$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0852423f-2f47-35ba-9939-0c0bea20f4c7.roa File: 0852423f-2f47-35ba-9939-0c0bea20f4c7.roa (raw, json) Hash identifier: /B0ODLD6D3YxvJthyk+G1b4xnbxjjldVAeCg8GrZfqg= Subject key identifier: FC:BD:5E:B8:AB:BD:4D:24:03:93:56:58:09:29:01:BC:22:20:CA:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0406A0F01833B2960B580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0852423f-2f47-35ba-9939-0c0bea20f4c7.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33660 IP address blocks: 73.228.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:40:6a:0f:01:83:3b:29:60:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=3e831af8-aaf0-4772-b46a-54f9450614c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:9b:03:cf:98:ce:70:77:80:dd:32:3d:f9: 06:59:25:d8:95:26:3f:74:5b:bc:64:78:67:13:56: 24:d4:31:9a:9b:f8:35:ae:59:a9:93:df:0f:95:98: 31:1d:94:9a:c8:8a:ae:08:cf:43:6f:ef:d0:27:8d: a1:d5:6b:61:53:6f:33:9e:52:c2:5d:9f:10:e1:72: e5:eb:ef:b7:6c:f4:1c:3b:31:75:c3:63:f3:43:57: 29:17:b4:6a:be:88:b3:92:aa:77:5e:58:e0:3b:42: 98:54:c4:eb:0f:8d:b9:61:f2:15:8a:23:99:13:7d: 63:24:c3:4c:5f:3a:ec:84:98:79:97:dc:93:8f:bf: 8e:7b:db:ea:06:6d:8a:10:ff:ad:87:ff:fb:2d:db: cc:2f:1a:24:13:4d:a1:06:8e:ee:28:8e:4f:05:ae: 94:14:b6:47:dd:cb:b9:55:27:77:58:23:cc:72:b9: 2f:2a:e6:cf:c9:15:17:1c:a5:c3:00:fa:e8:de:15: b0:76:12:42:35:07:f5:f2:3c:5d:08:ca:e7:48:cc: 9f:9e:44:14:2a:c5:db:1c:91:c3:2b:71:87:bd:1c: 0a:58:fe:e9:fa:20:69:fe:b4:f9:87:d7:65:bc:77: cc:3e:56:19:cb:16:50:3a:cd:48:9c:36:6e:ae:38: df:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BD:5E:B8:AB:BD:4D:24:03:93:56:58:09:29:01:BC:22:20:CA:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0852423f-2f47-35ba-9939-0c0bea20f4c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.228.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d5:fb:5a:8c:21:ed:b3:d1:6a:47:d4:12:84:ef:08:61:91: db:30:93:5e:22:05:b0:2c:ae:ed:90:bc:cb:84:33:02:01:b1: c1:1e:a5:1d:e7:ca:ba:5b:51:f5:78:00:91:25:95:e9:58:9d: e8:bb:b5:57:56:60:4d:f9:88:05:6f:bd:49:98:66:0d:30:b1: 08:de:d0:09:27:45:b2:25:d9:e9:29:61:03:e3:ec:aa:63:0a: 8d:a3:98:d5:b4:5a:d1:47:ae:5d:d9:04:fb:2c:55:9b:20:92: 14:32:c6:c0:26:3f:59:3a:7b:3b:70:97:69:10:65:60:75:fa: 69:9c:fa:cc:ba:cb:51:8d:d0:fa:ca:eb:30:df:a6:11:07:e9: 28:c8:e0:83:b3:29:b3:0b:be:2c:43:09:87:4c:75:01:64:0b: df:52:1e:9a:1a:43:66:bb:85:76:55:d6:9f:55:94:a0:7c:27: 6f:b1:04:f5:49:f5:cb:af:c6:48:a2:70:4f:54:9f:e8:be:76: 25:8b:a3:b5:69:d8:30:d4:75:b2:da:c3:29:62:9b:08:04:81: ea:21:37:45:d9:3a:c2:e1:d0:8a:13:a5:c9:ce:b4:28:4b:ac: cb:1a:60:cc:7a:f5:6d:6a:1f:e8:55:61:a4:4a:40:3f:7f:be: 9e:62:66:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssEBqDwGDOylgtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk M2U4MzFhZjgtYWFmMC00NzcyLWI0NmEtNTRmOTQ1MDYxNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDKbA8+YznB3gN0yPfkGWSXYlSY/dFu8ZHhn E1Yk1DGam/g1rlmpk98PlZgxHZSayIquCM9Db+/QJ42h1WthU28znlLCXZ8Q4XLl 6++3bPQcOzF1w2PzQ1cpF7Rqvoizkqp3XljgO0KYVMTrD425YfIViiOZE31jJMNM XzrshJh5l9yTj7+Oe9vqBm2KEP+th//7LdvMLxokE02hBo7uKI5PBa6UFLZH3cu5 VSd3WCPMcrkvKubPyRUXHKXDAPro3hWwdhJCNQf18jxdCMrnSMyfnkQUKsXbHJHD K3GHvRwKWP7p+iBp/rT5h9dlvHfMPlYZyxZQOs1InDZurjjf6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPy9XrirvU0kA5NWWAkpAbwiIMopMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDg1MjQyM2YtMmY0Ny0z NWJhLTk5MzktMGMwYmVhMjBmNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeR2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArV+1qMIe2z0WpH1BKE7whhkdswk14iBbAsru2QvMuEMwIBscEepR3n yrpbUfV4AJEllelYnei7tVdWYE35iAVvvUmYZg0wsQje0AknRbIl2ekpYQPj7Kpj Co2jmNW0WtFHrl3ZBPssVZsgkhQyxsAmP1k6eztwl2kQZWB1+mmc+sy6y1GN0PrK 6zDfphEH6SjI4IOzKbMLvixDCYdMdQFkC99SHpoaQ2a7hXZV1p9VlKB8J2+xBPVJ 9cuvxkiicE9Un+i+diWLo7Vp2DDUdbLawylimwgEgeohN0XZOsLh0IoTpcnOtChL rMsaYMx69W1qH+hVYaRKQD9/vp5iZsk= -----END CERTIFICATE-----Generated at Mon Apr 7 06:07:41 2025 by rpki-client