$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8ab0960-32d8-33f1-8aea-8d7f1d94d2be.roa File: d8ab0960-32d8-33f1-8aea-8d7f1d94d2be.roa (raw, json) Hash identifier: tVQRxzMZW+zjuZNA3wBeWFD3LZKjd+O9YtbWCBoCbsQ= Subject key identifier: BE:D4:2B:59:7D:34:9E:41:DE:91:8D:02:AA:C5:35:C0:E9:D3:A9:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF6FFCA7EF6FB8F4708800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8ab0960-32d8-33f1-8aea-8d7f1d94d2be.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 73.209.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:6f:fc:a7:ef:6f:b8:f4:70:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=495bc9e2-5dd2-4730-95ba-9a5446412169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0b:09:e5:7f:95:93:50:65:df:bb:d3:91:94: 39:ef:1d:3d:d8:38:3b:bc:97:a4:4a:c6:3d:52:89: d9:ce:a6:46:bb:7e:72:7d:23:41:f4:f1:fe:bf:e3: 3c:87:bf:4b:75:38:67:b3:7a:21:d4:4e:7d:b4:62: 9a:52:a0:64:58:b0:52:95:9c:cf:be:a9:50:7e:de: 09:5e:b6:51:8c:54:6d:26:1e:18:04:a2:dd:80:06: 26:d4:08:a4:b5:9f:95:5c:3a:33:4f:30:41:be:82: b4:c9:9a:7e:52:98:67:71:98:44:de:62:11:3a:1e: 01:62:d1:ac:65:51:a5:92:c1:96:e8:19:aa:33:82: 66:1a:86:a9:dc:1e:26:8f:ab:a2:a7:ba:a8:3a:9f: 34:f4:40:33:0b:26:b9:13:1b:8a:65:3f:c5:bf:94: 8d:b7:81:82:4d:d0:77:a7:10:ec:88:39:59:2a:a3: 00:fb:b4:65:19:02:ab:b0:6a:79:89:fb:f5:8d:7f: 7a:60:d4:89:3a:8e:e8:6c:48:2e:7d:76:15:16:66: 5d:b4:a9:69:45:c0:ef:86:3a:dc:1b:8f:c5:68:7c: 68:b3:78:03:5d:b7:5b:6d:af:43:95:76:b0:0a:13: 9f:95:a3:72:be:08:96:6d:b3:e6:f6:2f:df:f7:5e: 75:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D4:2B:59:7D:34:9E:41:DE:91:8D:02:AA:C5:35:C0:E9:D3:A9:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8ab0960-32d8-33f1-8aea-8d7f1d94d2be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.209.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:c6:fc:16:da:04:37:6e:34:ed:61:d6:ba:e1:a6:69:21:c2: 51:4f:76:99:c6:bd:4f:11:b0:b2:f5:66:63:59:76:fc:b5:49: 61:14:34:2f:2b:83:37:3c:ec:91:6c:58:42:74:27:42:5e:14: 8e:99:3e:4e:cb:68:ae:02:48:08:cb:0a:5a:0c:0b:40:52:36: d5:82:0a:05:da:40:a6:23:08:65:62:f2:bc:bf:79:4c:20:9d: 3e:a5:28:da:8b:24:a6:9e:b6:e3:ed:0d:20:d8:5a:cb:75:e8: 6c:52:1e:1b:73:e6:ab:65:1b:25:1c:60:d7:c2:92:2d:df:67: 60:95:28:d1:22:8c:ae:ed:38:fc:8a:71:8b:f1:e5:0e:1e:fc: d8:3d:6d:f3:30:27:83:7d:98:c7:e6:60:d4:1e:84:29:6f:9a: da:83:d5:de:45:d3:c3:67:90:6a:a3:46:86:c3:6f:1e:61:ba: 57:25:64:86:9f:07:1a:4e:28:cf:0c:0e:7d:6d:c4:73:90:f9: 5f:98:43:70:08:18:31:03:47:1b:e4:c1:2c:6f:fa:0f:1a:61: eb:57:dd:8b:41:4c:e3:b8:93:ce:bb:da:e9:89:2c:cb:43:f3: 3f:06:76:be:4d:95:9f:e7:c1:26:1a:e8:16:d0:b1:b7:83:7f: a2:24:1c:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr2/8p+9vuPRwiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NDk1YmM5ZTItNWRkMi00NzMwLTk1YmEtOWE1NDQ2NDEyMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQsJ5X+Vk1Bl37vTkZQ57x092Dg7vJekSsY9 UonZzqZGu35yfSNB9PH+v+M8h79LdThns3oh1E59tGKaUqBkWLBSlZzPvqlQft4J XrZRjFRtJh4YBKLdgAYm1AiktZ+VXDozTzBBvoK0yZp+UphncZhE3mIROh4BYtGs ZVGlksGW6BmqM4JmGoap3B4mj6uip7qoOp809EAzCya5ExuKZT/Fv5SNt4GCTdB3 pxDsiDlZKqMA+7RlGQKrsGp5ifv1jX96YNSJOo7obEgufXYVFmZdtKlpRcDvhjrc G4/FaHxos3gDXbdbba9DlXawChOflaNyvgiWbbPm9i/f91519QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7UK1l9NJ5B3pGNAqrFNcDp06lBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDhhYjA5NjAtMzJkOC0z M2YxLThhZWEtOGQ3ZjFkOTRkMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdHKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHG/BbaBDduNO1h1rrhpmkhwlFPdpnGvU8RsLL1ZmNZdvy1SWEUNC8r gzc87JFsWEJ0J0JeFI6ZPk7LaK4CSAjLCloMC0BSNtWCCgXaQKYjCGVi8ry/eUwg nT6lKNqLJKaetuPtDSDYWst16GxSHhtz5qtlGyUcYNfCki3fZ2CVKNEijK7tOPyK cYvx5Q4e/Ng9bfMwJ4N9mMfmYNQehClvmtqD1d5F08NnkGqjRobDbx5hulclZIaf BxpOKM8MDn1txHOQ+V+YQ3AIGDEDRxvkwSxv+g8aYetX3YtBTOO4k8672umJLMtD 8z8Gdr5NlZ/nwSYa6BbQsbeDf6IkHHg= -----END CERTIFICATE-----Generated at Mon Apr 28 02:42:22 2025 by rpki-client