76:97:9c:e8:cc:95:55:e5:7a:cf: 1f:f8:33:dd:2d:ab:02:ed:95:ba:8a:26:de:6c:9a: f1:99:9a:1d:06:b0:c9:d9:78:02:f2:f8:12:9b:d6: 58:7c:cf:ee:8b:ba:43:30:39:29:d8:24:2d:c9:a7: a8:37:5d:32:b9:d0:0c:a9:f5:71:0d:0f:38:40:71: 86:ed:65:2e:4b:53:18:4a:dd:c7:56:7d:54:21:35: 06:db:99:a7:a6:9b:f8:19:ad:0a:56:3d:53:68:72: 0c:31:67:0c:96:75:00:67:97:67:2c:a6:2f:59:ea: 86:ae:e1:f3:08:70:d3:2f:e9:21:ba:ee:06:70:64: a1:d8:75:c5:d9:9f:e1:ab:5c:b1:8e:cb:a7:ed:1a: a7:02:b1:be:e2:87:30:00:f5:fc:d8:74:e6:9b:1b: d5:a0:89:41:c3:40:58:01:7f:27:d1:33:18:cf:6c: eb:7b:92:6d:2d:01:fe:43:71:55:22:70:4d:07:21: 81:ed:90:cd:ae:68:1d:6e:fc:ee:16:79:3e:d3:fb: ec:6d:2f:0c:dd:44:14:b0:d8:de:20:10:16:f4:e8: 7a:d3:53:3c:7b:79:28:e3:78:c2:d3:3c:00:54:44: 93:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4E:8E:F8:94:5E:41:13:3C:D6:24:7A:FE:FC:D6:CF:72:45:A7:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c362503-2052-34f2-a660-691bfd9aafa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ea:7b:1d:20:a4:d4:ae:44:4f:5c:2a:2b:d0:1e:4b:87:e5: 0e:37:d2:fc:07:d2:00:5e:a0:6a:52:e0:48:ab:3a:3f:2f:e7: 44:2d:66:d5:95:df:3f:bd:19:35:76:e0:a9:18:d2:71:4a:d1: 28:b6:f5:98:13:f2:28:39:17:f3:22:7e:49:d3:d7:4f:64:4f: 39:c6:0a:b8:62:f9:52:5c:72:16:da:25:3f:c1:6c:12:30:6d: f9:03:c1:37:f8:40:14:8b:a6:3e:ef:3e:22:73:7a:92:d8:e7: a4:b7:fb:ca:c6:10:67:9b:8f:12:03:e1:91:fe:a4:8b:c1:74: f1:b7:1d:25:ff:30:a9:29:8a:24:b5:8a:f6:93:b1:59:a3:db: c2:6f:4f:ea:7c:50:20:41:b2:59:35:13:f9:b8:cc:17:d3:db: e4:de:20:aa:da:e0:d9:76:86:39:b4:2f:97:75:15:85:34:eb: e3:a5:c2:48:e9:46:eb:fd:0b:98:66:38:1a:79:1f:d1:7f:c7: b9:1c:9b:2d:74:00:82:d2:65:c5:aa:f7:7d:f1:a5:3c:5b:77: 5f:bf:a0:12:d0:28:72:5f:cb:66:8b:78:64:da:87:15:b6:bb: 4e:20:fc:d5:94:54:5c:67:4c:a1:05:e0:15:08:30:24:e4:a6: ce:48:ea:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9piA8ZNc/oLDrs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk OGY0MjA4M2YtZWM1Mi00NTQzLWIyYTMtZDBiMDQ0NTY2YzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ebOBPOqYTX5DsICo8oeJR7j33aXnOjMlVXl es8f+DPdLasC7ZW6iibebJrxmZodBrDJ2XgC8vgSm9ZYfM/ui7pDMDkp2CQtyaeo N10yudAMqfVxDQ84QHGG7WUuS1MYSt3HVn1UITUG25mnppv4Ga0KVj1TaHIMMWcM lnUAZ5dnLKYvWeqGruHzCHDTL+khuu4GcGSh2HXF2Z/hq1yxjsun7RqnArG+4ocw APX82HTmmxvVoIlBw0BYAX8n0TMYz2zre5JtLQH+Q3FVInBNByGB7ZDNrmgdbvzu Fnk+0/vsbS8M3UQUsNjeIBAW9Oh601M8e3ko43jC0zwAVESTswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5OjviUXkETPNYkev781s9yRaeAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGMzNjI1MDMtMjA1Mi0z NGYyLWE2NjAtNjkxYmZkOWFhZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER+SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/qex0gpNSuRE9cKivQHkuH5Q430vwH0gBeoGpS4EirOj8v50QtZtWV 3z+9GTV24KkY0nFK0Si29ZgT8ig5F/MifknT109kTznGCrhi+VJcchbaJT/BbBIw bfkDwTf4QBSLpj7vPiJzepLY56S3+8rGEGebjxID4ZH+pIvBdPG3HSX/MKkpiiS1 ivaTsVmj28JvT+p8UCBBslk1E/m4zBfT2+TeIKra4Nl2hjm0L5d1FYU06+Olwkjp Ruv9C5hmOBp5H9F/x7kcmy10AILSZcWq933xpTxbd1+/oBLQKHJfy2aLeGTahxW2 u04g/NWUVFxnTKEF4BUIMCTkps5I6oE= -----END CERTIFICATE-----Generated at Sun May 11 09:28:18 2025 by rpki-client