$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f219c0a9-3d21-3d63-8d6f-16fcfa2c9860.roa File: f219c0a9-3d21-3d63-8d6f-16fcfa2c9860.roa (raw, json) Hash identifier: H0t1RSNUs4GXZK7RKRz29OeM010qJXb9HNqbF+gUVlQ= Subject key identifier: 21:36:1A:A0:4E:6B:3E:19:BC:65:1F:D8:25:CF:29:BC:6E:80:4F:7D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB092FA930A712D3C872000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f219c0a9-3d21-3d63-8d6f-16fcfa2c9860.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 71.224.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:92:fa:93:0a:71:2d:3c:87:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=78c47883-6c15-4169-b496-de1d31c1943f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bf:28:54:5d:d0:44:4b:c6:6d:8e:88:7a:9a: 3f:a7:d7:59:28:24:f8:1c:67:f7:61:10:19:a9:83: e4:b1:60:7c:6b:5b:1a:50:a4:d8:ce:56:47:41:27: 13:2b:98:02:02:71:aa:ea:8c:74:d7:75:72:5c:a8: 77:04:c0:2e:1d:ce:0f:c5:ff:d2:26:b8:dc:49:5e: 3f:4d:e4:be:6d:55:85:7b:c4:b8:ad:d4:d3:9b:9f: ff:9a:28:f9:1a:c8:89:ad:2b:4c:d2:e4:9e:4c:49: 69:b9:4d:58:f0:af:d8:74:4e:d2:47:62:0c:67:b7: 23:f5:25:23:5f:6d:ba:96:b1:b0:27:8f:66:36:1d: 98:4a:5f:01:f5:a0:f4:da:5b:f3:8a:68:3c:8f:32: 1a:44:f2:fe:9f:76:1a:a8:c8:9c:27:dd:a6:f9:20: 8f:6f:a6:fd:3d:ac:5b:73:4a:8f:da:2d:33:8e:23: 99:25:d4:b8:05:54:b6:12:5f:b7:cc:ce:6c:07:7a: 2c:97:34:ff:96:87:c7:c2:e2:6e:3e:e1:07:c3:ab: ee:9b:50:06:10:2f:2b:b4:a4:6a:59:e4:80:3d:b2: 11:00:7c:aa:0d:d0:41:82:50:ca:45:45:21:b0:12: d9:99:4a:5f:00:38:fb:bc:12:52:8c:48:fe:8d:81: 1b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:36:1A:A0:4E:6B:3E:19:BC:65:1F:D8:25:CF:29:BC:6E:80:4F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f219c0a9-3d21-3d63-8d6f-16fcfa2c9860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.224.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:7a:01:e0:57:a6:5f:76:9d:ff:8f:55:47:83:c8:2c:14:41: be:d0:fa:5e:d5:c5:f3:7c:83:6c:3a:33:b5:63:8a:d6:54:fa: 94:3f:66:27:f1:28:67:0c:ce:29:3b:f5:2e:7f:26:0e:3d:71: 33:d4:3a:74:5b:04:c6:20:b7:1e:b1:90:66:06:2e:11:22:c8: 59:07:2c:a1:6d:7e:ad:69:03:1e:c0:14:78:14:26:59:ca:96: 4c:87:56:dc:0f:88:ef:4a:b2:36:53:53:0f:cc:5b:5f:85:26: 47:46:8d:a6:ae:b8:79:5b:15:f9:d5:30:69:b5:20:e3:04:12: dd:44:c8:05:b8:1b:42:f1:33:3a:3c:3f:a5:f9:43:2b:5b:b1: be:68:83:64:b8:f3:54:c9:63:b5:95:6a:4f:3c:4e:6d:82:e0: 70:26:7c:3a:07:72:83:08:8f:cd:14:40:38:d4:b8:87:01:21: f3:34:25:d5:04:5d:62:47:10:b9:0d:45:b5:e3:62:6c:ad:24: 48:d3:92:61:a8:a3:dc:b0:d3:2e:7d:65:37:88:13:5d:1e:f6: 08:83:62:a0:57:c9:68:82:d9:e9:12:71:fa:2a:93:6b:25:9f: 45:5f:1b:ce:f5:e7:5f:89:f5:ae:ac:d8:ba:82:37:18:0a:2a: d0:be:01:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssJL6kwpxLTyHIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NzhjNDc4ODMtNmMxNS00MTY5LWI0OTYtZGUxZDMxYzE5NDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh78oVF3QREvGbY6Iepo/p9dZKCT4HGf3YRAZ qYPksWB8a1saUKTYzlZHQScTK5gCAnGq6ox013VyXKh3BMAuHc4Pxf/SJrjcSV4/ TeS+bVWFe8S4rdTTm5//mij5GsiJrStM0uSeTElpuU1Y8K/YdE7SR2IMZ7cj9SUj X226lrGwJ49mNh2YSl8B9aD02lvzimg8jzIaRPL+n3YaqMicJ92m+SCPb6b9Paxb c0qP2i0zjiOZJdS4BVS2El+3zM5sB3oslzT/lofHwuJuPuEHw6vum1AGEC8rtKRq WeSAPbIRAHyqDdBBglDKRUUhsBLZmUpfADj7vBJSjEj+jYEbTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCE2GqBOaz4ZvGUf2CXPKbxugE99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjIxOWMwYTktM2QyMS0z ZDYzLThkNmYtMTZmY2ZhMmM5ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+BoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALx6AeBXpl92nf+PVUeDyCwUQb7Q+l7VxfN8g2w6M7VjitZU+pQ/Zifx KGcMzik79S5/Jg49cTPUOnRbBMYgtx6xkGYGLhEiyFkHLKFtfq1pAx7AFHgUJlnK lkyHVtwPiO9KsjZTUw/MW1+FJkdGjaauuHlbFfnVMGm1IOMEEt1EyAW4G0LxMzo8 P6X5Qytbsb5og2S481TJY7WVak88Tm2C4HAmfDoHcoMIj80UQDjUuIcBIfM0JdUE XWJHELkNRbXjYmytJEjTkmGoo9yw0y59ZTeIE10e9giDYqBXyWiC2ekScfoqk2sl n0VfG87151+J9a6s2LqCNxgKKtC+AQU= -----END CERTIFICATE-----Generated at Sun Apr 27 21:30:46 2025 by rpki-client