$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/052a1ca5-d7b5-362d-94e8-325f09f25e09.roa File: 052a1ca5-d7b5-362d-94e8-325f09f25e09.roa (raw, json) Hash identifier: JZtqBhVwYripRcllIg83xw6VG+0dGnWvqlbfPiOaS0A= Subject key identifier: 6D:18:6B:EA:19:07:F0:76:33:51:BB:18:D5:35:88:03:88:05:AB:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6D47DB0D30D715A929C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/052a1ca5-d7b5-362d-94e8-325f09f25e09.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 73.67.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:d4:7d:b0:d3:0d:71:5a:92:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=e2912e6c-5df3-4dad-8610-5028bf300939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2f:51:e8:44:d4:70:bb:fd:b8:99:ee:08:0b: 1a:ad:19:77:f2:e7:1b:f0:b2:b6:82:d6:f6:21:75: 17:b7:b9:24:1b:78:32:96:7d:f4:41:90:ef:b7:ad: 9e:3d:1c:d2:9a:89:f4:d1:7e:88:4e:3f:27:aa:ad: c2:2d:70:ed:a2:d4:c6:97:82:3b:70:e9:36:05:85: bc:ca:2c:b9:18:ba:0d:3d:fe:f5:41:78:f7:94:15: 43:eb:2b:60:99:85:e9:93:66:de:06:45:74:50:65: 53:f0:78:a9:c3:c7:3b:c1:8c:96:17:b8:00:b7:02: 80:e9:5b:8e:7a:45:04:4f:f4:d7:bf:b2:13:04:21: 4c:68:50:2c:38:8f:59:9d:98:d1:6a:35:e0:e5:e6: 05:4c:9d:a7:a9:cc:0b:bb:64:29:fb:52:5e:7a:08: 1b:8f:cf:1e:8b:94:14:30:2c:45:de:fa:d2:41:f5: 07:de:ee:67:24:1d:a1:bc:c9:22:c3:02:3b:5b:f3: ac:ab:57:54:13:1f:26:db:91:5d:e6:90:1e:06:05: e2:41:f6:c9:fa:6a:32:47:44:4a:ab:f1:d0:8e:96: 11:69:91:ca:e0:75:3d:89:72:96:30:db:ec:01:a0: 18:55:08:3f:c1:76:2c:7d:89:6c:d6:e4:34:c9:a3: 13:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:18:6B:EA:19:07:F0:76:33:51:BB:18:D5:35:88:03:88:05:AB:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/052a1ca5-d7b5-362d-94e8-325f09f25e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.67.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:2a:75:51:bd:83:25:1c:55:da:3e:41:17:43:e3:c1:bd:63: 86:c7:2c:10:cf:e9:0b:47:cd:d9:88:96:28:23:af:ef:85:f0: 23:1e:71:04:4d:cc:a2:09:10:aa:4d:4f:2f:d5:a0:dd:ea:c1: 80:72:b7:e3:b6:fa:05:f0:53:a6:82:8e:55:0c:cf:e1:45:61: b2:65:c6:bb:5f:31:6d:22:08:ba:34:0a:6d:a0:86:23:5c:fb: 02:7b:5c:18:56:ee:a0:ec:67:93:2f:2c:e7:ad:c8:55:73:0e: 50:2b:86:f4:0e:85:9d:aa:29:3d:78:3e:ee:8d:53:aa:13:3a: 6e:fa:65:5a:bc:ed:27:df:5b:9e:42:ed:7d:28:75:cc:5f:ca: 6a:a1:2b:03:ce:8f:9d:5a:cb:47:22:6b:91:6d:79:c3:c2:2d: 5a:e5:8f:21:9b:bd:8d:c5:8e:61:33:21:e8:7e:36:d0:a9:2a: 57:d3:35:11:d5:b2:92:c6:d0:67:58:95:cb:e7:9d:a8:65:00: 70:e8:f5:3a:59:f1:28:10:ff:75:88:4a:73:74:d7:8b:cc:da: a2:25:34:c1:1e:18:d3:64:e4:9b:ad:0b:bb:df:b5:d2:93:0a: 74:30:9f:18:54:80:db:75:76:27:87:25:0d:a3:87:72:45:35: 28:72:e7:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09tR9sNMNcVqSnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZTI5MTJlNmMtNWRmMy00ZGFkLTg2MTAtNTAyOGJmMzAwOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi9R6ETUcLv9uJnuCAsarRl38ucb8LK2gtb2 IXUXt7kkG3gyln30QZDvt62ePRzSmon00X6ITj8nqq3CLXDtotTGl4I7cOk2BYW8 yiy5GLoNPf71QXj3lBVD6ytgmYXpk2beBkV0UGVT8Hipw8c7wYyWF7gAtwKA6VuO ekUET/TXv7ITBCFMaFAsOI9ZnZjRajXg5eYFTJ2nqcwLu2Qp+1Jeeggbj88ei5QU MCxF3vrSQfUH3u5nJB2hvMkiwwI7W/Osq1dUEx8m25Fd5pAeBgXiQfbJ+moyR0RK q/HQjpYRaZHK4HU9iXKWMNvsAaAYVQg/wXYsfYls1uQ0yaMT1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0Ya+oZB/B2M1G7GNU1iAOIBau1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDUyYTFjYTUtZDdiNS0z NjJkLTk0ZTgtMzI1ZjA5ZjI1ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASUOWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4qdVG9gyUcVdo+QRdD48G9Y4bHLBDP6QtHzdmIligjr++F8CMecQRN zKIJEKpNTy/VoN3qwYByt+O2+gXwU6aCjlUMz+FFYbJlxrtfMW0iCLo0Cm2ghiNc +wJ7XBhW7qDsZ5MvLOetyFVzDlArhvQOhZ2qKT14Pu6NU6oTOm76ZVq87SffW55C 7X0odcxfymqhKwPOj51ay0cia5FtecPCLVrljyGbvY3FjmEzIeh+NtCpKlfTNRHV spLG0GdYlcvnnahlAHDo9TpZ8SgQ/3WISnN014vM2qIlNMEeGNNk5JutC7vftdKT CnQwnxhUgNt1dieHJQ2jh3JFNShy55Q= -----END CERTIFICATE-----Generated at Mon Apr 7 05:46:53 2025 by rpki-client