$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bff56cd-79d3-3779-84e7-313d9f6d62d3.roa File: 5bff56cd-79d3-3779-84e7-313d9f6d62d3.roa (raw, json) Hash identifier: Y279LVDFJShsJA8r+yg2ym3sifA5SuJu39IHkEQc7Uk= Subject key identifier: 4C:F5:08:A7:C3:C3:39:66:A7:64:F0:44:00:CE:3F:5E:D8:C5:DE:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5D571EFAA6FB3C0E12600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bff56cd-79d3-3779-84e7-313d9f6d62d3.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 73.58.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:d5:71:ef:aa:6f:b3:c0:e1:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=35dc6e24-e7c5-4537-85f4-31c64e4b46a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0a:44:5d:f3:56:9a:c3:48:99:a1:51:87:14: b0:45:7a:4f:d9:07:82:3c:f5:2b:0a:6b:c8:4a:e7: bd:9c:86:d3:df:03:b8:f6:9a:44:7e:0f:a6:e8:7e: 2d:c9:60:f7:6e:66:3a:1c:52:b6:b9:d5:5c:5f:0a: e7:04:1b:01:f9:c4:96:f4:50:8c:50:1d:b1:e9:e5: d3:51:3a:45:19:dd:e4:f4:d2:63:07:2b:02:f6:a6: e9:14:08:a8:6d:e8:51:11:5f:f5:38:b2:06:85:88: 7f:30:82:20:71:76:79:20:07:9c:5e:49:5b:d2:21: 1c:44:b6:47:cc:74:59:55:3a:42:d4:36:15:e7:ed: 7b:af:99:95:50:8f:09:e3:47:d5:27:ee:58:6b:c9: 9e:74:8e:91:64:f8:c6:c3:cf:be:32:5c:27:e6:02: 7f:65:69:24:f8:b7:33:97:3d:1b:2f:a7:c8:4f:aa: 24:89:f0:81:f3:59:8e:1c:9f:ee:7a:b3:04:97:9b: a3:c7:e6:38:14:09:4b:96:e9:14:e8:d5:4a:91:c2: 63:60:ad:f0:ec:0c:42:ad:d6:ef:25:91:d9:c1:9a: 55:52:fa:c2:91:e6:59:eb:aa:02:d5:5e:0c:e1:b0: 2f:23:6a:6e:4d:cb:56:73:51:09:92:82:fd:13:79: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F5:08:A7:C3:C3:39:66:A7:64:F0:44:00:CE:3F:5E:D8:C5:DE:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bff56cd-79d3-3779-84e7-313d9f6d62d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.58.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:03:96:bf:e7:c4:a3:99:b0:b7:c8:3a:34:0f:b5:d2:0d:ff: d6:4c:c1:d0:8b:84:82:fc:94:fc:04:82:8c:63:3c:89:c4:52: 00:9b:5e:d3:df:da:13:07:05:07:94:e3:f3:ee:18:cf:65:49: a6:ac:da:d7:72:26:b9:9f:70:f3:00:3a:3d:d6:76:3e:50:af: ab:7b:eb:a3:59:a3:03:81:b5:bd:f4:0c:08:e6:52:c2:f7:26: e2:43:1b:11:61:ab:8c:36:f6:ed:75:b4:09:bc:3f:16:28:4c: e7:f5:26:69:b7:bd:f5:35:5b:ac:73:ad:95:90:73:2b:1d:42: 75:da:37:46:9d:41:a6:c4:f2:47:59:56:26:0e:d7:89:a2:56: 15:83:da:f7:1d:8e:7f:3e:8f:60:4f:a4:60:b8:f3:fc:79:f8: 04:7f:0e:c4:66:64:ac:e5:5d:cf:bc:19:aa:29:c3:ef:52:c7: 88:c8:bb:f0:b8:e0:4d:40:f9:27:22:c8:18:15:ea:bd:87:d8: c1:e4:e4:f6:66:4a:f6:a7:52:5a:c5:58:04:c9:42:be:ba:b9: 93:82:18:2d:4a:20:11:3d:a1:16:88:be:5d:98:14:88:f3:3c: 04:b8:d5:34:50:98:ff:a2:b7:60:6f:a3:4a:b7:bd:76:ec:2d: 90:68:0f:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pdVx76pvs8DhJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MzVkYzZlMjQtZTdjNS00NTM3LTg1ZjQtMzFjNjRlNGI0NmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoApEXfNWmsNImaFRhxSwRXpP2QeCPPUrCmvI Sue9nIbT3wO49ppEfg+m6H4tyWD3bmY6HFK2udVcXwrnBBsB+cSW9FCMUB2x6eXT UTpFGd3k9NJjBysC9qbpFAiobehREV/1OLIGhYh/MIIgcXZ5IAecXklb0iEcRLZH zHRZVTpC1DYV5+17r5mVUI8J40fVJ+5Ya8medI6RZPjGw8++Mlwn5gJ/ZWkk+Lcz lz0bL6fIT6okifCB81mOHJ/uerMEl5ujx+Y4FAlLlukU6NVKkcJjYK3w7AxCrdbv JZHZwZpVUvrCkeZZ66oC1V4M4bAvI2puTctWc1EJkoL9E3lfxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEz1CKfDwzlmp2TwRADOP17Yxd7FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWJmZjU2Y2QtNzlkMy0z Nzc5LTg0ZTctMzEzZDlmNmQ2MmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSTqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgDlr/nxKOZsLfIOjQPtdIN/9ZMwdCLhIL8lPwEgoxjPInEUgCbXtPf 2hMHBQeU4/PuGM9lSaas2tdyJrmfcPMAOj3Wdj5Qr6t766NZowOBtb30DAjmUsL3 JuJDGxFhq4w29u11tAm8PxYoTOf1Jmm3vfU1W6xzrZWQcysdQnXaN0adQabE8kdZ ViYO14miVhWD2vcdjn8+j2BPpGC48/x5+AR/DsRmZKzlXc+8Gaopw+9Sx4jIu/C4 4E1A+SciyBgV6r2H2MHk5PZmSvanUlrFWATJQr66uZOCGC1KIBE9oRaIvl2YFIjz PAS41TRQmP+it2Bvo0q3vXbsLZBoD6M= -----END CERTIFICATE-----Generated at Mon Apr 28 20:02:46 2025 by rpki-client