$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd2b0e61-0429-33d1-bbad-043b2a84f491.roa File: bd2b0e61-0429-33d1-bbad-043b2a84f491.roa (raw, json) Hash identifier: oAD4e+CRthKS+q6EtBG5CZf+zg7QuwSKaXapu0eLSF8= Subject key identifier: 4E:E5:F1:BF:23:1B:4D:5C:D3:FF:47:FB:6F:2E:EE:46:B7:FD:44:8D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F70F7E3E33FDA2682F0500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd2b0e61-0429-33d1-bbad-043b2a84f491.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 71.235.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:0f:7e:3e:33:fd:a2:68:2f:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=9fcc3370-c95a-4dec-86e4-25cbfe3a1d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:35:58:25:c8:ee:5b:93:c3:d1:dc:b4:54:44: e5:77:3b:1c:10:f8:9b:09:4f:ae:52:d8:05:25:cc: 48:b9:76:3b:b3:95:98:16:23:03:ad:5c:71:42:a8: 17:36:1f:c7:5d:d6:20:69:fc:71:75:18:58:d1:8c: a4:bb:fb:1e:e3:3e:7c:f6:4b:69:2c:5c:09:6f:b2: 99:91:3d:1c:79:5c:ba:1c:5f:ce:fc:dc:39:6a:62: 63:a2:00:33:1a:2a:af:4d:fb:5b:ec:fd:06:19:09: fd:6f:b5:65:bf:83:15:8c:cd:8a:cc:d9:4a:a3:b9: c9:6d:98:d8:5f:1d:ca:2d:39:eb:24:ae:73:47:ce: 29:22:f9:51:83:ca:f3:87:b2:f4:ff:fd:dc:6a:ba: 15:6c:16:40:86:db:3a:31:61:44:79:b0:a0:e3:9a: 94:ba:ae:ea:1e:3d:d9:94:aa:ee:c6:cf:30:59:62: 88:ad:bc:92:f7:bc:d0:70:e8:82:5d:55:19:f7:fe: 95:af:02:aa:18:52:99:57:9d:a0:0b:02:d9:33:d8: 1c:b3:0f:88:0e:e8:31:79:e8:9e:ba:ca:b1:f1:ce: 04:c0:af:c5:d4:56:d1:92:6e:06:93:f4:d5:26:fa: 34:29:0c:d8:8a:d9:fd:57:85:f9:5e:c9:2b:e1:81: 18:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E5:F1:BF:23:1B:4D:5C:D3:FF:47:FB:6F:2E:EE:46:B7:FD:44:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd2b0e61-0429-33d1-bbad-043b2a84f491.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.235.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:33:62:9d:47:0b:11:36:bd:23:85:52:8c:72:9d:d7:61:dd: a3:cb:3f:a4:ed:e6:33:28:c6:5c:86:44:cc:05:36:60:7a:5f: 49:9a:88:88:91:0e:37:5f:c2:d0:89:d7:ef:bf:81:28:50:8b: f0:5d:70:8b:c8:74:b7:b7:e1:07:96:b2:81:b1:a0:94:24:33: 74:cb:9f:3d:61:cc:b0:68:98:f1:48:28:92:36:d7:2f:32:c5: 86:d6:b4:b2:b8:dd:67:4f:e0:53:0e:cb:2e:b8:c9:34:6b:1f: 47:b7:2e:07:f1:95:9a:d9:fe:80:80:d8:5d:f1:75:16:71:87: 17:23:d8:a0:c7:5a:c5:83:32:5d:e3:86:38:a7:45:e6:81:53: b2:0a:99:f5:8d:ac:4d:30:3d:3c:e1:34:25:2a:d8:96:8a:fe: 29:31:ab:38:d5:ad:7b:b5:78:6c:af:d5:81:bd:14:fe:46:46: 92:7a:a9:2a:1b:f1:8d:c6:82:35:fd:d3:e9:9e:1a:fa:0b:67: 27:f2:1d:96:a7:af:89:b1:11:d6:58:41:87:ec:3b:5e:dc:b5: 22:6a:f4:f8:ec:a2:cd:e2:27:8f:19:d8:34:a8:6a:99:89:91: 53:76:96:f8:30:1b:a6:9a:13:b6:b7:25:2d:91:8d:5a:35:9c: 04:c3:41:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09w9+PjP9omgvBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OWZjYzMzNzAtYzk1YS00ZGVjLTg2ZTQtMjVjYmZlM2ExZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zVYJcjuW5PD0dy0VETldzscEPibCU+uUtgF JcxIuXY7s5WYFiMDrVxxQqgXNh/HXdYgafxxdRhY0Yyku/se4z589ktpLFwJb7KZ kT0ceVy6HF/O/Nw5amJjogAzGiqvTftb7P0GGQn9b7Vlv4MVjM2KzNlKo7nJbZjY Xx3KLTnrJK5zR84pIvlRg8rzh7L0//3caroVbBZAhts6MWFEebCg45qUuq7qHj3Z lKruxs8wWWKIrbyS97zQcOiCXVUZ9/6VrwKqGFKZV52gCwLZM9gcsw+IDugxeeie usqx8c4EwK/F1FbRkm4Gk/TVJvo0KQzYitn9V4X5Xskr4YEYwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7l8b8jG01c0/9H+28u7ka3/USNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQyYjBlNjEtMDQyOS0z M2QxLWJiYWQtMDQzYjJhODRmNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+vwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8zYp1HCxE2vSOFUoxynddh3aPLP6Tt5jMoxlyGRMwFNmB6X0maiIiR DjdfwtCJ1++/gShQi/BdcIvIdLe34QeWsoGxoJQkM3TLnz1hzLBomPFIKJI21y8y xYbWtLK43WdP4FMOyy64yTRrH0e3LgfxlZrZ/oCA2F3xdRZxhxcj2KDHWsWDMl3j hjinReaBU7IKmfWNrE0wPTzhNCUq2JaK/ikxqzjVrXu1eGyv1YG9FP5GRpJ6qSob 8Y3GgjX90+meGvoLZyfyHZanr4mxEdZYQYfsO17ctSJq9Pjsos3iJ48Z2DSoapmJ kVN2lvgwG6aaE7a3JS2RjVo1nATDQWk= -----END CERTIFICATE-----Generated at Sun May 11 04:14:50 2025 by rpki-client