$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12cabcc5-bd5e-34a6-a1e8-ab910a2af1e0.roa File: 12cabcc5-bd5e-34a6-a1e8-ab910a2af1e0.roa (raw, json) Hash identifier: 7c3CZ62ZP/IO9y9KHVw15ZG4vwVbRHiX2/EvKAl/s9I= Subject key identifier: 16:2B:77:6A:C0:F8:32:1B:81:1E:96:62:BE:E6:B6:D6:D5:82:1F:FC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B93F0FFE818D900E82780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12cabcc5-bd5e-34a6-a1e8-ab910a2af1e0.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 73.190.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:93:f0:ff:e8:18:d9:00:e8:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=a961e31a-534f-4dce-b020-1b62bb520b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:35:fd:ff:0c:47:8b:c8:41:b4:b9:fe:ae:21: 3f:ad:53:d4:82:30:b9:ab:ba:50:65:a2:e3:44:96: 33:99:4f:48:94:2d:f8:17:cf:93:2f:e1:37:c1:5b: fa:f5:d1:78:65:48:92:1e:97:96:ac:fc:63:86:92: e3:b0:63:2e:70:13:cb:e7:ce:fe:f1:a7:f9:99:a7: 01:79:b2:84:8f:57:35:15:16:fb:4d:1b:ef:96:3c: c4:e4:0e:47:c6:53:8d:88:9f:14:d3:ac:5b:79:aa: c1:e4:b9:81:c7:51:f2:cc:df:99:1b:87:32:55:2b: 02:9d:62:1d:68:01:9b:8c:3d:23:a5:bb:2a:41:16: 84:40:b3:d3:0d:42:90:0a:0f:32:d1:0c:93:84:cf: 25:05:33:65:4b:16:55:dd:04:93:8f:c9:d5:90:ce: 3c:e8:77:6e:6a:67:39:30:45:99:21:e0:60:cf:70: 65:ce:0f:47:6b:26:da:09:cc:ba:72:96:62:68:f1: bf:81:37:c6:07:d6:dd:93:66:98:27:7c:5b:a9:3f: cc:2b:61:b7:32:50:52:65:2e:72:97:6b:48:d4:82: 36:2a:ce:62:b8:d3:bc:9c:8c:30:9e:2f:a1:54:1d: 1f:45:ca:2e:46:cc:d3:e6:8e:81:90:c1:b7:ef:8e: b4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2B:77:6A:C0:F8:32:1B:81:1E:96:62:BE:E6:B6:D6:D5:82:1F:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12cabcc5-bd5e-34a6-a1e8-ab910a2af1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.190.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a9:15:ad:98:7c:3d:2a:43:a4:e7:14:e7:58:42:c4:4e:fa: ec:35:17:1e:70:1f:2d:07:d5:06:10:1c:fb:88:42:31:b9:98: d6:03:93:2c:bf:ca:50:d2:10:74:dd:93:42:aa:07:2c:09:3b: 1a:86:b1:10:0e:7a:39:cd:57:52:c3:fe:7e:08:3c:26:46:75: d1:3f:74:6e:12:ed:c2:bf:0c:1c:69:eb:fe:b2:4b:f5:f7:d0: 1e:93:85:27:5a:e7:49:f6:4a:b1:a5:34:5f:1b:fd:f0:e5:fd: 68:ee:be:21:84:ec:a1:4d:be:9d:7d:19:50:23:50:2a:b7:1f: 23:23:13:71:39:a9:e8:4d:8f:0c:fe:82:dc:1e:23:87:1c:81: 25:fd:d4:d6:af:f8:50:4e:32:48:1f:03:1f:21:0c:f4:75:13: 98:18:09:a4:84:04:f2:7f:e8:4f:d5:7c:3d:ea:48:0e:27:19: 9a:11:cf:b7:25:86:79:84:35:87:76:b4:0c:80:96:82:58:1d: bc:31:67:e3:03:56:63:76:c3:b4:e0:44:5e:67:58:78:0a:db: f9:60:e2:da:18:12:1b:99:ef:81:43:ee:df:e1:56:a9:a9:9e: 1b:06:f5:1b:62:a2:9a:b0:95:90:15:93:3c:dd:d9:a7:11:42: 2e:b6:34:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea5Pw/+gY2QDoJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YTk2MWUzMWEtNTM0Zi00ZGNlLWIwMjAtMWI2MmJiNTIwYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzX9/wxHi8hBtLn+riE/rVPUgjC5q7pQZaLj RJYzmU9IlC34F8+TL+E3wVv69dF4ZUiSHpeWrPxjhpLjsGMucBPL587+8af5macB ebKEj1c1FRb7TRvvljzE5A5HxlONiJ8U06xbearB5LmBx1HyzN+ZG4cyVSsCnWId aAGbjD0jpbsqQRaEQLPTDUKQCg8y0QyThM8lBTNlSxZV3QSTj8nVkM486Hduamc5 MEWZIeBgz3Blzg9HaybaCcy6cpZiaPG/gTfGB9bdk2aYJ3xbqT/MK2G3MlBSZS5y l2tI1II2Ks5iuNO8nIwwni+hVB0fRcouRszT5o6BkMG37460hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYrd2rA+DIbgR6WYr7mttbVgh/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTJjYWJjYzUtYmQ1ZS0z NGE2LWExZTgtYWI5MTBhMmFmMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASb6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmpFa2YfD0qQ6TnFOdYQsRO+uw1Fx5wHy0H1QYQHPuIQjG5mNYDkyy/ ylDSEHTdk0KqBywJOxqGsRAOejnNV1LD/n4IPCZGddE/dG4S7cK/DBxp6/6yS/X3 0B6ThSda50n2SrGlNF8b/fDl/WjuviGE7KFNvp19GVAjUCq3HyMjE3E5qehNjwz+ gtweI4ccgSX91Nav+FBOMkgfAx8hDPR1E5gYCaSEBPJ/6E/VfD3qSA4nGZoRz7cl hnmENYd2tAyAloJYHbwxZ+MDVmN2w7TgRF5nWHgK2/lg4toYEhuZ74FD7t/hVqmp nhsG9RtiopqwlZAVkzzd2acRQi62NAA= -----END CERTIFICATE-----Generated at Mon Apr 7 05:51:11 2025 by rpki-client