$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b96afac-e9a4-3db6-9355-3668cf916816.roa File: 3b96afac-e9a4-3db6-9355-3668cf916816.roa (raw, json) Hash identifier: iQpqat/fTcMcnMm6aDSRvnoAO6pP7QTO3AcKxz1B9SM= Subject key identifier: 0A:E1:FC:81:6B:94:B9:4E:07:CE:D3:A7:B5:B1:5C:48:70:97:7D:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF55F74B8DA68E1FD01F20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b96afac-e9a4-3db6-9355-3668cf916816.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 69.245.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:55:f7:4b:8d:a6:8e:1f:d0:1f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=e14533ad-8b6e-4fc2-b1f0-d74994c0fcc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2c:58:b4:c5:7e:d0:4f:cd:23:f5:e0:a1:f6: 60:62:60:b7:98:b3:cf:62:6e:b2:8e:1f:eb:a0:f5: 3d:bd:47:12:dd:3a:d3:60:e5:8d:5d:a0:58:b4:f6: 65:58:aa:bc:45:5f:03:7a:e0:0d:12:85:4e:ce:65: b4:b8:54:4e:2e:2f:9f:44:92:a8:39:36:7f:71:cf: 3e:69:f1:d2:0f:db:bf:5c:39:78:f7:60:f4:bc:c3: 35:49:5e:a1:53:f7:b7:84:77:f7:f3:3f:09:33:22: e1:f2:df:fb:05:66:d0:61:f9:a9:35:63:aa:03:23: 52:1a:e1:87:5a:53:12:b1:03:b4:fb:6b:1c:10:05: 22:14:69:df:20:ad:ec:6f:76:bc:1d:67:a0:e7:4c: 8e:0c:05:e4:5a:d4:d3:04:01:8d:fe:4a:34:70:3c: 62:3a:77:6f:50:68:9a:c8:90:b5:46:12:58:83:2c: 50:a6:7d:b8:a7:17:4e:38:17:e1:a5:40:82:7b:34: fa:d2:45:3f:3a:4d:1c:71:4f:c5:ea:45:bc:3d:41: c5:95:67:2b:64:59:3b:46:29:e6:28:86:d3:68:19: 53:2c:c3:e4:2e:78:1e:e3:66:52:fc:bc:03:05:c2: d5:7d:6b:f2:19:23:d7:cb:6d:b6:f4:4e:c5:84:26: fd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E1:FC:81:6B:94:B9:4E:07:CE:D3:A7:B5:B1:5C:48:70:97:7D:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b96afac-e9a4-3db6-9355-3668cf916816.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.245.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:88:46:db:59:df:59:aa:17:43:17:c2:71:5c:c0:ff:80:e4: 32:36:27:dc:84:06:bd:8b:cc:19:b2:a9:19:3c:46:da:04:d3: 7c:12:32:2d:3d:4c:89:52:fc:2d:e0:da:a4:1b:6b:3c:11:9d: 44:b2:f6:14:90:c9:e1:cd:b1:e0:54:e4:2f:f7:fe:51:8a:b5: f6:0e:cb:96:1a:90:ce:30:ff:a6:60:dc:60:f5:6a:88:86:25: b0:12:90:af:20:42:3b:c4:b5:23:93:d4:a5:a3:00:a7:9f:6b: f2:98:6d:3e:7a:40:35:88:aa:2c:46:c0:5c:af:b2:a9:0e:70: 87:88:40:01:2b:83:56:5d:60:c0:3c:9f:ac:5d:5c:08:86:3a: d7:af:23:20:64:ec:cf:34:60:67:24:a3:c0:38:f0:07:4d:ad: b6:81:7a:54:cd:71:1c:2c:f3:3e:85:9d:69:8b:7c:a0:a8:46: 77:0d:8a:30:2a:8c:75:f4:c3:a4:7f:6a:0d:c0:5b:82:65:dc: 17:cf:e2:37:66:36:3c:37:e5:b8:b7:11:30:f7:f9:b5:d0:c2: 40:b4:5d:4d:ac:6b:22:7d:51:66:b8:c1:12:78:35:3c:5f:0b: f9:a5:15:8f:26:50:2e:5c:a3:a3:ef:0c:61:34:be:68:1c:2b: 70:f4:91:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr1X3S42mjh/QHyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTE0NTMzYWQtOGI2ZS00ZmMyLWIxZjAtZDc0OTk0YzBmY2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSxYtMV+0E/NI/XgofZgYmC3mLPPYm6yjh/r oPU9vUcS3TrTYOWNXaBYtPZlWKq8RV8DeuANEoVOzmW0uFROLi+fRJKoOTZ/cc8+ afHSD9u/XDl492D0vMM1SV6hU/e3hHf38z8JMyLh8t/7BWbQYfmpNWOqAyNSGuGH WlMSsQO0+2scEAUiFGnfIK3sb3a8HWeg50yODAXkWtTTBAGN/ko0cDxiOndvUGia yJC1RhJYgyxQpn24pxdOOBfhpUCCezT60kU/Ok0ccU/F6kW8PUHFlWcrZFk7Rinm KIbTaBlTLMPkLnge42ZS/LwDBcLVfWvyGSPXy2229E7FhCb93wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArh/IFrlLlOB87Tp7WxXEhwl33TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2I5NmFmYWMtZTlhNC0z ZGI2LTkzNTUtMzY2OGNmOTE2ODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRfXsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6IRttZ31mqF0MXwnFcwP+A5DI2J9yEBr2LzBmyqRk8RtoE03wSMi09 TIlS/C3g2qQbazwRnUSy9hSQyeHNseBU5C/3/lGKtfYOy5YakM4w/6Zg3GD1aoiG JbASkK8gQjvEtSOT1KWjAKefa/KYbT56QDWIqixGwFyvsqkOcIeIQAErg1ZdYMA8 n6xdXAiGOtevIyBk7M80YGcko8A48AdNrbaBelTNcRws8z6FnWmLfKCoRncNijAq jHX0w6R/ag3AW4Jl3BfP4jdmNjw35bi3ETD3+bXQwkC0XU2sayJ9UWa4wRJ4NTxf C/mlFY8mUC5co6PvDGE0vmgcK3D0kcQ= -----END CERTIFICATE-----Generated at Sun Apr 27 16:35:30 2025 by rpki-client