$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/150b2c90-a140-3994-9245-19d5fdf92a0e.roa File: 150b2c90-a140-3994-9245-19d5fdf92a0e.roa (raw, json) Hash identifier: tzYHSCD0J+CVcw1FiQNn31dmeHMtX/IpV2arcvopnGo= Subject key identifier: 01:6D:72:6D:68:01:77:F8:E6:71:69:7D:93:7D:6E:03:AB:9A:61:9C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF6C3616003E87B4D96DC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/150b2c90-a140-3994-9245-19d5fdf92a0e.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 73.208.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:6c:36:16:00:3e:87:b4:d9:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=3d9a0eae-0423-4d62-b463-405b301ea769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:46:0f:dc:f5:85:bb:c0:35:7e:ab:3b:38:a0: f4:0f:9f:c8:cc:a2:26:82:32:ad:29:a7:6d:d4:2d: b4:41:5f:44:af:0f:c2:57:95:61:96:07:9b:8d:a1: d3:b7:4b:71:b5:6e:42:da:b1:80:4a:c9:de:50:d7: 4c:72:46:10:66:8b:68:16:9a:9a:5f:22:a1:34:1d: df:ca:2f:57:9c:7d:b0:43:c4:da:dc:96:de:23:22: fc:8a:e0:9e:ab:6b:75:91:14:74:9c:1d:74:66:1e: 0d:53:bf:d9:2f:d4:a2:b7:46:72:01:54:e9:fe:b9: 64:bc:f3:f3:23:9b:71:c2:3e:d1:78:6c:e2:e7:40: 52:30:ad:43:a9:ae:16:11:c3:00:07:12:42:98:0e: 0b:44:6d:e5:b0:e4:c1:0e:e0:1b:f1:7e:18:8c:d8: d1:af:66:8d:48:99:c6:2f:2a:a7:6e:28:75:30:f1: 2a:a6:1c:9b:67:19:0d:c3:7e:1c:c9:63:27:7d:c3: 0c:14:d3:63:c6:6d:02:6d:59:2c:92:7c:2b:2f:34: 0e:0f:9c:02:c2:d8:14:67:9c:77:02:e9:c2:21:c9: a4:23:c3:6c:65:de:46:ce:e5:62:9e:1f:e6:1e:9a: 27:6b:56:2b:a3:1e:92:83:4d:56:f3:7a:fa:0a:20: f4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6D:72:6D:68:01:77:F8:E6:71:69:7D:93:7D:6E:03:AB:9A:61:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/150b2c90-a140-3994-9245-19d5fdf92a0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.208.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:d7:10:4a:e0:09:07:a8:a4:05:7e:d5:96:82:1f:7c:62:cb: d8:42:a2:78:a7:95:ab:59:1d:0f:70:78:e0:d2:9d:9f:31:56: bd:a4:9f:1d:c6:7d:a0:ef:07:06:50:aa:fa:5a:6c:2f:ea:bf: 2d:2f:eb:dc:eb:42:ea:ce:fa:79:2a:87:08:67:6b:37:22:cc: be:43:2f:ec:ea:da:69:1e:91:69:bd:0e:cb:2e:8c:2c:45:8e: 71:a7:b1:74:ff:27:80:fb:8f:36:f6:a6:a5:df:1c:ec:8c:c6: 97:19:25:cb:e8:ac:38:f3:6f:3e:46:6d:a5:cd:c7:86:01:95: 4f:ed:94:0d:e3:8c:f4:c8:e1:49:60:11:f2:cf:2b:33:c7:29: 79:9f:23:78:54:a3:14:73:79:4c:9c:a0:63:41:e3:d7:68:4c: c2:52:d4:fa:3f:e6:0a:37:4e:6a:31:f6:42:4a:77:a4:e8:c0: 63:04:fb:b2:4f:1c:96:3b:3c:00:4d:e6:30:46:6b:ea:2e:f8: 0e:3f:c8:9c:b1:0c:55:09:1f:c4:a3:13:83:b6:34:04:1c:52: 16:ee:16:dd:d0:fa:22:90:27:93:f1:4b:98:54:7a:10:cf:c4: 29:1c:4a:9e:e3:31:4f:a1:8b:5a:d1:c3:9d:1b:08:cd:b2:a7: a7:28:13:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr2w2FgA+h7TZbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk M2Q5YTBlYWUtMDQyMy00ZDYyLWI0NjMtNDA1YjMwMWVhNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UYP3PWFu8A1fqs7OKD0D5/IzKImgjKtKadt 1C20QV9Erw/CV5VhlgebjaHTt0txtW5C2rGASsneUNdMckYQZotoFpqaXyKhNB3f yi9XnH2wQ8Ta3JbeIyL8iuCeq2t1kRR0nB10Zh4NU7/ZL9Sit0ZyAVTp/rlkvPPz I5txwj7ReGzi50BSMK1Dqa4WEcMABxJCmA4LRG3lsOTBDuAb8X4YjNjRr2aNSJnG Lyqnbih1MPEqphybZxkNw34cyWMnfcMMFNNjxm0CbVksknwrLzQOD5wCwtgUZ5x3 AunCIcmkI8NsZd5GzuVinh/mHpona1Yrox6Sg01W83r6CiD0KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFtcm1oAXf45nFpfZN9bgOrmmGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTUwYjJjOTAtYTE0MC0z OTk0LTkyNDUtMTlkNWZkZjkyYTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASdCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANfXEErgCQeopAV+1ZaCH3xiy9hConinlatZHQ9weODSnZ8xVr2knx3G faDvBwZQqvpabC/qvy0v69zrQurO+nkqhwhnazcizL5DL+zq2mkekWm9DssujCxF jnGnsXT/J4D7jzb2pqXfHOyMxpcZJcvorDjzbz5GbaXNx4YBlU/tlA3jjPTI4Ulg EfLPKzPHKXmfI3hUoxRzeUycoGNB49doTMJS1Po/5go3Tmox9kJKd6TowGME+7JP HJY7PABN5jBGa+ou+A4/yJyxDFUJH8SjE4O2NAQcUhbuFt3Q+iKQJ5PxS5hUehDP xCkcSp7jMU+hi1rRw50bCM2yp6coE94= -----END CERTIFICATE-----Generated at Mon Apr 7 09:38:53 2025 by rpki-client