$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb88c879-f884-3651-975d-58d7acfec323.roa File: fb88c879-f884-3651-975d-58d7acfec323.roa (raw, json) Hash identifier: 4jHYlu1pMDud1cPm7LPYJuf/ZCYP009H/nkhRmpSsIA= Subject key identifier: 21:7C:0B:83:58:CE:5D:A2:64:35:17:59:14:16:48:C4:96:2D:C2:57 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB07B2C3C7D7413D460E3E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb88c879-f884-3651-975d-58d7acfec323.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 174.166.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:7b:2c:3c:7d:74:13:d4:60:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=d7aad2f7-ffe2-4a47-929c-bb85c4c6c53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:55:17:26:11:44:ad:b1:f8:fe:16:33:4e:af: 0a:fc:23:55:22:6d:a4:a0:9d:95:47:2e:46:13:42: 73:e8:8c:61:58:9a:9b:de:dc:00:64:50:ce:f6:00: 16:c1:ff:f9:c8:2c:ed:4c:6a:6d:2f:67:d8:d7:3c: 99:66:a7:d3:df:75:b5:d3:77:25:bd:4e:b1:77:45: 9d:19:aa:cd:0c:c0:7a:ec:86:b5:66:e3:eb:3d:0e: 92:75:24:da:14:8a:8b:89:1b:2a:cc:b7:01:70:bc: e0:ef:38:87:af:a6:b5:89:c5:03:0d:24:74:6a:a8: 91:1e:6d:9c:2b:e5:a5:f2:14:ec:5f:f4:95:ba:00: 17:63:59:53:8e:a1:23:14:e5:84:8c:2a:57:d4:ea: ab:f5:08:28:42:96:fd:02:01:3a:6e:73:6c:e3:7a: 14:01:f1:89:ca:40:41:05:fa:29:f7:ed:de:be:7d: 47:db:ed:71:5f:d8:87:31:ae:fc:2d:b3:76:1d:f4: d8:2f:60:d0:0a:bb:5c:d5:5a:e5:2c:d3:98:08:d8: 91:80:e4:ab:31:0b:81:df:0f:c9:ac:aa:d1:c1:7c: 5e:6a:88:40:9b:9a:f4:b9:e5:cd:fe:56:6d:74:7a: 2a:82:88:6e:63:55:6b:15:b1:7e:9b:44:c6:2b:f8: f5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7C:0B:83:58:CE:5D:A2:64:35:17:59:14:16:48:C4:96:2D:C2:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb88c879-f884-3651-975d-58d7acfec323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.166.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:f4:24:02:a7:11:b6:0f:8d:3c:76:7e:8c:06:24:bc:3d:03: 00:92:91:f4:b0:69:de:6a:39:d4:0c:47:a7:25:c9:3b:d3:b3: 09:55:70:46:fb:8d:70:de:36:dc:7d:24:36:cd:f9:4a:00:80: 42:14:6b:6b:83:46:cc:cb:30:6a:c4:f1:54:4a:b3:13:2d:0f: 87:7a:bd:d2:a7:2a:d5:55:40:c8:7a:19:4a:2b:e6:89:74:0b: 07:6a:14:78:89:fb:2a:f0:57:b6:32:9a:40:4c:96:07:6a:8a: 12:2d:19:33:bc:80:d9:a3:a3:80:50:71:f9:11:6e:e5:10:d8: 79:61:41:d4:51:02:1e:0f:cf:7f:6c:43:88:cc:53:08:cb:7e: 77:7a:da:16:6f:e2:9a:c0:ea:c5:f6:89:8c:ff:3f:62:f6:a8: 1d:d7:af:26:57:e5:b3:0a:7a:48:a1:bf:25:fe:00:60:f5:54: 62:ae:d2:8e:e4:a0:05:a7:b4:75:96:6d:93:56:34:a7:47:15: 3e:4f:3e:a4:8b:d9:e9:b3:97:a4:f4:c7:8c:35:56:c1:bd:cf: 76:7f:30:85:6c:90:ef:b4:8c:8b:e5:25:29:e1:8f:f6:0e:4f: 6b:5f:23:3d:ac:11:44:07:e3:1e:75:74:48:5a:68:c6:77:76: 80:ed:fc:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssHssPH10E9Rg4+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDdhYWQyZjctZmZlMi00YTQ3LTkyOWMtYmI4NWM0YzZjNTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VUXJhFErbH4/hYzTq8K/CNVIm2koJ2VRy5G E0Jz6IxhWJqb3twAZFDO9gAWwf/5yCztTGptL2fY1zyZZqfT33W103clvU6xd0Wd GarNDMB67Ia1ZuPrPQ6SdSTaFIqLiRsqzLcBcLzg7ziHr6a1icUDDSR0aqiRHm2c K+Wl8hTsX/SVugAXY1lTjqEjFOWEjCpX1Oqr9QgoQpb9AgE6bnNs43oUAfGJykBB Bfop9+3evn1H2+1xX9iHMa78LbN2HfTYL2DQCrtc1VrlLNOYCNiRgOSrMQuB3w/J rKrRwXxeaohAm5r0ueXN/lZtdHoqgohuY1VrFbF+m0TGK/j1pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCF8C4NYzl2iZDUXWRQWSMSWLcJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmI4OGM4NzktZjg4NC0z NjUxLTk3NWQtNThkN2FjZmVjMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEb0JAKnEbYPjTx2fowGJLw9AwCSkfSwad5qOdQMR6clyTvTswlVcEb7 jXDeNtx9JDbN+UoAgEIUa2uDRszLMGrE8VRKsxMtD4d6vdKnKtVVQMh6GUor5ol0 CwdqFHiJ+yrwV7YymkBMlgdqihItGTO8gNmjo4BQcfkRbuUQ2HlhQdRRAh4Pz39s Q4jMUwjLfnd62hZv4prA6sX2iYz/P2L2qB3XryZX5bMKekihvyX+AGD1VGKu0o7k oAWntHWWbZNWNKdHFT5PPqSL2emzl6T0x4w1VsG9z3Z/MIVskO+0jIvlJSnhj/YO T2tfIz2sEUQH4x51dEhaaMZ3doDt/DU= -----END CERTIFICATE-----Generated at Tue Apr 29 11:27:43 2025 by rpki-client