$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c917c8f-25ac-3d6f-88ce-f3fbcda5564a.roa File: 1c917c8f-25ac-3d6f-88ce-f3fbcda5564a.roa (raw, json) Hash identifier: apJ6X3n1QALJhAsrRhOEkux6DN7Uh/ba7XWEJDf/2XU= Subject key identifier: 6F:59:05:2C:9E:A8:27:8A:F0:3D:04:02:62:66:90:2D:F7:D9:06:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAEEF9208F77082AB32D600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c917c8f-25ac-3d6f-88ce-f3fbcda5564a.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 73.248.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:ef:92:08:f7:70:82:ab:32:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=ce8ece68-e3e8-4791-9064-69bdcdb02082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:1a:9f:e9:67:5c:85:89:5a:c1:8d:3a:ba: 29:e9:9f:9c:bd:5b:81:18:d6:ad:53:12:1a:0c:e1: 85:ee:90:2c:d4:b2:c3:e2:b8:a0:52:95:df:c1:34: 5b:b5:25:57:00:b2:b9:c5:4e:3e:bb:61:6d:02:9a: 63:d8:b4:93:8b:e6:e8:2f:cc:5c:c3:c7:84:34:af: a2:f9:41:6a:c3:83:66:f2:41:a8:45:16:39:4d:95: db:e2:4c:b9:dd:b1:b2:50:75:57:4f:3a:73:c9:2d: 26:42:81:81:98:82:0b:65:68:ec:0e:1d:f3:8c:99: 29:22:67:6c:1b:f2:3f:f9:b7:0e:21:fd:8f:b1:81: 81:92:30:8c:26:74:fe:14:5a:7d:36:50:cf:60:f4: 21:07:a9:b4:ec:4f:da:0a:30:44:ad:81:7f:4b:5c: d6:6f:2b:d8:20:9e:ff:6e:8f:bc:a9:7f:85:b7:f3: f1:47:ce:26:b6:82:d8:3c:12:05:7a:2c:d1:64:8f: 94:3b:b2:42:6a:a8:ec:20:07:40:a9:db:1f:63:4f: 4b:1b:13:4b:29:b7:03:ea:cd:86:1d:b3:3b:ba:b1: 0d:8b:26:58:59:29:d1:dc:62:44:3b:72:bd:5b:dd: 89:e2:c2:ad:85:e1:6d:ea:cb:c4:7f:39:b1:d6:0e: af:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:59:05:2C:9E:A8:27:8A:F0:3D:04:02:62:66:90:2D:F7:D9:06:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c917c8f-25ac-3d6f-88ce-f3fbcda5564a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:2a:73:5a:fc:67:c7:10:b4:71:79:7f:23:b2:64:ad:69:e9: 51:33:50:b9:58:a4:90:cc:15:10:28:48:2d:a2:ca:d3:53:93: 06:7b:a9:9d:51:ad:f2:f0:f1:22:0c:ee:67:da:64:67:15:f8: ec:9d:07:11:f4:4a:ec:5b:3a:95:2e:ef:d1:cf:ba:3f:16:b7: 73:30:21:bd:29:fa:4a:ef:86:17:c3:be:5e:cd:44:89:1f:66: 79:0c:ac:3c:0c:50:a0:1c:59:cc:b2:80:f9:15:fd:83:ab:75: 1c:93:74:0b:7d:28:99:33:3d:b3:82:04:e3:75:17:c0:cf:41: aa:2e:d0:eb:3f:e8:dc:e2:30:6c:5f:23:f2:f6:03:af:a7:e6: fa:11:9c:ff:74:8b:4d:d2:7d:2d:18:86:b1:ce:e5:f1:30:13: 3f:70:f4:f4:8a:47:a2:96:93:0d:32:05:88:97:38:df:8a:ab: ae:ac:38:c4:c3:16:d7:50:e2:ce:36:e8:48:f6:1a:fc:bf:36: 8e:f2:c6:32:68:4e:59:77:02:9e:72:28:d1:13:e2:d5:27:98: 38:98:61:96:f9:22:36:f5:89:73:98:2d:b0:6e:1d:63:82:47: ba:ee:ac:a4:8c:35:32:a2:5d:fd:43:b7:86:34:ce:23:6a:01: 45:e1:44:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksru+SCPdwgqsy1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk Y2U4ZWNlNjgtZTNlOC00NzkxLTkwNjQtNjliZGNkYjAyMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1san+lnXIWJWsGNOrop6Z+cvVuBGNatUxIa DOGF7pAs1LLD4rigUpXfwTRbtSVXALK5xU4+u2FtAppj2LSTi+boL8xcw8eENK+i +UFqw4Nm8kGoRRY5TZXb4ky53bGyUHVXTzpzyS0mQoGBmIILZWjsDh3zjJkpImds G/I/+bcOIf2PsYGBkjCMJnT+FFp9NlDPYPQhB6m07E/aCjBErYF/S1zWbyvYIJ7/ bo+8qX+Ft/PxR84mtoLYPBIFeizRZI+UO7JCaqjsIAdAqdsfY09LGxNLKbcD6s2G HbM7urENiyZYWSnR3GJEO3K9W92J4sKtheFt6svEfzmx1g6vBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9ZBSyeqCeK8D0EAmJmkC332QZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWM5MTdjOGYtMjVhYy0z ZDZmLTg4Y2UtZjNmYmNkYTU1NjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwqc1r8Z8cQtHF5fyOyZK1p6VEzULlYpJDMFRAoSC2iytNTkwZ7qZ1R rfLw8SIM7mfaZGcV+OydBxH0SuxbOpUu79HPuj8Wt3MwIb0p+krvhhfDvl7NRIkf ZnkMrDwMUKAcWcyygPkV/YOrdRyTdAt9KJkzPbOCBON1F8DPQaou0Os/6NziMGxf I/L2A6+n5voRnP90i03SfS0YhrHO5fEwEz9w9PSKR6KWkw0yBYiXON+Kq66sOMTD FtdQ4s426Ej2Gvy/No7yxjJoTll3Ap5yKNET4tUnmDiYYZb5Ijb1iXOYLbBuHWOC R7rurKSMNTKiXf1Dt4Y0ziNqAUXhRPE= -----END CERTIFICATE-----Generated at Sun Apr 27 12:49:59 2025 by rpki-client