$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccafa9d8-1d11-3ab3-b543-70866d966b8d.roa File: ccafa9d8-1d11-3ab3-b543-70866d966b8d.roa (raw, json) Hash identifier: hq0HlnUciaaFWYTn239P8RRKgNioEaGzywLs2oDFSBU= Subject key identifier: 5C:B4:73:75:38:AB:53:0A:3E:CE:7C:97:83:7A:ED:2A:37:8E:C2:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584992946FF80B119B07579A1420 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccafa9d8-1d11-3ab3-b543-70866d966b8d.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 33491 IP address blocks: 71.201.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:6f:f8:0b:11:9b:07:57:9a:14:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=55c66130-325e-42cb-a440-61f099a39383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e8:dd:c6:bc:c4:6a:ad:6e:aa:ff:0a:78:ec: 1c:50:b5:e5:12:ad:24:de:09:de:56:8f:92:a8:85: c8:06:32:25:78:80:f4:82:e1:d8:d3:3b:67:f3:16: 00:10:6a:93:40:fc:ea:db:30:ba:4d:4c:20:01:28: 8f:b3:75:0b:5d:e9:09:9e:6a:49:d0:d1:0c:f3:b8: f3:55:cb:49:9e:75:a4:5f:f3:f9:b0:03:22:3b:22: 49:06:bd:61:1f:80:7b:ca:bd:52:f6:ff:6a:db:78: 10:80:18:87:db:4c:bf:ff:3a:b9:8e:2a:86:e2:e5: 92:67:95:c5:a2:21:dd:a4:80:55:73:fc:ac:6c:2f: cb:b3:ca:53:01:4f:7b:e2:b7:a0:20:7c:50:1c:23: e7:7d:5b:7b:fb:1f:9a:0a:5b:ac:2d:15:18:15:34: c5:6c:c5:25:46:6e:23:b3:04:46:3b:c2:6a:05:12: 2b:65:67:30:73:bd:c4:71:6f:22:6d:a6:a3:20:51: d6:db:00:8d:cd:48:f5:47:4b:81:1d:dc:81:a3:56: 2f:cf:44:05:66:90:91:b0:63:18:c0:94:1f:f6:37: ab:84:15:31:54:32:d0:d6:34:f8:95:31:c4:b1:e4: 08:f0:f9:75:7d:35:b5:19:22:6a:36:97:79:b0:07: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B4:73:75:38:AB:53:0A:3E:CE:7C:97:83:7A:ED:2A:37:8E:C2:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ccafa9d8-1d11-3ab3-b543-70866d966b8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:96:b8:df:2b:6a:65:53:76:b1:68:e9:c5:34:47:e0:eb:06: 7e:e5:bc:59:68:9b:b6:7a:92:b2:5e:11:d3:7a:bb:3d:7c:87: e5:ea:e9:25:5c:03:49:eb:b0:a1:4c:7c:a9:a3:cf:88:36:d5: 4f:e3:1b:1a:41:69:66:e5:05:bc:23:b7:74:a9:88:e5:3c:6f: e0:44:57:51:9f:68:cc:5b:b7:90:3d:35:6e:3d:cb:e0:55:b3: d6:06:a5:7e:4f:e5:86:6c:4c:2d:97:96:b6:ee:02:11:c3:e8: 47:cb:35:2e:fd:40:c5:c0:25:a2:f1:22:ba:27:b4:56:1c:90: 8e:e2:9d:ea:39:39:5e:9f:c7:56:d5:3c:5b:38:28:92:44:88: 73:06:28:80:80:0b:09:55:45:94:b4:f0:1a:cf:9e:2a:38:10: 52:b1:79:01:8f:b7:c7:d1:45:6b:0f:35:ab:bd:9c:90:ef:bd: d7:cd:98:91:97:e5:c8:2e:06:d1:7a:fb:16:c9:d7:0c:4b:13: ac:40:a8:82:ef:cc:b5:7b:79:a3:cb:31:68:89:8b:a5:b9:0b: 8c:7e:4b:fc:81:27:c5:a9:a8:57:c8:16:80:53:95:bd:a4:b5: 09:9a:84:89:46:d0:3f:cf:fe:ee:3d:58:dd:ed:af:1b:06:0d: 34:50:d3:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlG/4CxGbB1eaFCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk NTVjNjYxMzAtMzI1ZS00MmNiLWE0NDAtNjFmMDk5YTM5MzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOjdxrzEaq1uqv8KeOwcULXlEq0k3gneVo+S qIXIBjIleID0guHY0ztn8xYAEGqTQPzq2zC6TUwgASiPs3ULXekJnmpJ0NEM87jz VctJnnWkX/P5sAMiOyJJBr1hH4B7yr1S9v9q23gQgBiH20y//zq5jiqG4uWSZ5XF oiHdpIBVc/ysbC/Ls8pTAU974regIHxQHCPnfVt7+x+aClusLRUYFTTFbMUlRm4j swRGO8JqBRIrZWcwc73EcW8ibaajIFHW2wCNzUj1R0uBHdyBo1Yvz0QFZpCRsGMY wJQf9jerhBUxVDLQ1jT4lTHEseQI8Pl1fTW1GSJqNpd5sAeIvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy0c3U4q1MKPs58l4N67So3jsJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2NhZmE5ZDgtMWQxMS0z YWIzLWI1NDMtNzA4NjZkOTY2YjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8lgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuWuN8ramVTdrFo6cU0R+DrBn7lvFlom7Z6krJeEdN6uz18h+Xq6SVc A0nrsKFMfKmjz4g21U/jGxpBaWblBbwjt3SpiOU8b+BEV1GfaMxbt5A9NW49y+BV s9YGpX5P5YZsTC2XlrbuAhHD6EfLNS79QMXAJaLxIrontFYckI7ineo5OV6fx1bV PFs4KJJEiHMGKICACwlVRZS08BrPnio4EFKxeQGPt8fRRWsPNau9nJDvvdfNmJGX 5cguBtF6+xbJ1wxLE6xAqILvzLV7eaPLMWiJi6W5C4x+S/yBJ8WpqFfIFoBTlb2k tQmahIlG0D/P/u49WN3trxsGDTRQ0zY= -----END CERTIFICATE-----Generated at Sun Apr 27 11:32:22 2025 by rpki-client