$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa1d6ca2-d0cd-3475-9338-fc8970d08b6f.roa File: aa1d6ca2-d0cd-3475-9338-fc8970d08b6f.roa (raw, json) Hash identifier: eYXZk3npe9gpkuBhAdfXMI+vbcpS+H6Pvgol3woxv68= Subject key identifier: 52:FC:05:F8:C2:29:DE:AB:AF:B0:05:ED:17:1F:29:12:FB:18:4E:EC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5D2303235902332D92C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa1d6ca2-d0cd-3475-9338-fc8970d08b6f.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 71.228.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:d2:30:32:35:90:23:32:d9:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=dee66394-ea63-43d3-b5a5-415106042820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:37:f2:f8:f5:9a:02:f3:eb:73:1d:94:27:9b: 3d:1e:8a:0c:eb:09:a4:66:35:a8:a0:d6:d1:c2:e8: bf:46:9b:6a:3d:2e:bf:89:de:1f:86:98:15:ab:d2: 0d:6c:c7:8f:e6:d1:df:bc:83:5c:35:3f:a2:80:5c: ba:32:c8:9e:4d:f2:2b:4a:d0:5e:bd:2b:0b:be:09: a4:84:9d:cd:26:9f:5c:e9:8f:d6:30:0d:df:36:81: 51:22:3b:05:ca:36:e8:12:e6:d4:c9:22:a6:ec:6b: 52:cc:ea:44:c4:f6:a0:17:68:1f:7d:bb:5a:11:f0: 8c:f2:6d:5a:9b:a4:91:d9:d6:dd:d5:af:70:c5:a4: d6:49:3b:55:9c:8a:62:13:2a:a0:3b:27:5f:9c:79: ed:19:0c:70:c1:5e:e9:f1:42:32:b8:18:fe:9f:7b: 1d:4e:e3:1a:09:c2:59:5f:79:10:1e:63:2b:4d:71: 17:28:49:c9:af:38:2e:cc:dd:4a:4c:47:28:42:0d: a9:8b:ef:ee:2e:80:9b:76:f9:8b:e1:ae:a4:14:e6: 2e:81:a5:a6:55:f6:d3:60:22:08:e4:24:86:b6:1c: 1b:71:23:a0:08:ac:fb:2c:ef:74:88:d4:6c:79:b7: ec:2f:b4:7e:93:ea:ac:57:4a:3c:64:c1:81:a9:03: 4a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FC:05:F8:C2:29:DE:AB:AF:B0:05:ED:17:1F:29:12:FB:18:4E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa1d6ca2-d0cd-3475-9338-fc8970d08b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d4:d5:6c:72:8f:1e:e3:7c:90:40:40:d9:cb:82:31:e2:b5: d8:0a:19:9c:3c:b3:8e:02:5f:dd:13:93:46:c1:13:de:16:ee: 1a:57:32:d4:94:86:ab:af:a8:82:02:41:e8:1c:8e:dd:49:36: fd:04:02:f8:4b:fd:23:bf:3d:4b:bf:47:c7:c5:b6:85:fc:9b: 85:2f:7f:5e:93:e6:ec:18:6a:0d:7c:ba:ce:71:e8:9e:c2:82: 58:f6:9d:01:93:98:e6:db:5a:69:6c:81:53:00:66:24:75:1b: 7e:9c:32:a4:2d:a2:fe:67:5a:02:01:e9:0c:a1:6b:17:56:a3: ae:6b:e6:24:f6:8b:75:b2:9c:d8:0d:67:00:70:2e:8d:cc:0a: c1:06:e4:77:d6:2f:6f:84:11:0e:e4:dd:dc:53:c9:6d:ec:59: fd:33:6c:07:b3:d6:1d:a1:b1:5e:93:7a:52:b3:ed:fe:56:cf: 92:1e:e6:1b:bd:61:9f:28:d3:34:f4:a2:32:10:6e:20:67:3b: 51:3a:4b:18:42:56:87:d5:ce:ca:43:60:a3:59:ce:5c:8c:72: 53:13:c1:32:26:33:8d:e9:ba:d0:28:62:87:e9:a3:87:c8:19: 66:fb:65:2a:44:a3:a9:f2:a2:fb:18:c2:d4:7f:e6:7a:8d:ee: 9f:8b:45:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pdIwMjWQIzLZLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZGVlNjYzOTQtZWE2My00M2QzLWI1YTUtNDE1MTA2MDQyODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDfy+PWaAvPrcx2UJ5s9HooM6wmkZjWooNbR wui/RptqPS6/id4fhpgVq9INbMeP5tHfvINcNT+igFy6MsieTfIrStBevSsLvgmk hJ3NJp9c6Y/WMA3fNoFRIjsFyjboEubUySKm7GtSzOpExPagF2gffbtaEfCM8m1a m6SR2dbd1a9wxaTWSTtVnIpiEyqgOydfnHntGQxwwV7p8UIyuBj+n3sdTuMaCcJZ X3kQHmMrTXEXKEnJrzguzN1KTEcoQg2pi+/uLoCbdvmL4a6kFOYugaWmVfbTYCII 5CSGthwbcSOgCKz7LO90iNRsebfsL7R+k+qsV0o8ZMGBqQNKoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL8BfjCKd6rr7AF7RcfKRL7GE7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWExZDZjYTItZDBjZC0z NDc1LTkzMzgtZmM4OTcwZDA4YjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER+SgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7U1Wxyjx7jfJBAQNnLgjHitdgKGZw8s44CX90Tk0bBE94W7hpXMtSU hquvqIICQegcjt1JNv0EAvhL/SO/PUu/R8fFtoX8m4Uvf16T5uwYag18us5x6J7C glj2nQGTmObbWmlsgVMAZiR1G36cMqQtov5nWgIB6QyhaxdWo65r5iT2i3WynNgN ZwBwLo3MCsEG5HfWL2+EEQ7k3dxTyW3sWf0zbAez1h2hsV6TelKz7f5Wz5Ie5hu9 YZ8o0zT0ojIQbiBnO1E6SxhCVofVzspDYKNZzlyMclMTwTImM43putAoYofpo4fI GWb7ZSpEo6nyovsYwtR/5nqN7p+LRaM= -----END CERTIFICATE-----Generated at Sun Apr 27 10:29:58 2025 by rpki-client