$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/721a5b11-ef3f-39b7-a62a-8ce1adb4e6b4.roa File: 721a5b11-ef3f-39b7-a62a-8ce1adb4e6b4.roa (raw, json) Hash identifier: Oktr2Kh6g+KtnRqW3sKN4eH/GG4TaQRHpf/LkmPgOtQ= Subject key identifier: 44:85:3D:21:F9:5D:BC:1B:D8:04:7B:90:98:F9:3B:6E:F0:BB:BC:A3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB18092D94B55082C36F180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/721a5b11-ef3f-39b7-a62a-8ce1adb4e6b4.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 71.204.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:80:92:d9:4b:55:08:2c:36:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a6ce14bb-50dc-4edd-be19-daf248c5e460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d0:e0:ad:ce:ce:d9:d3:47:df:23:fa:08:e2: 18:0a:ea:77:a6:ac:d5:3f:d5:ec:75:09:d7:92:c5: 5c:fe:aa:5c:9c:19:01:3b:ca:a1:98:52:92:15:98: 3e:5e:51:19:3b:90:60:45:33:b1:b4:75:e0:c1:e1: 27:95:10:7c:f0:e8:5f:24:2a:16:79:c2:c8:16:49: 58:c7:a8:f5:ff:32:f3:5b:71:f6:95:f3:b9:84:ae: b1:11:43:69:10:0b:f4:09:db:cb:95:12:73:2e:d9: 72:a1:08:a3:21:8f:8f:f6:4c:f5:a7:4e:86:e0:5f: 88:17:a9:cf:a7:b5:63:50:2c:ea:82:f8:2e:cd:c1: 5c:a7:ef:6e:23:fe:d0:f9:84:1d:a5:e4:48:77:fc: 02:f9:e5:d1:91:11:ad:be:a7:d2:eb:1b:dd:56:88: 89:a7:2b:1d:63:6e:63:07:19:4e:90:e3:1f:e3:43: 2a:e8:96:a5:d8:2c:0c:99:04:26:18:29:0f:6b:8d: 09:41:57:44:bc:86:76:04:0f:81:03:8b:2b:8b:30: cb:7b:26:21:7d:48:e7:72:f8:a1:4c:83:8d:0b:bc: c2:df:d2:41:79:d3:f4:e5:5c:6a:05:07:35:21:79: ba:50:15:7d:ac:49:13:ef:85:d3:8f:29:30:4d:fc: 5a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:85:3D:21:F9:5D:BC:1B:D8:04:7B:90:98:F9:3B:6E:F0:BB:BC:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/721a5b11-ef3f-39b7-a62a-8ce1adb4e6b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:d3:07:23:5a:3c:d5:3b:5a:b6:06:b5:12:30:7e:3b:95:e3: 76:db:6b:59:8e:de:c1:39:1c:3c:d3:b4:21:ca:65:43:75:7c: 3a:c5:a8:8a:f1:13:40:bb:d8:b7:da:98:7d:0d:31:f4:3f:82: 21:d0:82:70:64:ae:ff:e6:4a:2c:5f:32:02:ea:9c:c2:50:0c: 43:2c:2c:29:86:1c:4c:fe:eb:9f:53:10:8f:e0:9a:af:f8:9b: a7:2e:66:d8:0b:4b:2c:99:94:73:c3:90:49:41:c6:1d:0c:19: cb:08:59:8f:b4:46:3b:0c:0a:0b:a8:ae:f4:f0:07:6b:c0:ad: fe:e4:da:63:83:39:4e:a5:1a:42:1f:54:3f:62:bd:2c:23:48: dd:40:ef:96:84:c5:d1:75:14:f6:98:10:a2:30:9f:86:3e:16: 37:64:b5:11:ab:a2:3a:97:8c:4f:7f:69:bd:ae:91:eb:14:8f: 46:b2:9f:1d:24:4b:13:74:b4:68:80:81:df:f9:ea:26:d2:08: f6:34:64:4b:b6:db:20:f9:40:28:34:c6:52:a4:4c:ae:5a:3e: e9:2f:5e:49:04:58:17:5a:1d:d9:32:c7:7f:4e:87:9e:1f:22: b4:0e:d1:d9:97:5a:dd:fa:d2:5d:22:10:13:f4:e2:ba:76:aa: 5e:4c:68:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssYCS2UtVCCw28YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTZjZTE0YmItNTBkYy00ZWRkLWJlMTktZGFmMjQ4YzVlNDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltDgrc7O2dNH3yP6COIYCup3pqzVP9XsdQnX ksVc/qpcnBkBO8qhmFKSFZg+XlEZO5BgRTOxtHXgweEnlRB88OhfJCoWecLIFklY x6j1/zLzW3H2lfO5hK6xEUNpEAv0CdvLlRJzLtlyoQijIY+P9kz1p06G4F+IF6nP p7VjUCzqgvguzcFcp+9uI/7Q+YQdpeRId/wC+eXRkRGtvqfS6xvdVoiJpysdY25j BxlOkOMf40Mq6Jal2CwMmQQmGCkPa40JQVdEvIZ2BA+BA4srizDLeyYhfUjncvih TIONC7zC39JBedP05VxqBQc1IXm6UBV9rEkT74XTjykwTfxaAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESFPSH5Xbwb2AR7kJj5O27wu7yjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzIxYTViMTEtZWYzZi0z OWI3LWE2MmEtOGNlMWFkYjRlNmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8ygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPTByNaPNU7WrYGtRIwfjuV43bba1mO3sE5HDzTtCHKZUN1fDrFqIrx E0C72LfamH0NMfQ/giHQgnBkrv/mSixfMgLqnMJQDEMsLCmGHEz+659TEI/gmq/4 m6cuZtgLSyyZlHPDkElBxh0MGcsIWY+0RjsMCguorvTwB2vArf7k2mODOU6lGkIf VD9ivSwjSN1A75aExdF1FPaYEKIwn4Y+FjdktRGrojqXjE9/ab2ukesUj0aynx0k SxN0tGiAgd/56ibSCPY0ZEu22yD5QCg0xlKkTK5aPukvXkkEWBdaHdkyx39Oh54f IrQO0dmXWt360l0iEBP04rp2ql5MaOw= -----END CERTIFICATE-----Generated at Sun Apr 27 08:04:22 2025 by rpki-client