$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80c6e1f4-5479-31f6-8065-c108874ff392.roa File: 80c6e1f4-5479-31f6-8065-c108874ff392.roa (raw, json) Hash identifier: dBXaSPEY9Xgsp6az56cEC5mOKEejOw2hWBb+2eXV+jk= Subject key identifier: 66:B4:8F:A0:1E:D9:B0:8E:48:9A:73:B2:5C:08:01:A4:C6:84:4A:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F82BEDCC1B1993919DB100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80c6e1f4-5479-31f6-8065-c108874ff392.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 71.238.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:2b:ed:cc:1b:19:93:91:9d:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=24597941-1ce0-429f-a0d6-91539f9e32ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:04:99:de:19:4b:33:0b:7c:69:e1:67:90: 86:e0:46:8a:d3:75:4d:13:dd:68:cc:ac:5e:25:52: 61:87:c8:f5:74:9b:c5:da:85:17:88:76:c9:ec:14: b1:ba:21:ac:a8:d6:1e:59:de:e1:3f:f3:07:90:26: 96:00:b9:ab:43:f5:4b:7f:c2:29:7d:d6:86:b0:d1: 29:c5:3f:d2:76:df:91:ef:6a:6f:77:65:a7:e6:33: 63:2b:33:48:cd:99:93:dd:f1:01:30:50:2f:82:8a: da:6d:81:66:00:b3:a2:d8:20:6e:1d:aa:d8:c7:9b: 3b:d3:72:34:9b:90:76:19:7f:fe:ab:b5:d2:77:a8: 42:2a:07:47:ee:00:01:97:23:86:82:56:d2:d7:c1: ce:70:58:59:a8:b8:f2:cc:70:f6:90:7a:86:63:02: d9:b7:59:f1:fa:5a:54:d5:91:2f:4a:55:ce:dc:00: 50:d7:c6:20:f0:80:47:17:9d:94:12:0b:39:8d:90: 2c:37:67:db:b7:3c:1a:bd:b7:32:9c:76:51:06:ce: 83:b4:39:c8:82:fa:f0:2a:3e:ec:43:76:b2:89:51: 8e:52:41:76:99:d2:fc:29:dd:7c:87:bb:30:70:1d: 5b:1e:c1:24:00:2b:b8:74:61:fd:61:cc:12:53:37: 57:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B4:8F:A0:1E:D9:B0:8E:48:9A:73:B2:5C:08:01:A4:C6:84:4A:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80c6e1f4-5479-31f6-8065-c108874ff392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:b7:90:dc:a7:a3:71:66:0c:ce:ae:66:18:88:47:65:3c:23: aa:4a:1d:c2:c9:13:ad:6b:fa:b1:d5:7f:8c:aa:42:08:e9:6e: 18:23:00:8a:dd:09:e0:81:77:39:3f:ec:1d:a5:c0:13:23:a6: 45:7b:fd:bc:1e:b9:cc:21:2a:24:f5:fa:01:a5:5e:34:9a:f8: f6:cf:5a:c4:c3:32:9a:42:e9:2c:28:7e:aa:ba:ee:5f:47:f1: 31:29:8e:98:be:b9:ce:f9:f8:c4:27:06:c6:17:0e:8e:06:b5: 36:8a:a1:c9:58:b9:40:eb:77:34:a5:d1:e9:fa:af:36:28:eb: 11:38:87:70:89:5d:49:23:ab:2c:4c:89:98:66:e8:c0:42:74: 1e:3d:b7:0e:48:19:dd:26:1a:71:dd:ac:4c:34:67:ca:01:e5: ba:54:fd:7f:94:5f:c9:83:5b:d2:1f:f0:82:f9:1b:ea:a6:6b: d2:c3:78:5f:70:4e:d8:1b:64:f9:c1:69:ea:f0:94:48:09:4c: 58:a1:9a:30:7a:95:23:ba:84:61:f2:21:0b:d2:58:d1:a8:85: 75:0a:b3:0e:6c:1b:f8:55:9b:8a:39:c5:fc:11:61:03:30:c0: 75:94:64:50:22:4f:66:d7:63:71:aa:0d:1a:b8:48:0f:5b:8c: a5:d3:57:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+CvtzBsZk5GdsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MjQ1OTc5NDEtMWNlMC00MjlmLWEwZDYtOTE1MzlmOWUzMmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM4Emd4ZSzMLfGnhZ5CG4EaK03VNE91ozKxe JVJhh8j1dJvF2oUXiHbJ7BSxuiGsqNYeWd7hP/MHkCaWALmrQ/VLf8IpfdaGsNEp xT/Sdt+R72pvd2Wn5jNjKzNIzZmT3fEBMFAvgorabYFmALOi2CBuHarYx5s703I0 m5B2GX/+q7XSd6hCKgdH7gABlyOGglbS18HOcFhZqLjyzHD2kHqGYwLZt1nx+lpU 1ZEvSlXO3ABQ18Yg8IBHF52UEgs5jZAsN2fbtzwavbcynHZRBs6DtDnIgvrwKj7s Q3ayiVGOUkF2mdL8Kd18h7swcB1bHsEkACu4dGH9YcwSUzdXTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGa0j6Ae2bCOSJpzslwIAaTGhEoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODBjNmUxZjQtNTQ3OS0z MWY2LTgwNjUtYzEwODg3NGZmMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR+5eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANO3kNyno3FmDM6uZhiIR2U8I6pKHcLJE61r+rHVf4yqQgjpbhgjAIrd CeCBdzk/7B2lwBMjpkV7/bweucwhKiT1+gGlXjSa+PbPWsTDMppC6Swofqq67l9H 8TEpjpi+uc75+MQnBsYXDo4GtTaKoclYuUDrdzSl0en6rzYo6xE4h3CJXUkjqyxM iZhm6MBCdB49tw5IGd0mGnHdrEw0Z8oB5bpU/X+UX8mDW9If8IL5G+qma9LDeF9w TtgbZPnBaerwlEgJTFihmjB6lSO6hGHyIQvSWNGohXUKsw5sG/hVm4o5xfwRYQMw wHWUZFAiT2bXY3GqDRq4SA9bjKXTV64= -----END CERTIFICATE-----Generated at Mon Apr 28 04:41:15 2025 by rpki-client