$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d5949e-dcba-3400-8e82-e2649e894aa6.roa File: 20d5949e-dcba-3400-8e82-e2649e894aa6.roa (raw, json) Hash identifier: l+MWlyqRVRZkOJMf8vnWTQyNPJ5CyZD3Jg3SfWbw+8w= Subject key identifier: FF:5D:5C:A6:AC:64:AD:D1:8E:04:DA:DD:48:70:08:38:37:7F:4E:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA48FA4F8775363B717C6C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d5949e-dcba-3400-8e82-e2649e894aa6.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 73.58.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:8f:a4:f8:77:53:63:b7:17:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=16fb6d08-7216-4823-830b-7de8aa7ddf18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:20:30:22:2d:98:3f:8c:17:e4:ab:c7:02: e3:26:c0:5e:c1:9e:92:ff:3f:2e:06:80:da:cb:43: 08:9e:cd:5f:ca:5a:06:bb:98:1f:6d:70:4b:a5:1f: 25:de:69:f1:21:78:8f:b8:c4:61:38:cf:ca:a1:9e: 82:73:21:c4:36:2a:af:9f:0a:81:68:fa:76:d5:37: b5:e4:72:4c:80:36:0e:6d:13:ca:60:cd:b4:32:14: 45:f4:86:aa:b7:dc:11:50:ee:01:a7:1c:d0:93:0f: e8:0a:74:9f:79:5a:09:14:50:96:46:9c:0b:c2:f7: b3:9b:f7:f2:c5:ae:a3:6e:5d:fa:bc:0a:e5:4b:2e: 96:65:29:13:89:cb:18:af:24:2e:54:9b:72:c6:06: 8d:9b:cd:83:d4:da:22:a2:78:f1:f7:d6:a1:cf:a2: d2:9e:37:9e:9e:f1:55:18:0c:58:1f:59:84:7c:cc: d4:0a:c3:db:88:91:db:67:ac:65:55:6e:a9:46:56: ee:e3:54:70:8a:a6:31:dc:23:8d:58:30:34:3b:72: a9:b4:63:32:34:df:6c:cf:8a:e3:f3:5c:3e:15:6a: a9:cd:5e:74:64:64:51:9b:e0:1c:f2:df:15:af:f1: 10:d3:ca:3a:15:f0:a6:91:29:08:ea:ba:60:29:16: 38:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5D:5C:A6:AC:64:AD:D1:8E:04:DA:DD:48:70:08:38:37:7F:4E:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d5949e-dcba-3400-8e82-e2649e894aa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.58.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:9b:15:19:cb:39:f2:5f:8b:b7:8c:fc:28:02:77:29:26:5e: 89:b7:05:38:34:96:8b:d4:1f:95:9a:2a:f6:2b:1a:ea:d4:6d: e4:24:fc:5e:1c:9e:87:b5:9b:d6:a0:b8:15:4a:51:89:d6:fc: df:d1:fd:c9:28:d9:6b:48:4b:18:86:43:5a:5b:be:20:b8:81: 10:c1:35:23:be:14:2b:56:6c:e5:2c:94:14:a3:09:84:44:16: bd:9e:d6:2f:f6:82:38:da:98:0d:b1:de:19:0c:37:72:f3:ef: db:a3:9a:fe:dd:f8:34:20:e2:51:c8:1b:d4:1b:79:89:07:98: ff:6d:e7:e7:9a:49:bb:04:cc:7a:97:b6:1f:1c:ba:74:d3:c6: a6:1d:7b:97:66:08:4d:ad:60:91:bf:40:74:02:f0:88:17:14: d1:28:c6:06:27:2f:31:07:3d:15:da:b1:9d:fa:51:08:0f:df: c9:df:7f:3e:a8:10:84:6c:0b:38:c5:bd:50:af:33:0b:56:16: c2:6a:d0:f1:ab:fe:f1:ed:2c:f1:aa:19:64:f4:96:61:85:66: f9:b2:a1:8b:fd:f9:91:fe:d0:93:23:82:6e:02:59:d9:fd:c9: 2f:21:95:c4:7f:a8:fa:7c:e7:4a:04:bf:2b:84:75:59:28:76: bc:bb:22:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pI+k+HdTY7cXxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MTZmYjZkMDgtNzIxNi00ODIzLTgzMGItN2RlOGFhN2RkZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEYgMCItmD+MF+SrxwLjJsBewZ6S/z8uBoDa y0MIns1fyloGu5gfbXBLpR8l3mnxIXiPuMRhOM/KoZ6CcyHENiqvnwqBaPp21Te1 5HJMgDYObRPKYM20MhRF9Iaqt9wRUO4BpxzQkw/oCnSfeVoJFFCWRpwLwvezm/fy xa6jbl36vArlSy6WZSkTicsYryQuVJtyxgaNm82D1Noionjx99ahz6LSnjeenvFV GAxYH1mEfMzUCsPbiJHbZ6xlVW6pRlbu41RwiqYx3CONWDA0O3KptGMyNN9sz4rj 81w+FWqpzV50ZGRRm+Ac8t8Vr/EQ08o6FfCmkSkI6rpgKRY4FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9dXKasZK3RjgTa3UhwCDg3f063MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBkNTk0OWUtZGNiYS0z NDAwLThlODItZTI2NDllODk0YWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSTqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHabFRnLOfJfi7eM/CgCdykmXom3BTg0lovUH5WaKvYrGurUbeQk/F4c noe1m9aguBVKUYnW/N/R/cko2WtISxiGQ1pbviC4gRDBNSO+FCtWbOUslBSjCYRE Fr2e1i/2gjjamA2x3hkMN3Lz79ujmv7d+DQg4lHIG9QbeYkHmP9t5+eaSbsEzHqX th8cunTTxqYde5dmCE2tYJG/QHQC8IgXFNEoxgYnLzEHPRXasZ36UQgP38nffz6o EIRsCzjFvVCvMwtWFsJq0PGr/vHtLPGqGWT0lmGFZvmyoYv9+ZH+0JMjgm4CWdn9 yS8hlcR/qPp850oEvyuEdVkodry7IoE= -----END CERTIFICATE-----Generated at Sun Apr 27 11:30:38 2025 by rpki-client