$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58a45cb6-2d31-3a08-9826-96625d106214.roa File: 58a45cb6-2d31-3a08-9826-96625d106214.roa (raw, json) Hash identifier: m43AdH0CWt5Gkrmkg3C3EVELQ6abupPEdTJwGtwH2iE= Subject key identifier: D9:44:6F:2E:60:2F:6E:1F:D9:37:C9:C4:63:4F:A9:2A:30:75:66:E0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFECF0EFEEC39F65ECDB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58a45cb6-2d31-3a08-9826-96625d106214.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 71.198.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:ec:f0:ef:ee:c3:9f:65:ec:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=965b14d9-2dd6-404b-bf7a-51c1dac88c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:86:e7:23:84:a7:e4:6b:a6:6b:30:68:b2:20: 7f:85:ae:aa:3e:62:a6:a4:68:87:76:17:94:b1:db: 7d:93:2f:58:aa:d5:ff:c1:89:bb:8b:46:e6:5b:95: d3:9b:30:fc:10:14:61:e7:39:93:93:84:ca:38:4b: 75:c3:c3:7c:89:84:c9:42:41:2c:8b:c3:02:22:e6: 1c:13:d3:17:c2:ee:95:d1:d3:60:c9:af:24:5c:1b: 4f:18:dd:dd:fb:69:30:24:e2:1d:f1:1b:ee:8e:29: 71:bf:b1:d0:81:be:5a:c8:fc:50:1c:e3:69:28:d6: 0c:97:7b:18:e8:5a:91:03:93:d7:d2:bc:14:3f:78: d9:03:1a:b2:c9:82:ac:45:74:d5:96:55:6b:09:41: ea:22:9f:8f:6f:44:e9:6b:b6:a7:3e:20:5c:3a:9a: a7:f2:49:e0:de:f7:c8:87:9a:b6:6c:f2:09:83:74: 50:97:0c:de:1d:ae:32:58:51:56:17:7e:8d:f3:73: e3:a5:ca:3f:6d:d4:5f:d8:cd:78:24:bb:ca:6e:59: 1f:4b:2e:95:12:ad:2b:97:19:29:dd:a3:55:4c:b9: e4:6b:69:94:21:1e:d0:9e:85:50:4c:af:31:cd:02: ff:7d:3b:59:9a:9d:c3:5b:30:42:1e:ca:82:bb:ba: 52:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:44:6F:2E:60:2F:6E:1F:D9:37:C9:C4:63:4F:A9:2A:30:75:66:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58a45cb6-2d31-3a08-9826-96625d106214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.198.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:e0:05:64:40:a1:c7:bc:50:af:e0:27:14:17:28:00:bd:75: e8:e4:41:9b:0d:3a:13:cb:55:af:90:c4:d1:ed:47:73:ec:f5: 03:1c:8b:82:95:a6:86:51:50:e0:45:1e:15:ee:b8:71:13:61: d7:ad:c4:10:4c:b2:bf:00:a2:bf:bf:14:3d:16:12:90:c3:05: 25:3e:0d:8a:25:92:dd:06:17:4e:50:7d:15:81:cc:11:73:56: df:35:0b:3e:64:11:7a:3a:ba:f9:8d:31:ae:45:ad:d8:f6:d5: ca:f5:47:e9:3d:1a:6e:a5:04:11:02:be:28:6e:be:90:f8:73: fa:e9:cb:9e:18:59:ff:43:ff:43:b1:0d:3e:f9:d6:fd:bf:ef: cd:65:b2:e1:07:80:57:55:11:6f:f1:ce:30:d9:2a:89:e3:61: 81:07:08:19:cf:16:5f:86:d1:95:fa:9e:12:bf:2b:87:ea:9b: eb:7d:af:50:6b:6d:f2:7b:88:7e:5f:8a:e8:f4:a0:a4:02:33: 5b:33:44:37:ff:c9:64:89:ae:85:8b:a8:10:ed:4f:e5:3e:9b: ed:a0:7e:e2:40:ae:36:40:8f:41:30:f0:d5:70:4d:02:cc:2b: c3:c1:56:e2:b0:09:5a:f3:89:59:8f:35:b7:c9:b9:a0:8f:44: 35:44:dd:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr+zw7+7Dn2Xs24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OTY1YjE0ZDktMmRkNi00MDRiLWJmN2EtNTFjMWRhYzg4YzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYbnI4Sn5GumazBosiB/ha6qPmKmpGiHdheU sdt9ky9YqtX/wYm7i0bmW5XTmzD8EBRh5zmTk4TKOEt1w8N8iYTJQkEsi8MCIuYc E9MXwu6V0dNgya8kXBtPGN3d+2kwJOId8Rvujilxv7HQgb5ayPxQHONpKNYMl3sY 6FqRA5PX0rwUP3jZAxqyyYKsRXTVllVrCUHqIp+Pb0Tpa7anPiBcOpqn8kng3vfI h5q2bPIJg3RQlwzeHa4yWFFWF36N83Pjpco/bdRf2M14JLvKblkfSy6VEq0rlxkp 3aNVTLnka2mUIR7QnoVQTK8xzQL/fTtZmp3DWzBCHsqCu7pSewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlEby5gL24f2TfJxGNPqSowdWbgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNThhNDVjYjYtMmQzMS0z YTA4LTk4MjYtOTY2MjVkMTA2MjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8bkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfgBWRAoce8UK/gJxQXKAC9dejkQZsNOhPLVa+QxNHtR3Ps9QMci4KV poZRUOBFHhXuuHETYdetxBBMsr8Aor+/FD0WEpDDBSU+DYolkt0GF05QfRWBzBFz Vt81Cz5kEXo6uvmNMa5Frdj21cr1R+k9Gm6lBBECvihuvpD4c/rpy54YWf9D/0Ox DT751v2/781lsuEHgFdVEW/xzjDZKonjYYEHCBnPFl+G0ZX6nhK/K4fqm+t9r1Br bfJ7iH5fiuj0oKQCM1szRDf/yWSJroWLqBDtT+U+m+2gfuJArjZAj0Ew8NVwTQLM K8PBVuKwCVrziVmPNbfJuaCPRDVE3VM= -----END CERTIFICATE-----Generated at Mon Apr 28 03:03:42 2025 by rpki-client