$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cd36668-578d-3e85-9d9e-346cf899b324.roa File: 5cd36668-578d-3e85-9d9e-346cf899b324.roa (raw, json) Hash identifier: Uw+RFwkSjnkWaqUvkfyxYOCdlz7w/rKXqTdNNHUPd+k= Subject key identifier: 84:E0:5D:5B:23:5A:74:73:57:79:81:A5:26:E4:75:DD:B3:65:FF:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5350D956B59E76A92DA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cd36668-578d-3e85-9d9e-346cf899b324.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 13367 IP address blocks: 73.37.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:35:0d:95:6b:59:e7:6a:92:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=4bbfe0f4-a2ab-4dfb-888d-1cc3b9ec63e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7b:48:63:11:d7:44:da:35:5b:56:c3:19:5c: 36:ca:dd:ee:d4:d6:03:8a:40:86:2c:56:d1:41:7c: 23:d0:a9:a9:25:51:b0:7a:df:e1:cd:5f:22:84:50: 66:a8:62:7e:41:0e:2b:23:84:3b:f9:0e:83:1c:1a: 80:41:9b:37:f1:bb:4c:63:45:9e:44:cc:98:90:76: 1f:76:dd:d6:45:02:ae:de:8b:09:47:27:fa:79:b3: 83:02:72:23:b4:f0:b7:33:bc:0f:81:be:8a:44:bf: 1e:ef:27:8b:3e:a1:7b:44:f8:f0:4b:98:83:a6:78: 4f:53:ef:bb:93:56:f6:20:86:8e:2a:54:cb:27:33: f1:be:46:dc:ef:fb:de:8b:08:11:d3:f6:9b:a1:e2: 01:42:67:9a:a9:6d:f6:60:7a:09:3b:9d:bf:07:5b: 4e:41:ef:65:e3:4a:02:e9:b9:39:e3:70:26:16:6d: c3:67:36:29:4f:3d:11:ee:37:c8:7b:73:2b:6b:16: 37:5c:3f:6a:c2:82:f1:70:53:0f:fb:29:3a:01:9d: 29:8a:ec:8e:68:de:82:70:7d:c7:a6:ba:c4:81:e4: 2c:94:db:71:70:9b:d4:3f:89:fc:e1:dc:3d:a1:57: bb:4e:7c:3c:d9:4e:ab:9b:c7:eb:52:ab:0e:ce:52: 08:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E0:5D:5B:23:5A:74:73:57:79:81:A5:26:E4:75:DD:B3:65:FF:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cd36668-578d-3e85-9d9e-346cf899b324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.37.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f6:1b:9e:03:d3:20:74:65:9b:45:87:10:b1:9e:ba:84:8b: ba:57:27:b8:cc:41:09:21:31:31:c8:93:6a:b0:c3:d8:6e:97: 8b:12:8c:45:07:bb:91:c2:c2:b7:1e:7e:e9:b7:6a:bc:87:0b: 39:0f:7f:d5:b5:7c:f4:5a:fd:31:37:80:73:85:a8:30:34:bf: 7b:75:4e:33:fb:23:66:0b:8f:86:5b:7b:df:96:0c:d4:7a:ed: cc:a7:e6:50:f2:17:f4:5e:d0:bb:14:e8:a7:cd:4b:d4:7a:02: 0d:48:6d:af:98:0c:71:e0:1e:c3:05:34:6f:9c:fb:ca:31:76: ec:fa:7d:17:10:f9:48:1d:e1:08:48:40:8e:83:9f:ac:77:53: d5:72:61:d9:de:a6:b7:a1:93:e5:b6:07:00:91:2f:ab:5d:17: 40:fc:19:e5:c1:ee:71:23:46:e4:ec:e6:12:24:74:3e:5e:19: f3:0c:55:d2:42:8e:52:b1:be:11:04:70:34:e0:ab:49:c3:1c: e8:7e:b4:d4:80:34:75:98:40:a0:a7:54:29:32:78:55:06:f7: b7:d2:91:bc:6f:6c:6e:c0:f0:24:e0:b2:ff:5f:97:e8:2d:ff: af:f9:8b:21:15:88:86:1b:aa:08:42:ca:9e:e5:85:c4:c2:f4: 28:29:45:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pTUNlWtZ52qS2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NGJiZmUwZjQtYTJhYi00ZGZiLTg4OGQtMWNjM2I5ZWM2M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXtIYxHXRNo1W1bDGVw2yt3u1NYDikCGLFbR QXwj0KmpJVGwet/hzV8ihFBmqGJ+QQ4rI4Q7+Q6DHBqAQZs38btMY0WeRMyYkHYf dt3WRQKu3osJRyf6ebODAnIjtPC3M7wPgb6KRL8e7yeLPqF7RPjwS5iDpnhPU++7 k1b2IIaOKlTLJzPxvkbc7/veiwgR0/aboeIBQmeaqW32YHoJO52/B1tOQe9l40oC 6bk543AmFm3DZzYpTz0R7jfIe3MraxY3XD9qwoLxcFMP+yk6AZ0piuyOaN6CcH3H prrEgeQslNtxcJvUP4n84dw9oVe7Tnw82U6rm8frUqsOzlIIswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITgXVsjWnRzV3mBpSbkdd2zZf8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWNkMzY2NjgtNTc4ZC0z ZTg1LTlkOWUtMzQ2Y2Y4OTliMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSX2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/2G54D0yB0ZZtFhxCxnrqEi7pXJ7jMQQkhMTHIk2qww9hul4sSjEUH u5HCwrcefum3aryHCzkPf9W1fPRa/TE3gHOFqDA0v3t1TjP7I2YLj4Zbe9+WDNR6 7cyn5lDyF/Re0LsU6KfNS9R6Ag1Iba+YDHHgHsMFNG+c+8oxduz6fRcQ+Ugd4QhI QI6Dn6x3U9VyYdneprehk+W2BwCRL6tdF0D8GeXB7nEjRuTs5hIkdD5eGfMMVdJC jlKxvhEEcDTgq0nDHOh+tNSANHWYQKCnVCkyeFUG97fSkbxvbG7A8CTgsv9fl+gt /6/5iyEViIYbqghCyp7lhcTC9CgpRUE= -----END CERTIFICATE-----Generated at Tue Apr 29 07:13:24 2025 by rpki-client