$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bd8ce2f-1164-3b4f-a880-8d2367705557.roa File: 1bd8ce2f-1164-3b4f-a880-8d2367705557.roa (raw, json) Hash identifier: sJFwviHn4fB5ObTbtNHFo3KAjeiggX7qcWiebunOkcI= Subject key identifier: CE:E1:17:9D:5B:12:BE:7A:BD:FC:10:38:85:F5:9F:0F:F3:BD:D4:3C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8F7A6A1543C257C4A1B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bd8ce2f-1164-3b4f-a880-8d2367705557.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 73.161.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:f7:a6:a1:54:3c:25:7c:4a:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=2aa6a55f-efd1-4c85-a78e-5503d41ff051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:1d:ad:52:1f:2b:5d:7b:d5:c2:3f:64:0e: 37:9a:99:b5:87:7f:d8:43:56:80:ec:eb:71:53:bd: df:42:9e:f1:2a:23:41:61:66:cf:28:c2:64:a7:ff: 94:f0:19:28:6c:cf:6b:a6:a9:5f:04:d2:f8:4a:41: f7:81:51:7a:df:2d:fa:08:26:6a:c7:56:f4:0c:43: 02:b5:64:20:2b:cc:c7:ed:37:38:82:4d:3f:14:79: 83:de:d6:43:5d:cf:86:8f:a4:a9:d9:cf:f8:99:7a: 5d:54:17:c7:72:cf:5e:df:92:c5:02:81:44:f0:0a: 4b:19:e9:38:ec:2f:04:e3:2a:0c:99:cb:f1:42:10: 57:4d:7f:56:4f:11:6e:22:98:e0:fc:be:fa:93:05: 42:f9:16:7e:3f:ed:96:16:d2:a6:57:58:11:ce:bb: 0c:82:3c:67:86:03:96:da:31:2f:80:83:bc:40:ea: 18:6b:8b:a4:c3:ad:6f:25:b9:ef:d5:c4:43:5b:f3: 09:04:4d:18:5e:1b:c2:89:93:bf:f1:7b:e3:79:a2: a8:02:e2:61:d1:3a:67:ad:20:0c:a5:d4:14:f9:6d: ed:ce:13:25:86:1e:95:6f:0e:fc:3a:fd:15:87:da: 59:79:25:32:4a:74:77:bf:de:ee:7d:11:44:38:3c: eb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E1:17:9D:5B:12:BE:7A:BD:FC:10:38:85:F5:9F:0F:F3:BD:D4:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bd8ce2f-1164-3b4f-a880-8d2367705557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:f6:e7:5f:76:2c:57:e8:3e:ac:83:c2:74:20:f1:4b:11:74: ee:63:a8:10:ea:98:af:72:93:10:0e:e3:87:70:c0:b1:61:46: c5:a0:4f:ed:9b:90:ab:b3:60:ff:f7:7a:3d:f7:dc:9f:4d:0b: 3c:d6:85:76:ef:f6:79:a8:d9:da:6c:88:45:34:98:36:29:91: 08:66:d5:5b:f4:51:f0:e1:d6:d3:44:99:0c:a0:fe:bc:41:85: a5:42:0d:c8:e1:25:42:3c:fe:1d:e6:4e:82:4f:5d:e5:42:34: b4:87:91:fd:77:d6:6c:6f:c3:7b:da:0c:5e:6c:4b:2d:1f:46: 85:37:e7:a6:33:24:05:f2:23:f4:a4:bc:c9:4c:ef:18:f2:1a: c1:a6:8a:60:67:bd:1e:26:f6:5e:f6:11:f0:17:d5:a0:33:99: 70:52:17:41:de:09:09:b8:35:16:15:3b:9c:6f:bd:0d:b5:d1: 26:c9:7e:19:8b:6b:fc:55:16:6a:44:0d:fc:af:99:32:e9:16: 16:da:cf:02:d8:3d:00:43:c3:8d:63:ec:9a:70:87:3a:3a:be: 0e:9f:be:0e:32:aa:38:39:00:74:0a:11:df:ba:75:61:0e:f2: 2c:f4:c9:61:c1:b6:ba:67:e4:6f:6a:ba:b8:da:f0:5e:b0:a2: e0:5f:51:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+PemoVQ8JXxKGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MmFhNmE1NWYtZWZkMS00Yzg1LWE3OGUtNTUwM2Q0MWZmMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta4drVIfK1171cI/ZA43mpm1h3/YQ1aA7Otx U73fQp7xKiNBYWbPKMJkp/+U8BkobM9rpqlfBNL4SkH3gVF63y36CCZqx1b0DEMC tWQgK8zH7Tc4gk0/FHmD3tZDXc+Gj6Sp2c/4mXpdVBfHcs9e35LFAoFE8ApLGek4 7C8E4yoMmcvxQhBXTX9WTxFuIpjg/L76kwVC+RZ+P+2WFtKmV1gRzrsMgjxnhgOW 2jEvgIO8QOoYa4ukw61vJbnv1cRDW/MJBE0YXhvCiZO/8XvjeaKoAuJh0TpnrSAM pdQU+W3tzhMlhh6Vbw78Ov0Vh9pZeSUySnR3v97ufRFEODzrywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7hF51bEr56vfwQOIX1nw/zvdQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWJkOGNlMmYtMTE2NC0z YjRmLWE4ODAtOGQyMzY3NzA1NTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJP25192LFfoPqyDwnQg8UsRdO5jqBDqmK9ykxAO44dwwLFhRsWgT+2b kKuzYP/3ej333J9NCzzWhXbv9nmo2dpsiEU0mDYpkQhm1Vv0UfDh1tNEmQyg/rxB haVCDcjhJUI8/h3mToJPXeVCNLSHkf131mxvw3vaDF5sSy0fRoU356YzJAXyI/Sk vMlM7xjyGsGmimBnvR4m9l72EfAX1aAzmXBSF0HeCQm4NRYVO5xvvQ210SbJfhmL a/xVFmpEDfyvmTLpFhbazwLYPQBDw41j7Jpwhzo6vg6fvg4yqjg5AHQKEd+6dWEO 8iz0yWHBtrpn5G9qurja8F6wouBfUS4= -----END CERTIFICATE-----Generated at Mon Apr 7 06:29:42 2025 by rpki-client