$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/290f7cab-3daf-32ed-866d-41c973e7bc01.roa File: 290f7cab-3daf-32ed-866d-41c973e7bc01.roa (raw, json) Hash identifier: uCM6jdRvxus9RbkT7hUb/VtAyIwMS/Chey3GM/wI/2w= Subject key identifier: 85:D9:CF:35:9F:49:6D:B3:BE:36:D6:50:DC:FD:09:C6:D9:DF:DD:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF07087CC5E2C24265E6C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/290f7cab-3daf-32ed-866d-41c973e7bc01.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 71.225.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:07:08:7c:c5:e2:c2:42:65:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=908c9fe4-e0a9-44d2-a9d0-f024036158f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:41:7a:3b:5d:13:c2:f9:68:2e:b0:1e:73:86: e4:1a:ff:dd:87:d6:f5:e1:cc:b0:22:34:92:01:71: 7f:59:fc:f0:c9:28:4e:31:60:d2:92:9d:59:b6:42: cf:9a:bc:6a:4d:cd:67:06:f9:18:a2:6a:18:85:73: 42:4e:d1:d2:a5:8c:cd:00:1c:29:c7:01:b7:1a:52: 4b:a3:cb:c7:da:3e:a5:ef:50:e9:dd:b2:1c:d8:42: d3:33:c4:4b:ad:d2:be:95:b7:28:b7:4e:19:46:08: d3:87:48:8f:39:9b:5b:41:62:23:02:eb:17:ee:61: 9e:11:eb:c3:f4:ec:ad:5c:50:38:73:4f:6b:17:34: 05:4d:44:19:b5:3f:53:e6:e0:58:73:1d:c3:a2:ca: c5:28:dd:76:ac:ae:64:e2:9a:88:65:47:84:00:b2: 95:53:1a:bd:0a:6c:58:6b:31:f6:44:1b:d7:bb:4b: c4:64:08:68:37:3e:91:b9:6b:e9:80:88:d6:5f:fd: d8:bc:f7:8a:e5:64:f7:8b:8d:cc:0b:d7:e5:9e:fe: 7e:65:a2:93:92:e3:1d:77:6a:4a:3b:80:95:71:47: 44:8a:82:87:c4:2f:be:f9:30:f3:bb:d4:69:f1:93: 73:96:95:59:89:4c:0c:d9:f3:2b:25:12:f6:57:97: 00:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D9:CF:35:9F:49:6D:B3:BE:36:D6:50:DC:FD:09:C6:D9:DF:DD:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/290f7cab-3daf-32ed-866d-41c973e7bc01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d3:af:f3:47:38:89:24:7e:f6:b2:89:33:3c:c6:96:e6:1e: 6a:9f:36:d9:90:7b:cf:78:5f:b5:f8:2e:94:60:17:02:2e:f0: 3e:f6:0a:78:2e:5f:8f:80:c6:5f:be:09:c3:7a:bb:88:9f:d1: 08:8a:cd:7b:ba:6a:3d:b0:e4:5d:5e:d5:7a:e0:4c:00:e8:fb: 38:88:eb:d1:49:d0:78:b0:3f:2b:ef:2c:9a:f5:aa:da:5d:41: 0b:6e:02:fa:ca:4b:a2:8e:d0:63:30:60:51:07:ae:d8:7c:75: 77:4a:e2:8d:1c:73:ff:17:ce:7c:89:45:44:34:8d:94:2e:e3: f6:a6:84:8c:21:1e:cd:b0:24:9c:ea:06:ae:0b:92:8b:47:a0: af:76:3a:e6:b7:1b:0f:cf:d1:b1:b3:94:c6:ec:68:fc:2d:90: 22:cf:d5:f7:58:c5:84:f9:77:82:7e:55:d6:77:61:13:a8:1d: 41:1a:cf:7b:71:2a:7c:95:76:ef:17:c0:df:02:36:ca:f8:61: b9:5e:06:ea:0a:d8:db:52:5b:0b:52:d0:66:f4:5d:c1:08:36: 14:3b:e2:14:41:62:3b:ad:0c:53:03:fa:5b:ee:fc:65:aa:f8: d8:69:9c:21:fa:36:3e:8c:41:e4:1f:75:b7:69:6f:f5:06:c7: 91:a1:08:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrwcIfMXiwkJl5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OTA4YzlmZTQtZTBhOS00NGQyLWE5ZDAtZjAyNDAzNjE1OGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokF6O10TwvloLrAec4bkGv/dh9b14cywIjSS AXF/WfzwyShOMWDSkp1ZtkLPmrxqTc1nBvkYomoYhXNCTtHSpYzNABwpxwG3GlJL o8vH2j6l71Dp3bIc2ELTM8RLrdK+lbcot04ZRgjTh0iPOZtbQWIjAusX7mGeEevD 9OytXFA4c09rFzQFTUQZtT9T5uBYcx3DosrFKN12rK5k4pqIZUeEALKVUxq9CmxY azH2RBvXu0vEZAhoNz6RuWvpgIjWX/3YvPeK5WT3i43MC9flnv5+ZaKTkuMdd2pK O4CVcUdEioKHxC+++TDzu9Rp8ZNzlpVZiUwM2fMrJRL2V5cAYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXZzzWfSW2zvjbWUNz9CcbZ393ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjkwZjdjYWItM2RhZi0z MmVkLTg2NmQtNDFjOTczZTdiYzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+FMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7Tr/NHOIkkfvayiTM8xpbmHmqfNtmQe894X7X4LpRgFwIu8D72Cngu X4+Axl++CcN6u4if0QiKzXu6aj2w5F1e1XrgTADo+ziI69FJ0HiwPyvvLJr1qtpd QQtuAvrKS6KO0GMwYFEHrth8dXdK4o0cc/8XznyJRUQ0jZQu4/amhIwhHs2wJJzq Bq4LkotHoK92Oua3Gw/P0bGzlMbsaPwtkCLP1fdYxYT5d4J+VdZ3YROoHUEaz3tx KnyVdu8XwN8CNsr4YbleBuoK2NtSWwtS0Gb0XcEINhQ74hRBYjutDFMD+lvu/GWq +NhpnCH6Nj6MQeQfdbdpb/UGx5GhCPo= -----END CERTIFICATE-----Generated at Mon Apr 28 22:44:35 2025 by rpki-client