$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c6bf600-5f18-3d17-83a1-4dd073e63e2c.roa File: 5c6bf600-5f18-3d17-83a1-4dd073e63e2c.roa (raw, json) Hash identifier: wNm9G/jJjbOGqcSq3z0L7byYEEC2Z+2lvZea0040eCg= Subject key identifier: 67:D3:7E:13:BD:3D:81:D7:00:8E:43:C7:3D:D1:A3:1F:79:23:01:9F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5D0D42ADC293B8404B800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c6bf600-5f18-3d17-83a1-4dd073e63e2c.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 71.25.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:d0:d4:2a:dc:29:3b:84:04:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=457e2434-2f68-4bdc-b99d-b344ccb80d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6b:3b:cf:54:51:ba:cb:5b:fe:fd:e4:ce:6b: 86:41:4c:91:7d:b2:11:c7:1e:75:54:25:e5:83:52: aa:c8:2a:e1:9e:ff:87:74:e5:2c:54:61:f3:09:4b: b6:ff:53:08:54:73:a0:61:bd:6e:07:5d:7f:e5:7c: fa:55:bf:c9:ce:a7:49:30:45:aa:70:91:88:5d:af: cd:0f:da:59:44:78:60:bb:00:9b:ba:88:17:6f:6e: 3c:83:b2:95:52:b2:78:1a:67:3d:be:82:6d:21:e9: 85:ad:f7:e6:c9:08:de:6f:2a:a4:65:d6:f1:f1:38: b7:bc:03:73:a7:e3:45:52:ad:5f:99:e3:73:ce:1e: 5a:16:a5:c6:3e:76:f7:3f:10:34:7b:a7:8c:d2:20: 99:46:7a:f0:90:c6:40:4c:ac:64:dc:8f:ec:40:3e: 51:17:4f:af:11:8e:5b:9d:bc:0f:3b:7a:07:b9:4d: 4e:ec:4f:41:1f:a8:fd:ff:ad:b2:fc:55:7b:e5:aa: 56:6f:f5:52:d8:25:9f:b6:d6:8d:61:dc:25:e3:1c: d9:e7:1e:d6:59:cd:d4:a5:fc:ab:22:7a:09:4f:7a: c5:11:bd:14:7e:df:04:08:9d:0b:c0:35:cb:44:39: 41:03:75:65:7b:e6:f4:26:4d:47:ec:5d:71:13:89: e9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D3:7E:13:BD:3D:81:D7:00:8E:43:C7:3D:D1:A3:1F:79:23:01:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c6bf600-5f18-3d17-83a1-4dd073e63e2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.25.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:55:b4:81:d3:1e:c5:28:5d:cd:1b:93:64:63:97:65:44:20: fd:ea:cd:1a:4e:94:c3:76:fa:aa:82:5d:9e:b6:48:0b:13:31: 58:69:9e:46:91:eb:40:d6:3a:08:03:58:d6:f9:3d:d8:08:00: bc:ee:d4:be:8f:ef:2a:53:b4:7b:d5:f8:b3:15:c9:84:7f:c7: 80:77:85:27:68:02:89:31:67:5d:4a:f0:d3:dd:fa:f9:34:23: 93:e3:23:6e:e9:4e:a4:de:95:e9:31:95:90:d7:25:7c:da:7e: b7:ef:c6:f1:e5:49:f0:88:d9:0c:db:2d:99:46:68:88:54:d3: 83:3d:e2:ad:17:88:59:92:bf:e3:bd:ba:98:f6:a0:91:5d:d0: 68:14:e2:a1:4f:f1:76:7d:42:99:96:b3:53:86:6c:6d:b4:7e: bd:12:58:dd:39:fd:02:20:40:cb:53:50:6d:5b:46:ee:25:ca: 1c:59:7d:c3:3f:12:8a:10:4e:ad:36:f7:e2:80:22:dd:40:bb: de:9b:4a:11:82:f4:6e:06:a4:92:c7:a9:4e:75:c1:1c:00:52: 1f:17:23:43:11:df:cc:f6:3f:ec:0a:a6:15:aa:0a:28:e2:d0: 7c:83:4e:53:ea:ab:40:9e:70:11:59:ff:55:b5:d2:04:cf:d8: e0:0d:02:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pdDUKtwpO4QEuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NDU3ZTI0MzQtMmY2OC00YmRjLWI5OWQtYjM0NGNjYjgwZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqms7z1RRustb/v3kzmuGQUyRfbIRxx51VCXl g1KqyCrhnv+HdOUsVGHzCUu2/1MIVHOgYb1uB11/5Xz6Vb/JzqdJMEWqcJGIXa/N D9pZRHhguwCbuogXb248g7KVUrJ4Gmc9voJtIemFrffmyQjebyqkZdbx8Ti3vANz p+NFUq1fmeNzzh5aFqXGPnb3PxA0e6eM0iCZRnrwkMZATKxk3I/sQD5RF0+vEY5b nbwPO3oHuU1O7E9BH6j9/62y/FV75apWb/VS2CWfttaNYdwl4xzZ5x7WWc3Upfyr InoJT3rFEb0Uft8ECJ0LwDXLRDlBA3Vle+b0Jk1H7F1xE4npDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfTfhO9PYHXAI5Dxz3Rox95IwGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWM2YmY2MDAtNWYxOC0z ZDE3LTgzYTEtNGRkMDczZTYzZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERxngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlVtIHTHsUoXc0bk2Rjl2VEIP3qzRpOlMN2+qqCXZ62SAsTMVhpnkaR 60DWOggDWNb5PdgIALzu1L6P7ypTtHvV+LMVyYR/x4B3hSdoAokxZ11K8NPd+vk0 I5PjI27pTqTelekxlZDXJXzafrfvxvHlSfCI2QzbLZlGaIhU04M94q0XiFmSv+O9 upj2oJFd0GgU4qFP8XZ9QpmWs1OGbG20fr0SWN05/QIgQMtTUG1bRu4lyhxZfcM/ EooQTq029+KAIt1Au96bShGC9G4GpJLHqU51wRwAUh8XI0MR38z2P+wKphWqCiji 0HyDTlPqq0CecBFZ/1W10gTP2OANAuk= -----END CERTIFICATE-----Generated at Fri May 9 20:37:38 2025 by rpki-client