$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21718e09-6d7b-33ec-87f8-74f236fd2a48.roa File: 21718e09-6d7b-33ec-87f8-74f236fd2a48.roa (raw, json) Hash identifier: 6vMqLO8a5Le9oXzONUFrr6KHQuglTKT+ubMuV8ZyYJs= Subject key identifier: 1A:8C:6D:AF:79:DA:CE:1E:2D:3D:44:7F:C4:4D:CA:5F:61:04:C4:F9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6CB8BD35F5030DF5EC9C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21718e09-6d7b-33ec-87f8-74f236fd2a48.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 73.240.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:cb:8b:d3:5f:50:30:df:5e:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=c9cba5b2-f264-47dd-9c9c-8a5853065044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e9:18:70:82:a0:87:b2:99:da:d4:dc:ce:c7: 61:ff:85:d9:e9:f6:c8:41:49:7c:4e:e0:ad:5d:c1: 5a:6a:ce:36:8e:86:24:98:21:90:24:34:29:b1:6f: 49:0e:76:ad:fc:5e:e0:af:20:58:96:50:26:09:1c: f6:2b:70:f1:f0:d6:af:a3:2d:6f:57:24:73:e0:1e: 1b:26:98:46:4e:ef:59:c7:9b:35:92:50:45:e0:69: 7f:b1:b6:0d:02:97:2f:89:b5:18:2e:3c:46:43:f3: 32:c0:40:37:21:34:86:0b:e6:2a:23:4f:2a:4b:7f: ae:90:9a:bb:cf:c8:16:a5:3f:b9:2a:e6:7e:00:68: 06:f2:83:35:64:25:4b:4d:7e:3d:9a:85:5a:ae:5a: 40:c7:a2:28:29:09:ca:6b:7e:96:d6:6f:97:e4:51: a4:85:15:f8:be:53:f2:f0:70:77:4a:c9:c9:a7:89: be:fc:d1:89:54:85:9b:5a:b7:3c:75:85:d4:85:8f: a4:b5:ec:9f:bc:99:90:9f:8c:c5:58:a6:ed:be:81: c4:12:ce:90:aa:71:6a:74:2a:b9:03:6f:f1:23:8e: 7b:fe:18:e7:f6:a0:2a:82:66:35:7d:c0:23:27:17: 42:56:43:a1:42:bc:6b:b8:f2:da:0d:7f:0e:23:ea: f6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8C:6D:AF:79:DA:CE:1E:2D:3D:44:7F:C4:4D:CA:5F:61:04:C4:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21718e09-6d7b-33ec-87f8-74f236fd2a48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.240.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5e:1c:89:c5:1c:c0:e9:ce:93:2d:12:b5:3c:7a:ca:d2:4a: 31:61:00:8d:a3:e0:fb:31:eb:9a:e1:65:b8:c5:10:e8:fb:b0: 07:5f:f0:da:32:ef:44:a2:87:19:1b:48:d2:c8:39:5d:3d:01: 24:85:b5:51:3d:51:cb:47:37:c7:a4:61:fe:5e:2d:de:a7:65: 11:fd:d6:8a:19:25:78:7f:06:59:58:52:99:7e:ea:26:8a:92: 0e:91:52:b2:4f:fe:d4:07:7b:33:93:35:b6:87:09:e5:e0:0a: 27:4f:84:2d:c6:2e:50:5f:45:08:72:d6:0b:17:2b:02:f1:6c: e9:fb:04:a9:03:ab:03:b4:93:cf:01:b9:c2:17:5f:6c:e6:c3: 24:c2:d4:db:60:24:42:e1:5e:bb:c7:cf:19:74:55:9b:e7:9c: 5b:69:4c:50:ca:f7:d8:cf:bf:14:41:07:86:31:42:32:01:46: 11:cc:79:cc:b3:e1:41:42:bb:4b:0f:31:fb:f6:d3:9b:d5:b0: 4c:f6:b5:45:59:cd:92:e8:9a:5b:d7:0c:d1:9c:09:d7:19:fb: c0:cd:d5:15:4a:7a:71:af:3f:b1:ac:cf:da:c0:42:c1:66:f2: 16:63:de:bb:c9:b0:f2:8b:48:8d:2f:07:b7:e3:ba:fd:47:fa: a7:99:7f:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09suL019QMN9eycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YzljYmE1YjItZjI2NC00N2RkLTljOWMtOGE1ODUzMDY1MDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOkYcIKgh7KZ2tTczsdh/4XZ6fbIQUl8TuCt XcFaas42joYkmCGQJDQpsW9JDnat/F7gryBYllAmCRz2K3Dx8Navoy1vVyRz4B4b JphGTu9Zx5s1klBF4Gl/sbYNApcvibUYLjxGQ/MywEA3ITSGC+YqI08qS3+ukJq7 z8gWpT+5KuZ+AGgG8oM1ZCVLTX49moVarlpAx6IoKQnKa36W1m+X5FGkhRX4vlPy 8HB3SsnJp4m+/NGJVIWbWrc8dYXUhY+kteyfvJmQn4zFWKbtvoHEEs6QqnFqdCq5 A2/xI457/hjn9qAqgmY1fcAjJxdCVkOhQrxruPLaDX8OI+r2OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqMba952s4eLT1Ef8RNyl9hBMT5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjE3MThlMDktNmQ3Yi0z M2VjLTg3ZjgtNzRmMjM2ZmQyYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASfCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJeHInFHMDpzpMtErU8esrSSjFhAI2j4Psx65rhZbjFEOj7sAdf8Noy 70SihxkbSNLIOV09ASSFtVE9UctHN8ekYf5eLd6nZRH91ooZJXh/BllYUpl+6iaK kg6RUrJP/tQHezOTNbaHCeXgCidPhC3GLlBfRQhy1gsXKwLxbOn7BKkDqwO0k88B ucIXX2zmwyTC1NtgJELhXrvHzxl0VZvnnFtpTFDK99jPvxRBB4YxQjIBRhHMecyz 4UFCu0sPMfv205vVsEz2tUVZzZLomlvXDNGcCdcZ+8DN1RVKenGvP7Gsz9rAQsFm 8hZj3rvJsPKLSI0vB7fjuv1H+qeZf5I= -----END CERTIFICATE-----Generated at Mon Apr 7 06:25:16 2025 by rpki-client