$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0e84c28-25fe-34f0-9570-fe3aa4002ed4.roa File: a0e84c28-25fe-34f0-9570-fe3aa4002ed4.roa (raw, json) Hash identifier: 1lhzEM4i2iHNDsoEB9PHioYVUr+IW4vdoCEaaYXgXpM= Subject key identifier: BC:7A:05:1C:E6:DA:BA:F1:17:5F:15:8D:78:2D:BD:72:7E:26:2B:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB00236E412137A4DBA1340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0e84c28-25fe-34f0-9570-fe3aa4002ed4.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 73.223.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:02:36:e4:12:13:7a:4d:ba:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=8e4fe17b-7f15-4731-a542-b2acc268b6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:9e:5d:4d:cd:5a:c2:25:f4:59:a7:b9:5e: df:4f:4b:55:4e:b5:8f:82:6e:06:c5:67:88:78:18: 61:d6:77:25:f5:f9:98:63:46:12:8f:53:83:c8:ee: 85:c1:f3:8d:20:c6:04:77:00:b7:0d:63:1a:a2:82: 52:1a:c3:aa:c9:66:e1:e4:98:84:cf:53:05:bb:dc: 11:3b:c3:09:5a:22:d1:24:1a:7d:2a:2d:e0:c5:9e: f7:7d:63:26:bf:5d:aa:e8:98:e8:e4:44:f9:49:fb: 49:fb:f9:be:07:25:2e:96:f6:da:80:c8:29:50:6e: 4c:55:9d:7f:bd:e9:0b:60:61:ff:b0:f7:17:bb:73: 17:cd:d5:82:e9:fe:72:00:77:9f:b0:f9:83:c9:bb: 80:5b:13:3c:0c:84:7c:58:94:0b:c2:0e:19:b3:3d: 28:c2:57:4c:cd:bf:28:97:e6:11:19:d3:cf:d0:d2: 90:e7:b0:10:ac:f4:98:fe:14:d9:81:78:d2:65:58: 6b:ab:43:28:7d:ff:cf:ad:c5:2c:8c:2d:97:dc:08: 11:aa:5d:ef:85:da:2d:50:d5:34:31:fa:d8:5d:ec: 21:93:f2:df:34:44:ab:2d:a0:24:ea:92:0b:59:de: 8f:16:98:a7:d4:72:99:5e:15:f9:04:62:64:64:e5: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7A:05:1C:E6:DA:BA:F1:17:5F:15:8D:78:2D:BD:72:7E:26:2B:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0e84c28-25fe-34f0-9570-fe3aa4002ed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.223.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:40:d5:fd:1e:f2:b0:c9:18:e0:14:5b:c0:58:57:8d:00:5b: 30:e2:34:0d:47:89:6b:9a:7e:5b:8b:6a:19:76:e8:5f:29:1d: b8:c3:68:6e:3d:26:18:4c:7d:bf:ac:d0:b4:30:a1:46:71:0e: 3c:6c:b1:89:c0:d2:7f:3a:30:a7:a3:34:08:bf:38:1b:6d:24: 39:39:ad:61:8e:1b:ef:05:8f:d7:c1:9e:45:f3:a4:1b:17:86: df:62:d5:2f:44:e5:35:61:ed:4c:59:03:17:f1:89:d1:e1:5d: 21:b8:53:f0:e9:00:ab:cc:a3:f2:4a:06:fb:13:5f:5a:e8:93: 55:a0:74:04:57:18:b4:f3:59:19:cb:1c:28:c3:ab:5e:26:71: 42:7d:10:e1:e7:71:e8:98:1e:13:52:e8:09:d6:20:ac:7b:d6: 50:21:2d:f7:26:07:5e:72:86:f6:07:c3:df:15:71:17:50:97: 8e:59:96:8c:0b:1d:e9:65:31:98:4f:13:7a:82:a2:ba:55:ee: d5:a4:ca:4a:59:48:a0:29:bb:5c:e8:11:7d:d3:ee:7b:65:9b: e5:20:0e:7a:cf:3d:49:c7:db:ca:ff:05:d8:d7:52:7a:33:aa: f6:2d:02:49:57:3c:57:86:d5:12:4b:a3:33:5b:75:ff:a4:54: 52:87:34:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssAI25BITek26E0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OGU0ZmUxN2ItN2YxNS00NzMxLWE1NDItYjJhY2MyNjhiNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9OeXU3NWsIl9FmnuV7fT0tVTrWPgm4GxWeI eBhh1ncl9fmYY0YSj1ODyO6FwfONIMYEdwC3DWMaooJSGsOqyWbh5JiEz1MFu9wR O8MJWiLRJBp9Ki3gxZ73fWMmv12q6Jjo5ET5SftJ+/m+ByUulvbagMgpUG5MVZ1/ vekLYGH/sPcXu3MXzdWC6f5yAHefsPmDybuAWxM8DIR8WJQLwg4Zsz0owldMzb8o l+YRGdPP0NKQ57AQrPSY/hTZgXjSZVhrq0Moff/PrcUsjC2X3AgRql3vhdotUNU0 MfrYXewhk/LfNESrLaAk6pILWd6PFpin1HKZXhX5BGJkZOWAjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLx6BRzm2rrxF18VjXgtvXJ+JisKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTBlODRjMjgtMjVmZS0z NGYwLTk1NzAtZmUzYWE0MDAyZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSd/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhA1f0e8rDJGOAUW8BYV40AWzDiNA1HiWuafluLahl26F8pHbjDaG49 JhhMfb+s0LQwoUZxDjxssYnA0n86MKejNAi/OBttJDk5rWGOG+8Fj9fBnkXzpBsX ht9i1S9E5TVh7UxZAxfxidHhXSG4U/DpAKvMo/JKBvsTX1rok1WgdARXGLTzWRnL HCjDq14mcUJ9EOHnceiYHhNS6AnWIKx71lAhLfcmB15yhvYHw98VcRdQl45ZlowL HellMZhPE3qCorpV7tWkykpZSKApu1zoEX3T7ntlm+UgDnrPPUnH28r/BdjXUnoz qvYtAklXPFeG1RJLozNbdf+kVFKHNHc= -----END CERTIFICATE-----Generated at Sun Apr 27 10:26:44 2025 by rpki-client