$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eac4c1f-cd92-37fd-b759-b7c618762695.roa File: 0eac4c1f-cd92-37fd-b759-b7c618762695.roa (raw, json) Hash identifier: F9gnXgjwB2RtJD/KYrst/5EMIps4TvFhlsOdIe3n7oI= Subject key identifier: 33:65:80:88:06:29:96:9A:93:82:5B:9E:5C:AF:C7:BC:48:04:2F:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B8F6FF2222C629383E1C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eac4c1f-cd92-37fd-b759-b7c618762695.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 73.108.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:8f:6f:f2:22:2c:62:93:83:e1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=b49c1937-f23d-44a4-80b6-b2929e9324cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:69:f8:34:5e:d2:c4:54:17:c8:18:a0:3e:4a: c7:90:77:7a:72:45:5d:fe:79:cb:70:00:d1:8f:98: a4:eb:33:ba:cf:b5:5c:8b:6b:91:3c:b4:a4:81:c6: bd:32:a2:f3:6c:f3:46:32:40:21:8d:e1:2f:a0:27: 70:af:c8:cb:7f:03:0e:f0:d3:6c:c2:07:20:f7:16: fa:52:be:c5:11:e0:56:3d:1a:0e:9b:34:cd:f0:45: 4e:01:69:b8:33:0c:1d:6f:ca:fb:af:af:26:5a:19: 0f:8e:81:36:9b:ad:26:fc:09:89:8b:dc:44:37:61: 73:26:33:72:67:5d:6b:1f:d7:77:79:b4:e9:33:69: a6:59:bf:49:dd:de:2a:53:80:0f:df:30:a5:1d:ca: ce:33:18:ca:e2:5e:ce:50:a9:12:e6:57:be:fd:fd: 47:c0:1f:a1:fd:f7:db:93:15:c6:67:7d:e7:0a:46: 54:41:7d:93:93:1a:26:d1:ef:c0:2a:cc:16:e4:8a: 29:5f:f1:ce:37:47:39:4c:10:43:1d:59:20:70:82: bd:f4:3f:6d:19:38:ca:c4:f3:93:09:2f:a0:98:f9: 5f:b4:13:51:36:8d:1d:33:b6:1d:e8:45:26:0a:9a: 15:52:1a:ac:e6:d7:ba:c3:09:7c:f8:11:1f:a5:de: d3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:65:80:88:06:29:96:9A:93:82:5B:9E:5C:AF:C7:BC:48:04:2F:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0eac4c1f-cd92-37fd-b759-b7c618762695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.108.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:6e:68:80:ba:cc:45:8b:5b:b2:0f:bf:4f:a0:ed:39:2c:bb: ea:ca:f3:65:22:2d:93:0e:2e:2d:44:8e:24:ed:8a:99:fb:9f: 7b:9a:9a:93:b8:85:9a:d1:3a:99:45:94:23:77:27:03:d8:23: e1:13:56:29:75:18:2a:80:32:8b:6d:f1:28:e3:06:64:e3:2d: b5:d6:a2:46:de:13:f5:49:fa:e4:d8:59:b3:c7:b6:3e:87:75: 21:99:bf:89:3a:bd:99:27:18:9e:e5:02:6a:23:46:95:fb:a7: d1:4d:be:b9:11:5d:63:48:23:50:18:26:99:c9:ee:6e:48:02: 6c:21:08:39:31:4e:83:92:c1:9c:ba:a4:80:d8:3e:29:6f:ed: b8:ef:26:e3:e1:e6:6f:19:b5:02:1e:29:27:1b:74:5d:66:a0: 74:b6:88:76:94:9e:17:8a:af:5a:3c:99:bb:6e:99:13:fc:a1: e4:81:20:38:a0:85:13:5d:d3:e5:0b:49:42:23:66:32:e5:75: 4c:e3:3c:b1:ca:47:6d:cf:7b:d5:71:60:5c:64:bc:ff:1f:74: 56:8d:e0:73:fd:94:99:34:52:c3:98:25:87:be:5e:74:11:dd: 2b:b6:30:40:80:7e:ac:87:07:e0:69:8f:d5:0a:f1:cd:cf:c4: ab:f5:f3:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea49v8iIsYpOD4cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YjQ5YzE5MzctZjIzZC00NGE0LTgwYjYtYjI5MjllOTMyNGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGn4NF7SxFQXyBigPkrHkHd6ckVd/nnLcADR j5ik6zO6z7Vci2uRPLSkgca9MqLzbPNGMkAhjeEvoCdwr8jLfwMO8NNswgcg9xb6 Ur7FEeBWPRoOmzTN8EVOAWm4Mwwdb8r7r68mWhkPjoE2m60m/AmJi9xEN2FzJjNy Z11rH9d3ebTpM2mmWb9J3d4qU4AP3zClHcrOMxjK4l7OUKkS5le+/f1HwB+h/ffb kxXGZ33nCkZUQX2Tkxom0e/AKswW5IopX/HON0c5TBBDHVkgcIK99D9tGTjKxPOT CS+gmPlftBNRNo0dM7Yd6EUmCpoVUhqs5te6wwl8+BEfpd7ThwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNlgIgGKZaak4Jbnlyvx7xIBC/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGVhYzRjMWYtY2Q5Mi0z N2ZkLWI3NTktYjdjNjE4NzYyNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSWz8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNuaIC6zEWLW7IPv0+g7Tksu+rK82UiLZMOLi1EjiTtipn7n3uampO4 hZrROplFlCN3JwPYI+ETVil1GCqAMott8SjjBmTjLbXWokbeE/VJ+uTYWbPHtj6H dSGZv4k6vZknGJ7lAmojRpX7p9FNvrkRXWNII1AYJpnJ7m5IAmwhCDkxToOSwZy6 pIDYPilv7bjvJuPh5m8ZtQIeKScbdF1moHS2iHaUnheKr1o8mbtumRP8oeSBIDig hRNd0+ULSUIjZjLldUzjPLHKR23Pe9VxYFxkvP8fdFaN4HP9lJk0UsOYJYe+XnQR 3Su2MECAfqyHB+Bpj9UK8c3PxKv18/g= -----END CERTIFICATE-----Generated at Mon Apr 7 15:56:28 2025 by rpki-client