$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03efd614-6adc-332f-9fde-ca6f5da7f5a9.roa File: 03efd614-6adc-332f-9fde-ca6f5da7f5a9.roa (raw, json) Hash identifier: S0+XMQZRmFgKQgTsaKRcheXAMM1alPr8iiteFn3F2aw= Subject key identifier: 86:1C:BE:C5:DB:38:8B:A4:D6:32:5A:13:FD:F3:8A:1D:0C:12:E5:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7D7D3B1627F47C6F355C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03efd614-6adc-332f-9fde-ca6f5da7f5a9.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 174.171.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:d7:d3:b1:62:7f:47:c6:f3:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d9cab774-41f2-4f78-918f-685140829f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:71:d7:00:aa:e9:24:22:7e:5c:14:8e:58:7b: f3:68:df:c2:5a:80:92:7c:36:3f:8f:ed:3f:ef:96: 62:70:09:5e:fa:ee:8c:a7:26:48:55:43:8e:1f:44: 01:3a:aa:06:5e:74:e5:93:fb:8c:6d:c7:c1:10:18: 44:26:a2:77:e5:07:22:4a:06:d3:b4:0c:24:09:67: ce:3f:82:35:78:dd:a3:b8:75:e2:0c:0e:fd:90:6f: 62:8e:72:4d:ce:eb:3b:be:72:71:2f:7e:39:2b:0c: b7:7f:6a:24:80:48:7f:06:d3:5c:7e:42:55:09:21: de:79:31:b4:0b:e5:73:2e:93:8f:5a:99:68:9d:ae: 11:9d:8a:6d:05:f2:41:7b:ad:8d:f4:a0:24:0b:09: 35:35:d4:cd:29:6a:4c:68:6e:50:18:e4:91:5d:b5: 61:87:c2:6b:4c:02:28:08:ef:77:27:74:0b:86:89: 63:a7:21:b7:ba:e3:da:c3:0b:e8:b2:f2:f5:d9:89: 80:65:f3:da:50:20:46:2d:77:ec:65:13:87:d3:dd: 0f:0b:f4:ff:cb:60:51:c4:8a:5d:eb:e6:f7:ba:45: d2:8f:2d:39:48:0e:7a:8e:d5:c1:c5:a3:6c:2c:4b: 01:48:e1:6d:76:90:3b:9c:44:2c:d4:81:6a:ac:57: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1C:BE:C5:DB:38:8B:A4:D6:32:5A:13:FD:F3:8A:1D:0C:12:E5:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03efd614-6adc-332f-9fde-ca6f5da7f5a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f3:65:6c:bb:36:c5:1a:34:16:2a:1b:e5:19:2f:50:25:6a: a9:59:77:da:0f:92:e9:fe:c2:a4:b3:4d:66:96:77:e9:78:36: db:ac:cc:87:de:58:be:c6:2c:6e:ff:ca:f0:59:2e:d7:57:95: f3:02:ed:3f:da:85:37:86:59:bc:a4:d9:6b:d4:5a:29:3e:0b: ee:c3:25:b3:00:bc:d2:0a:83:d6:26:73:a5:5d:ec:8a:55:10: 0d:5f:62:6a:35:d4:31:bb:6c:8f:4a:3a:df:24:58:2f:0a:e4: 46:45:ec:19:b9:d9:71:3b:61:4d:24:0f:a0:ed:e7:cf:17:27: ed:d7:13:df:c9:78:55:70:2d:58:5f:2e:22:66:79:fa:4f:16: 50:6d:02:33:21:1c:58:3a:2b:8f:1a:f3:1c:3a:1e:68:00:d8: 3b:e7:06:03:6a:d8:03:cb:30:e1:f9:4d:b2:33:ff:c5:7c:ed: 3e:88:bf:97:c3:99:eb:e4:ca:af:f3:8e:1e:e0:aa:30:90:2e: cb:18:02:35:a2:f0:20:78:e6:81:57:d6:fe:ee:70:e5:01:1a: d8:f5:cd:92:05:cd:a8:5b:1e:70:ae:ca:25:7e:a8:13:44:b9: ce:35:ba:7c:03:42:30:a5:94:23:d5:13:59:78:b9:b7:72:8d: 13:a4:51:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj099fTsWJ/R8bzVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDljYWI3NzQtNDFmMi00Zjc4LTkxOGYtNjg1MTQwODI5ZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHHXAKrpJCJ+XBSOWHvzaN/CWoCSfDY/j+0/ 75ZicAle+u6MpyZIVUOOH0QBOqoGXnTlk/uMbcfBEBhEJqJ35QciSgbTtAwkCWfO P4I1eN2juHXiDA79kG9ijnJNzus7vnJxL345Kwy3f2okgEh/BtNcfkJVCSHeeTG0 C+VzLpOPWplona4RnYptBfJBe62N9KAkCwk1NdTNKWpMaG5QGOSRXbVhh8JrTAIo CO93J3QLholjpyG3uuPawwvosvL12YmAZfPaUCBGLXfsZROH090PC/T/y2BRxIpd 6+b3ukXSjy05SA56jtXBxaNsLEsBSOFtdpA7nEQs1IFqrFetrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYcvsXbOIuk1jJaE/3zih0MEuUlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDNlZmQ2MTQtNmFkYy0z MzJmLTlmZGUtY2E2ZjVkYTdmNWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzzZWy7NsUaNBYqG+UZL1AlaqlZd9oPkun+wqSzTWaWd+l4NtuszIfe WL7GLG7/yvBZLtdXlfMC7T/ahTeGWbyk2WvUWik+C+7DJbMAvNIKg9Ymc6Vd7IpV EA1fYmo11DG7bI9KOt8kWC8K5EZF7Bm52XE7YU0kD6Dt588XJ+3XE9/JeFVwLVhf LiJmefpPFlBtAjMhHFg6K48a8xw6HmgA2DvnBgNq2APLMOH5TbIz/8V87T6Iv5fD mevkyq/zjh7gqjCQLssYAjWi8CB45oFX1v7ucOUBGtj1zZIFzahbHnCuyiV+qBNE uc41unwDQjCllCPVE1l4ubdyjROkUeU= -----END CERTIFICATE-----Generated at Sun Apr 27 11:29:11 2025 by rpki-client