$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20da560d-ae1f-3b0a-9d1a-02524d78413d.roa File: 20da560d-ae1f-3b0a-9d1a-02524d78413d.roa (raw, json) Hash identifier: 4CewsK3SgDD7J2rdztGMxrQ0FHsArBEjG6rcH8xaNQ8= Subject key identifier: E0:E8:8C:F6:66:D5:87:FE:EF:09:FF:01:C0:0B:17:C0:C1:F6:6E:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA533026DDD125026B3E2A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20da560d-ae1f-3b0a-9d1a-02524d78413d.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 13367 IP address blocks: 73.5.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:33:02:6d:dd:12:50:26:b3:e2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=e740e60b-0049-4ad7-a165-59a57383e7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5f:e6:2e:72:12:2a:ef:fb:25:61:81:48:83: 67:bf:62:c0:c5:f4:ab:30:98:1f:a8:d2:bd:9a:b3: e0:f4:5b:5d:77:fc:0b:38:fa:9a:4c:67:d5:3a:82: 17:c3:cb:9a:7d:39:8e:38:b8:8a:79:03:c9:da:35: dd:ab:19:9f:f2:6c:52:29:4c:74:fc:df:1a:59:09: d6:4d:71:29:54:f1:27:95:2a:e0:2c:0b:b0:88:d1: 98:39:46:6a:5c:08:51:07:ee:16:25:6f:87:58:80: a4:7b:fd:87:6d:d7:6d:0d:b7:e9:23:6f:2d:66:9f: 45:df:7f:c8:47:d8:bc:11:39:25:46:78:08:21:36: 5f:01:55:ec:93:f3:ea:39:45:ba:d4:bd:88:61:17: 76:59:cf:43:81:05:68:c3:42:50:2f:89:df:a0:f2: 3e:3f:5f:ce:a0:43:44:1a:15:de:92:a5:68:fe:e7: 10:4e:f8:08:54:f0:85:be:9a:6b:a7:c4:02:83:48: 7d:12:33:df:1e:95:01:e3:07:e4:9c:f5:fc:3b:c6: 50:dd:53:59:21:3d:88:9a:25:d5:83:ee:45:a2:0b: 61:84:b9:bb:48:4b:76:de:5f:f0:45:20:72:35:6a: f2:43:ea:76:ec:0d:16:5f:b2:c0:da:2d:8c:73:9f: dd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E8:8C:F6:66:D5:87:FE:EF:09:FF:01:C0:0B:17:C0:C1:F6:6E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20da560d-ae1f-3b0a-9d1a-02524d78413d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.5.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9d:48:fc:bd:de:9c:02:bb:69:b8:2b:23:3d:07:ad:27:c2: e2:83:31:63:5d:5f:45:5d:a1:79:b3:27:a6:52:8d:30:35:61: 26:a1:b5:89:ba:68:42:06:77:ad:0c:06:12:ec:3e:10:0f:eb: 09:9a:02:43:a3:f3:21:6c:dd:0a:27:12:67:55:17:95:41:b0: 4b:8e:3a:b7:e5:07:cc:50:11:56:9f:1b:ce:2b:47:69:3e:a7: 10:d2:e8:fd:26:67:42:3f:5e:23:e5:5b:b8:f2:5b:61:f4:e5: e3:d1:32:4c:d4:8f:83:ef:5a:fd:b6:a7:f2:df:64:00:2c:91: 5a:0c:22:24:1c:46:2c:a8:20:67:fa:bf:37:9a:98:0e:b0:40: f5:c7:9b:63:6a:f6:02:13:87:14:97:f0:ce:f6:78:62:9e:73: 34:32:9b:33:78:e1:3f:c1:f9:6d:a7:3f:b2:b1:cc:a8:d1:67: 64:63:cb:40:e1:e5:83:a9:23:c8:59:22:cd:40:07:98:de:ea: 72:20:de:2f:63:55:8b:4f:23:37:5f:85:7c:40:62:4a:bd:49: 9f:f3:59:f4:78:47:2b:b5:3e:d9:e6:24:02:44:61:5f:6a:c3: 61:de:a0:fd:00:da:c6:08:9c:38:f3:c3:7f:79:ca:8e:a2:a0: 2c:a2:4d:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pTMCbd0SUCaz4qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZTc0MGU2MGItMDA0OS00YWQ3LWExNjUtNTlhNTczODNlN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1/mLnISKu/7JWGBSINnv2LAxfSrMJgfqNK9 mrPg9Ftdd/wLOPqaTGfVOoIXw8uafTmOOLiKeQPJ2jXdqxmf8mxSKUx0/N8aWQnW TXEpVPEnlSrgLAuwiNGYOUZqXAhRB+4WJW+HWICke/2HbddtDbfpI28tZp9F33/I R9i8ETklRngIITZfAVXsk/PqOUW61L2IYRd2Wc9DgQVow0JQL4nfoPI+P1/OoENE GhXekqVo/ucQTvgIVPCFvpprp8QCg0h9EjPfHpUB4wfknPX8O8ZQ3VNZIT2ImiXV g+5FogthhLm7SEt23l/wRSByNWryQ+p27A0WX7LA2i2Mc5/dfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODojPZm1Yf+7wn/AcALF8DB9m4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBkYTU2MGQtYWUxZi0z YjBhLTlkMWEtMDI1MjRkNzg0MTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACidSPy93pwCu2m4KyM9B60nwuKDMWNdX0VdoXmzJ6ZSjTA1YSahtYm6 aEIGd60MBhLsPhAP6wmaAkOj8yFs3QonEmdVF5VBsEuOOrflB8xQEVafG84rR2k+ pxDS6P0mZ0I/XiPlW7jyW2H05ePRMkzUj4PvWv22p/LfZAAskVoMIiQcRiyoIGf6 vzeamA6wQPXHm2Nq9gIThxSX8M72eGKeczQymzN44T/B+W2nP7KxzKjRZ2Rjy0Dh 5YOpI8hZIs1AB5je6nIg3i9jVYtPIzdfhXxAYkq9SZ/zWfR4Ryu1PtnmJAJEYV9q w2HeoP0A2sYInDjzw395yo6ioCyiTVY= -----END CERTIFICATE-----Generated at Sun Apr 27 10:32:49 2025 by rpki-client