$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/068c63de-41e5-379d-b93f-e8225856a1b1.roa File: 068c63de-41e5-379d-b93f-e8225856a1b1.roa (raw, json) Hash identifier: TyYXnlcl+0z5K5pp4i9dbBzNaHWP1KCsN7etXK/x6hA= Subject key identifier: F5:9C:9D:BF:14:C1:1B:67:6B:93:D7:7C:ED:D1:17:C3:F9:C0:51:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0AA7899A9F806F2741160 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/068c63de-41e5-379d-b93f-e8225856a1b1.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 73.233.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:aa:78:99:a9:f8:06:f2:74:11:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=b9ea7da9-c757-49cd-910e-7333142f5478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3e:3a:bc:78:91:5a:cb:8b:6e:a0:58:8c:d4: ec:f9:1f:72:c1:dc:58:e4:bc:97:a1:db:9f:11:6e: 44:2b:20:0e:36:b6:5c:67:24:b5:7d:37:8a:39:4d: 20:c9:71:c4:56:64:e0:66:19:0e:ac:26:ea:24:b6: 10:f1:ee:4b:9a:a6:05:48:04:91:b8:b4:af:a4:fc: ab:1d:fa:81:28:1d:b5:09:88:18:b3:4f:60:f1:ef: 5f:76:6c:33:d6:02:e8:62:aa:5d:19:30:b2:6a:82: f1:90:4a:d6:5a:82:71:4b:0f:24:f0:1d:5d:bd:67: d1:9a:f0:26:df:dd:90:83:59:fd:67:8a:e9:61:ca: 46:fd:80:d3:80:da:2d:05:fc:0a:de:95:78:54:75: 6c:7d:45:5d:88:1a:d2:00:49:2f:12:2a:2c:e9:eb: 32:9f:fa:53:8e:f1:17:9e:25:e4:1d:b0:16:3c:a2: 35:a1:92:52:92:f9:da:11:4f:72:51:43:74:0f:6e: 4a:c9:02:e9:ce:a9:78:a4:b8:f2:ee:d7:ef:0a:b5: 93:ab:75:70:16:3a:a2:a8:39:be:db:e6:77:ea:90: e5:fd:a5:46:7b:c8:bb:af:b7:c6:3e:2c:68:ec:71: 98:24:68:9a:36:d6:ff:b6:41:c1:85:a7:1f:17:89: 18:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9C:9D:BF:14:C1:1B:67:6B:93:D7:7C:ED:D1:17:C3:F9:C0:51:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/068c63de-41e5-379d-b93f-e8225856a1b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.233.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f2:34:b3:a6:93:46:7a:14:47:e4:df:0d:bd:45:99:db:b0: d3:16:bb:52:97:0f:70:79:37:56:c7:f0:24:8f:b9:6d:e6:b2: 64:ae:bb:a0:41:97:23:97:05:34:5e:c5:a7:47:98:dc:fa:de: 2e:d9:1a:48:f9:e9:0c:f1:21:f4:10:4c:25:40:d8:e0:d0:98: 9a:14:0f:2a:4e:29:8d:47:f9:ce:9e:df:0b:ef:e4:6c:22:a5: 18:63:1b:30:54:a0:25:9a:04:f3:06:92:f6:da:39:15:76:0e: c6:03:f8:7a:ac:e6:0d:45:51:e4:a1:3a:10:c7:17:9e:39:22: 3d:78:3b:74:f3:b8:20:72:23:51:c2:d9:da:35:34:41:30:5c: 49:b5:e6:4b:3c:26:2a:91:cd:af:d6:e5:86:f7:a7:a2:9c:71: de:2f:d0:5b:a5:9a:ef:f1:3a:ec:e0:90:67:6f:72:5a:05:ed: 48:33:52:ef:66:54:59:53:8a:ca:7a:f4:5b:e3:0b:6c:a4:2f: 85:04:16:3e:52:4e:63:e4:80:19:35:f1:46:d7:98:50:b6:1b: df:2b:42:7d:ac:c1:ab:65:85:51:58:67:9f:3d:e7:6e:95:f5: 39:4f:19:9f:6f:50:75:aa:64:a7:1a:3e:54:75:ea:4f:e3:59: 9b:bf:b3:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssKp4man4BvJ0EWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjllYTdkYTktYzc1Ny00OWNkLTkxMGUtNzMzMzE0MmY1NDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT46vHiRWsuLbqBYjNTs+R9ywdxY5LyXoduf EW5EKyAONrZcZyS1fTeKOU0gyXHEVmTgZhkOrCbqJLYQ8e5LmqYFSASRuLSvpPyr HfqBKB21CYgYs09g8e9fdmwz1gLoYqpdGTCyaoLxkErWWoJxSw8k8B1dvWfRmvAm 392Qg1n9Z4rpYcpG/YDTgNotBfwK3pV4VHVsfUVdiBrSAEkvEios6esyn/pTjvEX niXkHbAWPKI1oZJSkvnaEU9yUUN0D25KyQLpzql4pLjy7tfvCrWTq3VwFjqiqDm+ 2+Z36pDl/aVGe8i7r7fGPixo7HGYJGiaNtb/tkHBhacfF4kYzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWcnb8UwRtna5PXfO3RF8P5wFEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDY4YzYzZGUtNDFlNS0z NzlkLWI5M2YtZTgyMjU4NTZhMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSemAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXyNLOmk0Z6FEfk3w29RZnbsNMWu1KXD3B5N1bH8CSPuW3msmSuu6BB lyOXBTRexadHmNz63i7ZGkj56QzxIfQQTCVA2ODQmJoUDypOKY1H+c6e3wvv5Gwi pRhjGzBUoCWaBPMGkvbaORV2DsYD+Hqs5g1FUeShOhDHF545Ij14O3TzuCByI1HC 2do1NEEwXEm15ks8JiqRza/W5Yb3p6Kccd4v0Fulmu/xOuzgkGdvcloF7UgzUu9m VFlTisp69FvjC2ykL4UEFj5STmPkgBk18UbXmFC2G98rQn2swatlhVFYZ589526V 9TlPGZ9vUHWqZKcaPlR16k/jWZu/s7s= -----END CERTIFICATE-----Generated at Sun Apr 6 22:57:59 2025 by rpki-client