$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca279d5e-bac0-35e1-919b-ce688fae689b.roa File: ca279d5e-bac0-35e1-919b-ce688fae689b.roa (raw, json) Hash identifier: BwJVjfySGwill1TiThAFr6WKlkC9hr7hPeJYY0pqX3E= Subject key identifier: 48:69:49:05:A6:78:A9:6C:0B:3A:D4:50:A1:26:8C:48:A7:BA:9E:A2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6284FFF3A828CC8EE2A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca279d5e-bac0-35e1-919b-ce688fae689b.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33650 IP address blocks: 71.24.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:28:4f:ff:3a:82:8c:c8:ee:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=ba64fbda-3951-4c13-995d-bdc0bbecbc6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6e:22:d5:03:d3:08:ec:c1:2b:92:57:17:09: 22:77:fc:11:89:93:88:92:6c:55:33:e6:10:74:f8: 6c:b3:69:cc:60:b5:2d:c2:93:54:43:b3:45:a2:f4: 27:68:c4:eb:7c:e7:ad:56:64:6f:9b:32:f0:b3:76: b5:e7:b4:dc:af:ec:da:5f:01:29:56:ce:3a:08:ea: 49:97:dc:f9:77:66:41:d1:b4:4a:a6:0d:60:e3:95: 05:b9:ce:a6:4e:57:51:d3:84:ea:be:55:54:17:17: 81:47:27:6e:7d:06:f3:ca:ce:87:54:d0:ff:b1:ff: f5:04:d8:af:0b:22:aa:60:6e:1d:bd:04:23:94:7b: 94:2f:3f:82:fd:ce:0d:dd:e0:5b:ff:56:a4:90:ae: e5:90:ad:fa:5a:34:ec:d7:ea:ab:a7:20:a2:5d:ec: fe:e9:63:91:4e:30:e2:78:8b:c1:67:c8:6b:2f:ba: 5c:47:67:34:69:2a:59:d2:44:f4:4a:1e:aa:fb:e1: 3f:4a:e0:b9:a9:be:46:ab:28:df:09:b4:59:c1:34: 23:df:8e:a9:fa:48:26:e6:b6:f7:7d:d9:6e:f5:83: 33:01:fa:75:8e:58:cf:4a:00:d2:38:1f:b9:28:39: a7:27:e4:fb:41:42:85:fc:24:77:8d:d5:df:b7:e6: 4b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:69:49:05:A6:78:A9:6C:0B:3A:D4:50:A1:26:8C:48:A7:BA:9E:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca279d5e-bac0-35e1-919b-ce688fae689b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.24.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1a:1a:e4:df:ef:57:5f:b6:b5:83:30:97:a2:d8:b8:24:21: dd:cb:b7:43:03:18:b5:91:22:4b:fe:9d:4f:7c:9f:ac:ae:60: ef:19:70:11:87:9f:e9:dc:fb:dd:9f:31:67:e0:e9:a9:f7:8b: f7:b5:2f:18:41:97:aa:e4:19:3c:e2:c6:b5:69:55:c0:0a:a4: c0:56:97:71:c0:de:75:08:91:66:05:51:32:2a:c8:c5:09:03: 75:4f:3a:6c:dd:b7:9d:76:49:fd:d7:39:90:5f:ba:63:69:28: 28:ae:6d:b2:50:47:3c:57:03:4a:59:0c:12:74:b3:38:4d:f1: ad:57:30:d4:b7:78:8d:fc:fa:52:df:57:ba:35:fa:f8:7c:c3: 4d:5f:30:b4:9e:54:f3:3e:8c:7a:80:87:d0:a9:8f:3a:c5:12: 97:ce:86:31:c7:ef:47:9f:eb:ea:c9:c1:74:15:80:ae:ab:b4: 53:42:66:b9:d3:4d:00:ae:d2:c3:c0:ed:79:9a:5d:d2:a3:ef: 21:31:e9:7a:b3:a1:91:f1:00:09:19:b2:76:98:ef:78:3c:3e: 8f:a9:b7:68:23:94:c5:02:72:e0:8e:dd:15:ef:67:6b:87:8a: 52:05:46:8d:28:96:71:68:65:12:20:34:0c:36:62:fc:44:d6: 79:e0:f5:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pihP/zqCjMjuKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YmE2NGZiZGEtMzk1MS00YzEzLTk5NWQtYmRjMGJiZWNiYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7m4i1QPTCOzBK5JXFwkid/wRiZOIkmxVM+YQ dPhss2nMYLUtwpNUQ7NFovQnaMTrfOetVmRvmzLws3a157Tcr+zaXwEpVs46COpJ l9z5d2ZB0bRKpg1g45UFuc6mTldR04TqvlVUFxeBRydufQbzys6HVND/sf/1BNiv CyKqYG4dvQQjlHuULz+C/c4N3eBb/1akkK7lkK36WjTs1+qrpyCiXez+6WORTjDi eIvBZ8hrL7pcR2c0aSpZ0kT0Sh6q++E/SuC5qb5GqyjfCbRZwTQj346p+kgm5rb3 fdlu9YMzAfp1jljPSgDSOB+5KDmnJ+T7QUKF/CR3jdXft+ZLDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhpSQWmeKlsCzrUUKEmjEinup6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2EyNzlkNWUtYmFjMC0z NWUxLTkxOWItY2U2ODhmYWU2ODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRxigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMaGuTf71dftrWDMJei2LgkId3Lt0MDGLWRIkv+nU98n6yuYO8ZcBGH n+nc+92fMWfg6an3i/e1LxhBl6rkGTzixrVpVcAKpMBWl3HA3nUIkWYFUTIqyMUJ A3VPOmzdt512Sf3XOZBfumNpKCiubbJQRzxXA0pZDBJ0szhN8a1XMNS3eI38+lLf V7o1+vh8w01fMLSeVPM+jHqAh9CpjzrFEpfOhjHH70ef6+rJwXQVgK6rtFNCZrnT TQCu0sPA7XmaXdKj7yEx6XqzoZHxAAkZsnaY73g8Po+pt2gjlMUCcuCO3RXvZ2uH ilIFRo0olnFoZRIgNAw2YvxE1nng9XI= -----END CERTIFICATE-----Generated at Sun May 11 14:44:05 2025 by rpki-client