$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6db06a1-08e2-37f2-a3a8-8f910856e66b.roa File: e6db06a1-08e2-37f2-a3a8-8f910856e66b.roa (raw, json) Hash identifier: mV5ls3fzaimCgkpZueJ4p96hZVvQE9xZZry9lbmtG30= Subject key identifier: D5:8F:55:57:B4:1A:0B:36:1F:E8:24:72:D9:FB:6A:7B:5F:CD:B9:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6C2541170EF23C3128480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6db06a1-08e2-37f2-a3a8-8f910856e66b.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 71.63.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:c2:54:11:70:ef:23:c3:12:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d27ff085-6181-4787-b7a5-cafeb6300703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:f0:05:82:ba:9e:28:d1:a4:cc:0a:7e:bf: b9:e8:a4:c3:26:2c:32:41:fd:ce:b5:21:7f:19:d4: b3:98:2a:e5:8d:51:76:34:0f:6f:2d:97:d4:b5:bc: 16:1b:e9:33:97:ef:ec:23:13:42:fb:7a:bb:53:8d: 48:64:4e:4d:01:fa:3d:7f:f1:ba:d4:36:23:e2:d5: e3:31:c3:8a:5c:4b:94:a6:ef:13:d6:46:f9:ca:99: f7:6c:69:67:78:07:cb:e4:c9:52:dc:dd:e5:af:a4: ee:98:dc:e8:93:73:0e:02:07:3d:00:9a:75:37:37: 29:d3:f2:b5:5d:4c:df:5f:34:57:5f:72:f2:56:16: 5c:f5:dc:ec:71:45:27:15:cf:c3:6f:78:19:bd:43: 82:5e:d0:79:98:bd:4c:ea:7d:24:9e:c7:2d:ab:5f: 4b:9c:5c:93:ee:5d:49:26:51:13:a2:f0:aa:12:2b: 50:71:25:45:e1:4c:5b:3b:11:8a:54:f7:1b:db:e4: 5e:d3:2b:db:3c:18:10:0c:f2:85:49:82:69:a0:25: ac:c7:9b:ed:a1:f4:c6:d9:1c:57:17:1b:a6:03:aa: 3e:25:f7:b3:e6:be:43:bf:9b:86:d7:76:ff:50:0d: 72:e6:bb:2b:1a:04:52:da:a6:f1:37:6f:a9:8e:69: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8F:55:57:B4:1A:0B:36:1F:E8:24:72:D9:FB:6A:7B:5F:CD:B9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6db06a1-08e2-37f2-a3a8-8f910856e66b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.63.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f4:69:0a:3a:55:1a:0c:da:b1:f7:63:3d:d8:3a:39:ed:3f: e9:13:5b:9e:6a:de:1b:c7:f4:75:f1:2f:97:bc:90:89:f5:27: 40:00:42:45:5c:74:d1:a1:f3:c6:a3:73:5c:d2:3d:ea:49:62: 0b:d1:d0:78:89:b9:f1:b1:df:f4:6d:93:b9:0f:1f:34:32:84: 00:60:ff:f5:52:2c:2d:cb:e4:f9:74:75:cc:db:2f:7b:87:b1: 95:ae:e9:78:53:e7:6a:f5:1d:86:b1:48:7e:75:d1:32:cd:72: 37:3a:9f:96:03:16:a6:ea:9d:5c:d0:ff:f5:8c:9b:42:78:95: 3b:8d:b0:d4:60:c5:ac:8c:ea:e2:7c:90:9a:50:bd:d9:52:3e: 4c:d0:6d:cd:df:7b:20:8b:ed:09:d1:96:e4:c1:f7:63:63:20: cd:c2:2d:1d:16:84:e6:cb:41:ff:e0:cb:f4:0d:5b:e2:9e:9b: 92:91:cc:bb:8d:0d:d6:88:64:5f:35:73:a9:ee:0a:43:9e:5c: ba:15:5f:89:2d:39:56:b0:6f:a8:51:9e:40:0f:1b:f0:49:d0: c0:52:64:87:8b:54:5b:34:aa:61:3d:f9:cd:a4:0f:93:a7:1d: 8e:20:10:99:d8:ad:70:48:0d:74:33:4a:bb:28:01:92:2d:82: 06:8c:07:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09sJUEXDvI8MShIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDI3ZmYwODUtNjE4MS00Nzg3LWI3YTUtY2FmZWI2MzAwNzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfDwBYK6nijRpMwKfr+56KTDJiwyQf3OtSF/ GdSzmCrljVF2NA9vLZfUtbwWG+kzl+/sIxNC+3q7U41IZE5NAfo9f/G61DYj4tXj McOKXEuUpu8T1kb5ypn3bGlneAfL5MlS3N3lr6TumNzok3MOAgc9AJp1Nzcp0/K1 XUzfXzRXX3LyVhZc9dzscUUnFc/Db3gZvUOCXtB5mL1M6n0knsctq19LnFyT7l1J JlETovCqEitQcSVF4UxbOxGKVPcb2+Re0yvbPBgQDPKFSYJpoCWsx5vtofTG2RxX FxumA6o+Jfez5r5Dv5uG13b/UA1y5rsrGgRS2qbxN2+pjmledwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWPVVe0Ggs2H+gkctn7antfzbllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTZkYjA2YTEtMDhlMi0z N2YyLWEzYTgtOGY5MTA4NTZlNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRz+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIz0aQo6VRoM2rH3Yz3YOjntP+kTW55q3hvH9HXxL5e8kIn1J0AAQkVc dNGh88ajc1zSPepJYgvR0HiJufGx3/Rtk7kPHzQyhABg//VSLC3L5Pl0dczbL3uH sZWu6XhT52r1HYaxSH510TLNcjc6n5YDFqbqnVzQ//WMm0J4lTuNsNRgxayM6uJ8 kJpQvdlSPkzQbc3feyCL7QnRluTB92NjIM3CLR0WhObLQf/gy/QNW+Kem5KRzLuN DdaIZF81c6nuCkOeXLoVX4ktOVawb6hRnkAPG/BJ0MBSZIeLVFs0qmE9+c2kD5On HY4gEJnYrXBIDXQzSrsoAZItggaMBxk= -----END CERTIFICATE-----Generated at Tue May 6 10:49:16 2025 by rpki-client