$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2aa8b132-013d-3c74-9400-29ad660c20f3.roa File: 2aa8b132-013d-3c74-9400-29ad660c20f3.roa (raw, json) Hash identifier: fuJZRvTweu0T8b5Jtg1guCnY9EQBlggDnslnR4OKhdo= Subject key identifier: 13:67:12:D9:EE:5B:7A:14:78:32:D2:7E:DE:1C:8D:15:AF:FE:C5:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F82FC5B651D9CE75BD0240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2aa8b132-013d-3c74-9400-29ad660c20f3.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 73.11.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:2f:c5:b6:51:d9:ce:75:bd:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=f71b4a57-dc17-4333-a4c1-02491393adaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9e:6a:e7:ae:cd:cb:47:be:8f:40:11:99:40: f5:76:1f:03:2d:49:4b:67:8a:d4:8a:cc:68:06:b6: 16:6c:a2:bc:06:0a:70:86:02:03:dc:46:b9:c9:23: 1f:66:69:e1:5b:49:8a:d7:83:59:a8:2b:7d:ee:57: a3:f9:0c:94:c6:3d:73:00:38:19:4d:12:3d:3b:09: d4:b5:0b:08:36:79:9c:78:56:4a:1f:5d:43:d0:02: 00:69:64:45:6c:7a:a2:87:e1:f5:4f:03:cf:6e:56: 96:86:6b:21:a7:bd:b5:50:8d:7a:64:c0:a3:44:e5: ca:60:5a:62:39:ed:5c:b7:34:27:1d:bc:78:f7:ea: 84:3e:50:d2:93:97:3b:6f:7d:2f:6e:38:dd:5e:74: fc:ab:00:c0:ec:9d:38:f8:e2:c1:70:9d:19:31:a6: 7e:24:74:58:14:5b:15:30:46:c5:e6:79:6e:a7:7a: c2:55:fe:0d:f2:3a:41:b5:c0:65:4f:c0:74:d5:fa: 5d:76:45:e8:32:8e:32:66:f1:f3:6a:5a:17:3c:5a: 5f:5a:cd:04:5c:1b:05:3c:c6:6b:0c:66:77:cf:aa: cb:6e:4e:d2:e0:03:6d:65:65:b5:68:61:50:10:78: 04:f4:23:4c:db:99:fa:9a:8d:f3:1c:c2:d1:37:67: 2f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:67:12:D9:EE:5B:7A:14:78:32:D2:7E:DE:1C:8D:15:AF:FE:C5:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2aa8b132-013d-3c74-9400-29ad660c20f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.11.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:c7:f5:40:1a:aa:08:b1:ee:9f:61:c5:b2:5c:56:43:32:97: 2f:c7:f8:c3:21:78:d3:77:d4:1a:23:5e:fc:e5:98:36:19:38: 95:89:b3:cd:c7:e9:28:1d:e3:3c:f6:b8:c3:89:be:a2:ca:df: 75:18:64:c0:d7:de:b4:8c:8f:4e:4e:b3:e7:9c:66:39:dc:18: 59:de:ee:24:6e:e9:6f:cb:5e:c2:a5:7d:b6:07:49:32:a5:4d: a1:d3:a7:09:c8:f1:83:41:a3:d6:89:f6:90:ea:87:b7:e4:e3: 23:aa:2c:9f:9e:26:be:bb:91:60:6f:5b:1b:94:e9:67:7b:ae: ea:ad:c9:cb:2f:c1:e9:0e:8e:14:6e:0a:b5:47:e2:cd:db:b4: ec:ba:d0:8a:31:e9:e4:d4:4a:44:e0:aa:a9:9d:1c:3f:35:4c: 8b:91:bd:c7:ef:10:6d:4d:16:14:62:e0:5f:22:ba:a5:3e:4c: 1b:46:ae:b9:b8:04:89:80:9c:8d:a1:5b:7a:0c:33:40:be:75: b1:e8:49:3c:30:d3:f5:47:94:30:1f:c5:7d:07:58:58:20:c0: 51:7d:6d:ce:b0:7e:bd:01:a6:dc:87:c1:fa:61:33:26:f7:15: e3:43:6e:4d:76:d6:ed:be:ba:b8:dc:af:2e:4c:c6:d1:86:2b: da:9f:c4:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+C/FtlHZznW9AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZjcxYjRhNTctZGMxNy00MzMzLWE0YzEtMDI0OTEzOTNhZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp5q567Ny0e+j0ARmUD1dh8DLUlLZ4rUisxo BrYWbKK8BgpwhgID3Ea5ySMfZmnhW0mK14NZqCt97lej+QyUxj1zADgZTRI9OwnU tQsINnmceFZKH11D0AIAaWRFbHqih+H1TwPPblaWhmshp721UI16ZMCjROXKYFpi Oe1ctzQnHbx49+qEPlDSk5c7b30vbjjdXnT8qwDA7J04+OLBcJ0ZMaZ+JHRYFFsV MEbF5nlup3rCVf4N8jpBtcBlT8B01fpddkXoMo4yZvHzaloXPFpfWs0EXBsFPMZr DGZ3z6rLbk7S4ANtZWW1aGFQEHgE9CNM25n6mo3zHMLRN2cviQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNnEtnuW3oUeDLSft4cjRWv/sVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmFhOGIxMzItMDEzZC0z Yzc0LTk0MDAtMjlhZDY2MGMyMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQtyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTH9UAaqgix7p9hxbJcVkMyly/H+MMheNN31BojXvzlmDYZOJWJs83H 6Sgd4zz2uMOJvqLK33UYZMDX3rSMj05Os+ecZjncGFne7iRu6W/LXsKlfbYHSTKl TaHTpwnI8YNBo9aJ9pDqh7fk4yOqLJ+eJr67kWBvWxuU6Wd7ruqtycsvwekOjhRu CrVH4s3btOy60Iox6eTUSkTgqqmdHD81TIuRvcfvEG1NFhRi4F8iuqU+TBtGrrm4 BImAnI2hW3oMM0C+dbHoSTww0/VHlDAfxX0HWFggwFF9bc6wfr0BptyHwfphMyb3 FeNDbk121u2+urjcry5MxtGGK9qfxAM= -----END CERTIFICATE-----Generated at Tue Apr 29 12:09:17 2025 by rpki-client