$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08d22e51-a079-3775-951a-a2c1daad3962.roa File: 08d22e51-a079-3775-951a-a2c1daad3962.roa (raw, json) Hash identifier: nuyq/4KcGSi4eL8FvLtdEETiqVyAHi1wPtUxxUFwFDM= Subject key identifier: 1F:1E:A7:A3:C6:7B:5B:2E:CD:98:D0:A1:73:32:8E:4F:78:34:CA:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7E3DADE06AEEDA74E8D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08d22e51-a079-3775-951a-a2c1daad3962.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 73.166.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:e3:da:de:06:ae:ed:a7:4e:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=9b9b0121-be08-49af-9b83-864477c31c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:4e:c4:9c:43:83:9f:d8:c3:f9:22:15:bf: 2b:10:f3:73:f0:a1:43:91:5a:04:f6:fa:42:d9:21: 28:32:ba:3e:7c:b1:93:1e:af:fc:2d:4d:91:57:18: 33:9f:88:3a:3a:76:d1:a2:38:4f:9c:56:32:55:d0: cd:c4:0a:24:8a:92:16:3f:be:c2:22:78:85:7c:8b: d2:4f:ac:77:17:79:82:b9:59:ad:d8:20:8c:4c:2c: 74:8b:1a:18:23:a4:19:62:b4:6e:12:1c:04:92:b5: 20:57:8a:49:a0:22:04:8e:97:56:3c:51:bb:3f:d1: 73:54:18:3e:8e:80:83:58:f7:6b:04:f8:53:44:64: 12:60:ab:75:bc:51:a5:ab:39:92:fb:ac:42:36:16: c0:b6:5f:ce:ea:17:54:be:e8:0c:de:e0:62:76:2c: e7:90:7b:c6:53:52:f7:9f:66:e2:04:41:84:7b:71: b7:de:f6:a2:6d:33:4e:36:62:78:bf:bb:2b:c1:e8: 28:72:7f:21:af:fc:42:b5:d4:37:6e:12:a5:9d:f8: cb:57:f8:51:87:46:25:6e:d2:ab:16:6b:7a:4f:aa: 12:2c:1b:10:d8:84:aa:ae:8b:6f:b0:ba:75:de:8f: cc:53:79:b1:a1:e9:7d:63:9b:c2:29:e3:72:dc:c7: cf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1E:A7:A3:C6:7B:5B:2E:CD:98:D0:A1:73:32:8E:4F:78:34:CA:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08d22e51-a079-3775-951a-a2c1daad3962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.166.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:38:8c:fe:93:3b:c4:36:d4:1d:6c:29:68:c4:bb:3e:a3:24: b6:39:d2:b9:0d:1e:57:bc:41:de:7a:ff:0d:de:36:d5:16:ed: ca:4e:68:e4:34:9b:35:b8:68:41:f2:42:37:d2:8d:e7:6c:66: e0:bf:f6:dc:dc:42:d6:7d:de:22:4e:83:b1:d5:a4:9b:6d:52: 09:4d:e7:70:a9:12:28:5d:f5:2d:dd:42:4d:ea:1a:db:86:a4: 11:f5:1e:b9:2d:24:94:db:f8:f3:51:89:07:63:6c:11:46:98: d7:84:25:7f:01:7e:77:97:48:b3:00:3b:61:45:4d:db:5e:d5: 99:ae:93:c9:b8:db:be:ef:f6:d3:c3:69:ba:e9:52:ff:a1:69: d3:b0:ea:9b:38:2c:e1:b3:14:43:0d:2b:01:4c:0b:d8:36:de: 53:96:ab:ec:ed:95:d5:17:53:f3:f4:bd:2b:ad:00:ba:3c:3b: b3:9d:4a:da:bb:85:18:95:e2:ef:9c:6d:54:b6:4f:b9:45:49: f2:76:26:5f:4d:70:51:73:5c:20:06:76:59:ef:0d:21:54:47: 45:89:f0:bd:47:62:2a:28:00:3d:e3:e6:10:4e:2d:98:c0:e7: 27:c7:f1:7a:e6:15:bf:a8:72:fb:c0:41:a0:41:fc:5b:ea:b3: cf:21:73:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09+Pa3gau7adOjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OWI5YjAxMjEtYmUwOC00OWFmLTliODMtODY0NDc3YzMxYzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaFOxJxDg5/Yw/kiFb8rEPNz8KFDkVoE9vpC 2SEoMro+fLGTHq/8LU2RVxgzn4g6OnbRojhPnFYyVdDNxAokipIWP77CIniFfIvS T6x3F3mCuVmt2CCMTCx0ixoYI6QZYrRuEhwEkrUgV4pJoCIEjpdWPFG7P9FzVBg+ joCDWPdrBPhTRGQSYKt1vFGlqzmS+6xCNhbAtl/O6hdUvugM3uBidiznkHvGU1L3 n2biBEGEe3G33vaibTNONmJ4v7srwegocn8hr/xCtdQ3bhKlnfjLV/hRh0YlbtKr Fmt6T6oSLBsQ2ISqrotvsLp13o/MU3mxoel9Y5vCKeNy3MfP4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8ep6PGe1suzZjQoXMyjk94NMq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDhkMjJlNTEtYTA3OS0z Nzc1LTk1MWEtYTJjMWRhYWQzOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSaaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg4jP6TO8Q21B1sKWjEuz6jJLY50rkNHle8Qd56/w3eNtUW7cpOaOQ0 mzW4aEHyQjfSjedsZuC/9tzcQtZ93iJOg7HVpJttUglN53CpEihd9S3dQk3qGtuG pBH1HrktJJTb+PNRiQdjbBFGmNeEJX8BfneXSLMAO2FFTdte1Zmuk8m4277v9tPD abrpUv+hadOw6ps4LOGzFEMNKwFMC9g23lOWq+ztldUXU/P0vSutALo8O7OdStq7 hRiV4u+cbVS2T7lFSfJ2Jl9NcFFzXCAGdlnvDSFUR0WJ8L1HYiooAD3j5hBOLZjA 5yfH8XrmFb+ocvvAQaBB/Fvqs88hc9o= -----END CERTIFICATE-----Generated at Mon Apr 7 06:15:03 2025 by rpki-client