$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ba5e443-270d-320a-b278-c2d553affd4e.roa File: 2ba5e443-270d-320a-b278-c2d553affd4e.roa (raw, json) Hash identifier: 6/mFcKW/x2MUmZsdkqXe3iti58JX+rChKoWNm5a0gjg= Subject key identifier: 59:93:40:6B:6A:27:C9:6F:59:B5:14:EE:76:9E:C2:90:7D:39:FD:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6C6D7D7D3B8C5DC0D3980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ba5e443-270d-320a-b278-c2d553affd4e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 73.157.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:c6:d7:d7:d3:b8:c5:dc:0d:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=188a0179-25df-479c-a570-241fd46c81b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:56:2c:62:b9:ac:72:6d:32:c9:c7:e8:8f: ff:f5:ef:d9:e0:51:d6:0a:0a:79:2c:f4:65:3d:25: 0f:7e:0a:22:0f:8f:73:00:bb:7c:01:c6:a9:30:f8: 54:45:a3:f4:57:e1:9c:7e:29:6b:98:77:0f:c4:e3: e6:72:b6:b9:eb:45:ee:f6:fb:bf:8c:16:e4:50:ef: 86:b4:94:57:3d:5d:e6:7a:c6:db:8b:1c:af:fc:59: 9e:38:a6:3b:d3:39:fd:58:fb:7f:bc:e8:b0:f4:e2: 71:df:56:f7:67:41:01:fd:b2:1c:e0:83:c9:3a:ea: d1:f6:fb:6a:e7:cc:dd:e7:f3:dd:3e:4f:13:84:7d: 2d:38:3b:11:60:91:7f:a0:64:d9:09:3b:c6:12:cb: 52:4a:a8:e7:94:b9:4c:47:8e:a0:b7:5b:9e:be:95: 97:c5:1d:5b:89:ab:60:e9:51:5b:04:99:13:e3:af: e4:bf:0d:b1:54:11:b5:0f:12:a0:3b:5a:57:05:fb: a2:d6:00:f3:92:6e:a0:9c:ed:c9:cf:35:70:1c:f8: 5d:5a:f8:07:be:6e:9a:42:86:2a:80:d8:b5:98:0c: de:18:b7:ce:9a:f8:7c:3f:56:14:7e:68:78:ff:20: d8:e8:3f:ab:6a:6e:d2:2c:e7:5e:ad:fe:80:51:4a: 7f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:93:40:6B:6A:27:C9:6F:59:B5:14:EE:76:9E:C2:90:7D:39:FD:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ba5e443-270d-320a-b278-c2d553affd4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.157.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a3:e3:14:79:b2:22:31:0e:e2:d7:d6:73:04:7d:8a:53:31: 41:cb:ae:24:83:7f:f8:d3:72:6c:65:56:c2:a6:af:77:b4:2a: 56:93:cb:72:46:a4:b4:e6:26:49:31:9d:ed:75:6a:61:1d:c4: 4c:39:41:d0:49:3d:ae:8d:dc:3d:40:34:0a:72:9b:32:d6:fb: 9d:a9:0b:1f:65:f5:1a:17:57:0d:96:2c:c7:a1:72:06:94:7d: a2:1d:8b:87:68:ed:ae:1f:ab:36:97:20:a5:6c:c9:a1:8e:0e: c6:b3:a3:e5:1b:c9:70:6e:b1:f0:9e:88:ce:16:28:c9:ec:97: 8b:06:21:18:59:56:de:3e:7c:97:df:d3:5a:e9:3f:93:f4:aa: 17:df:ba:d3:ac:53:b5:00:65:d8:a6:96:85:2e:99:b9:cd:1f: 98:f6:b9:c6:0a:d2:6d:fc:cf:48:cb:36:f8:ba:ff:69:e9:d7: 54:79:62:4b:1a:ef:03:6c:b2:50:86:ed:4b:96:d7:b8:2a:fb: 09:01:11:e2:1d:d8:0b:ce:20:f6:64:71:5f:76:58:f7:1d:6c: 19:f7:3e:d1:e6:a5:a7:a8:b6:e6:1b:b1:bd:3e:19:22:f9:36: b7:f3:7c:1d:3c:e8:d4:ce:55:e0:55:38:84:63:b5:90:34:4f: 4a:9e:2d:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09sbX19O4xdwNOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MTg4YTAxNzktMjVkZi00NzljLWE1NzAtMjQxZmQ0NmM4MWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeJWLGK5rHJtMsnH6I//9e/Z4FHWCgp5LPRl PSUPfgoiD49zALt8AcapMPhURaP0V+GcfilrmHcPxOPmcra560Xu9vu/jBbkUO+G tJRXPV3mesbbixyv/FmeOKY70zn9WPt/vOiw9OJx31b3Z0EB/bIc4IPJOurR9vtq 58zd5/PdPk8ThH0tODsRYJF/oGTZCTvGEstSSqjnlLlMR46gt1uevpWXxR1biatg 6VFbBJkT46/kvw2xVBG1DxKgO1pXBfui1gDzkm6gnO3JzzVwHPhdWvgHvm6aQoYq gNi1mAzeGLfOmvh8P1YUfmh4/yDY6D+ram7SLOderf6AUUp/4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmTQGtqJ8lvWbUU7naewpB9Of3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmJhNWU0NDMtMjcwZC0z MjBhLWIyNzgtYzJkNTUzYWZmZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ32MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSj4xR5siIxDuLX1nMEfYpTMUHLriSDf/jTcmxlVsKmr3e0KlaTy3JG pLTmJkkxne11amEdxEw5QdBJPa6N3D1ANApymzLW+52pCx9l9RoXVw2WLMehcgaU faIdi4do7a4fqzaXIKVsyaGODsazo+UbyXBusfCeiM4WKMnsl4sGIRhZVt4+fJff 01rpP5P0qhffutOsU7UAZdimloUumbnNH5j2ucYK0m38z0jLNvi6/2np11R5Yksa 7wNsslCG7UuW17gq+wkBEeId2AvOIPZkcV92WPcdbBn3PtHmpaeotuYbsb0+GSL5 NrfzfB086NTOVeBVOIRjtZA0T0qeLes= -----END CERTIFICATE-----Generated at Mon Apr 7 09:34:16 2025 by rpki-client