$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4e80037-14e1-3bc2-9106-b4a670682a0e.roa File: f4e80037-14e1-3bc2-9106-b4a670682a0e.roa (raw, json) Hash identifier: zpaenxO/rLu1nptK9nMIxInDoNThtNqep6vFUWtjuIM= Subject key identifier: 2C:47:B1:65:6F:90:6D:FC:08:1D:F8:43:11:1C:65:E4:98:C7:71:70 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F83FE90F0893BF528D20C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4e80037-14e1-3bc2-9106-b4a670682a0e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 73.67.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:3f:e9:0f:08:93:bf:52:8d:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=079c4684-ead7-415c-955b-f0d040c38036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:36:96:da:a9:d3:11:84:20:d5:64:f6:e1:45: 70:c6:79:40:d3:28:44:46:98:0c:2e:87:e3:43:56: 1e:da:85:c3:4d:81:01:02:d8:86:76:9f:5a:bc:b5: 33:5c:0f:5e:fc:e3:f0:cf:f2:34:d8:43:35:b6:56: e3:61:55:1d:bb:25:b2:88:72:e1:97:42:63:2b:dd: fd:c0:08:04:b6:3b:d0:f2:58:55:42:d2:09:d6:16: b4:2b:64:93:8f:51:9c:5d:9c:6d:eb:81:f9:58:e2: 37:da:15:1e:84:fd:87:98:5d:ee:a6:29:a3:8a:65: 83:68:d2:63:f9:f2:2e:4e:51:2e:ac:37:bb:59:f8: fc:05:bc:03:5d:53:00:cc:b7:05:ad:8d:29:d4:cc: 36:8f:4f:84:ab:a8:7f:b6:a1:ec:1d:e2:b1:2c:b6: f0:01:44:60:43:6e:8e:9b:7d:d9:50:a5:d7:7f:48: 8e:89:34:14:4d:62:83:95:14:9d:41:38:38:3a:8e: 53:fe:39:fc:58:65:0a:3c:29:e9:a8:05:9e:2b:5c: f3:d8:62:07:04:e8:81:69:5e:75:09:e2:c1:3a:ce: 60:95:f1:4f:38:c7:2b:0f:d5:13:c4:87:27:e1:f7: 10:ab:94:05:67:0e:4a:54:79:ab:26:3e:32:e5:0c: a3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:47:B1:65:6F:90:6D:FC:08:1D:F8:43:11:1C:65:E4:98:C7:71:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4e80037-14e1-3bc2-9106-b4a670682a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.67.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c2:8f:b7:56:33:d6:d7:99:4d:29:38:5f:f8:c6:70:da:26: 36:1c:d9:25:be:e7:e5:c6:5b:30:55:03:14:0b:fe:6e:b1:49: 00:f0:24:b2:72:20:60:fd:5a:9c:77:0c:a9:d9:73:90:bc:4a: 4c:84:f3:e7:0c:63:a1:b2:9e:10:40:00:54:2a:1b:ee:6f:de: a0:9a:62:b8:00:34:14:d4:9d:e4:91:e5:0e:a0:20:2d:e4:1c: d1:71:cf:1c:1b:d8:d2:58:11:d0:20:1d:1c:20:1c:cf:be:5b: 4f:cb:f1:c7:75:44:4e:ae:18:e5:77:44:3e:db:28:9d:67:22: 3d:19:d6:5c:08:62:73:2c:02:b5:fb:af:90:c8:43:10:9a:d0: 4c:3c:f8:5e:c3:fe:e0:0d:d0:cd:6e:e7:ef:39:21:09:32:93: 11:ef:ad:c5:5c:42:a8:4d:c9:b5:6f:be:d7:c7:2a:02:b1:3c: bb:fe:76:bc:74:e6:67:5c:ae:36:2d:d0:0f:e4:ee:c7:29:ca: 62:a0:05:82:e4:79:cb:48:87:15:d1:f5:d8:d8:f8:99:5a:f5: ce:17:0b:de:7b:10:d3:14:50:5e:3c:37:5c:f8:5e:a6:65:7d: bd:5a:1b:1a:fb:34:d3:5e:06:4e:6f:c6:68:25:e5:84:e7:0b: ec:16:c7:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+D/pDwiTv1KNIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MDc5YzQ2ODQtZWFkNy00MTVjLTk1NWItZjBkMDQwYzM4MDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzaW2qnTEYQg1WT24UVwxnlA0yhERpgMLofj Q1Ye2oXDTYEBAtiGdp9avLUzXA9e/OPwz/I02EM1tlbjYVUduyWyiHLhl0JjK939 wAgEtjvQ8lhVQtIJ1ha0K2STj1GcXZxt64H5WOI32hUehP2HmF3upimjimWDaNJj +fIuTlEurDe7Wfj8BbwDXVMAzLcFrY0p1Mw2j0+Eq6h/tqHsHeKxLLbwAURgQ26O m33ZUKXXf0iOiTQUTWKDlRSdQTg4Oo5T/jn8WGUKPCnpqAWeK1zz2GIHBOiBaV51 CeLBOs5glfFPOMcrD9UTxIcn4fcQq5QFZw5KVHmrJj4y5QyjGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxHsWVvkG38CB34QxEcZeSYx3FwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjRlODAwMzctMTRlMS0z YmMyLTkxMDYtYjRhNjcwNjgyYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfCj7dWM9bXmU0pOF/4xnDaJjYc2SW+5+XGWzBVAxQL/m6xSQDwJLJy IGD9Wpx3DKnZc5C8SkyE8+cMY6GynhBAAFQqG+5v3qCaYrgANBTUneSR5Q6gIC3k HNFxzxwb2NJYEdAgHRwgHM++W0/L8cd1RE6uGOV3RD7bKJ1nIj0Z1lwIYnMsArX7 r5DIQxCa0Ew8+F7D/uAN0M1u5+85IQkykxHvrcVcQqhNybVvvtfHKgKxPLv+drx0 5mdcrjYt0A/k7scpymKgBYLkectIhxXR9djY+Jla9c4XC957ENMUUF48N1z4XqZl fb1aGxr7NNNeBk5vxmgl5YTnC+wWx44= -----END CERTIFICATE-----Generated at Sun Apr 27 20:36:06 2025 by rpki-client