$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bcd681f-6a89-3bab-8975-ce048f451e54.roa File: 2bcd681f-6a89-3bab-8975-ce048f451e54.roa (raw, json) Hash identifier: K54/l8Vaiuh1Ku17yC6g0FqlukBI1twJb9rH5lvP00U= Subject key identifier: 1C:0B:CA:70:74:F4:27:6F:38:72:39:EE:C9:D7:24:8E:ED:CA:F0:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF9F0A234E5EDFD24FF980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bcd681f-6a89-3bab-8975-ce048f451e54.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 73.74.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:9f:0a:23:4e:5e:df:d2:4f:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=fa33581c-24ed-49df-adae-59c090a1da67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:ee:39:c6:72:f2:e3:34:e3:c0:83:d0:00: 30:1d:59:18:b4:87:50:aa:43:1c:97:fd:75:40:a7: 40:bf:ce:92:36:b6:10:6c:e9:ed:58:85:06:f3:40: 34:ea:7f:a8:70:eb:87:4c:53:d2:a5:1f:c4:bb:b0: 83:71:19:20:a3:18:e7:c8:d5:3c:e2:d0:d3:ea:2d: 05:23:cb:f1:ff:bc:72:c2:48:7a:c4:f9:d4:43:4c: cd:08:f0:52:79:25:9b:f3:a3:e4:6b:22:86:2e:06: 1e:b6:13:31:4c:7d:5f:a2:db:e8:27:2a:d3:d6:19: e0:d5:50:70:8e:43:3f:ac:ae:0e:d6:42:23:da:d4: aa:2a:c0:30:7f:45:7c:44:17:a0:6b:f4:92:27:ff: 2f:f3:4e:a6:7f:47:a5:9a:40:13:cf:d6:f7:2a:ac: 75:fb:9c:b7:a4:50:e3:8f:96:bc:97:96:e8:be:5d: bd:29:93:a9:3f:a6:4d:d8:61:5b:32:57:61:97:e3: f7:cd:29:12:98:54:8d:cb:c2:19:e9:16:4d:b7:49: 40:1b:3b:da:f3:c2:f9:a5:60:53:f6:17:16:78:4d: ff:3b:30:a0:ce:20:fb:c1:5d:2f:a4:ee:0e:d8:06: a8:db:d0:0d:a4:54:72:a4:66:31:3f:47:c2:df:b4: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0B:CA:70:74:F4:27:6F:38:72:39:EE:C9:D7:24:8E:ED:CA:F0:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bcd681f-6a89-3bab-8975-ce048f451e54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.74.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6a:c0:55:c8:d5:73:91:48:a9:d6:60:df:cf:9f:80:d5:af: 29:78:0a:f6:58:87:d8:c3:b9:fa:34:26:42:7a:b9:33:88:ca: 22:96:1e:c8:ec:47:2e:65:82:f3:65:ee:4d:ea:bc:8f:b9:67: 55:dc:05:9c:4a:90:5b:38:cd:e3:93:93:e2:9f:e8:33:dd:85: ad:25:00:0e:ca:10:9f:81:25:73:9e:79:b1:20:4c:4e:08:c7: e3:95:89:04:90:5d:c1:f1:75:bb:59:5c:d1:da:7e:ab:96:4e: e7:1e:44:93:a5:10:6b:37:46:d1:ee:58:68:55:45:c9:3b:ee: cf:71:b7:37:20:0f:91:0d:19:65:b4:14:8e:c6:ee:a0:34:8e: 0c:9c:12:5e:ab:81:89:f6:b3:54:ca:0e:41:3c:d1:59:72:f5: eb:32:b8:2e:f5:df:bd:19:04:5d:96:b0:c4:35:e3:c3:53:8d: b7:0b:bb:ef:dd:7b:44:95:ee:f9:be:3d:c8:07:9b:b8:61:0a: ce:d1:08:90:3c:be:1c:3b:8c:8e:43:5a:43:76:25:6e:e0:bf: 33:ec:b3:a0:cb:3f:35:7a:ef:c0:6b:64:64:71:91:c6:eb:fa: 79:84:26:5c:f4:79:9e:a7:38:d5:72:2c:9b:13:df:66:03:a4: 5f:dd:9e:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr58KI05e39JP+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZmEzMzU4MWMtMjRlZC00OWRmLWFkYWUtNTljMDkwYTFkYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiHuOcZy8uM048CD0AAwHVkYtIdQqkMcl/11 QKdAv86SNrYQbOntWIUG80A06n+ocOuHTFPSpR/Eu7CDcRkgoxjnyNU84tDT6i0F I8vx/7xywkh6xPnUQ0zNCPBSeSWb86PkayKGLgYethMxTH1fotvoJyrT1hng1VBw jkM/rK4O1kIj2tSqKsAwf0V8RBega/SSJ/8v806mf0elmkATz9b3Kqx1+5y3pFDj j5a8l5bovl29KZOpP6ZN2GFbMldhl+P3zSkSmFSNy8IZ6RZNt0lAGzva88L5pWBT 9hcWeE3/OzCgziD7wV0vpO4O2Aao29ANpFRypGYxP0fC37RW0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwLynB09CdvOHI57snXJI7tyvCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmJjZDY4MWYtNmE4OS0z YmFiLTg5NzUtY2UwNDhmNDUxZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRqwFXI1XORSKnWYN/Pn4DVryl4CvZYh9jDufo0JkJ6uTOIyiKWHsjs Ry5lgvNl7k3qvI+5Z1XcBZxKkFs4zeOTk+Kf6DPdha0lAA7KEJ+BJXOeebEgTE4I x+OViQSQXcHxdbtZXNHafquWTuceRJOlEGs3RtHuWGhVRck77s9xtzcgD5ENGWW0 FI7G7qA0jgycEl6rgYn2s1TKDkE80Vly9esyuC71370ZBF2WsMQ148NTjbcLu+/d e0SV7vm+PcgHm7hhCs7RCJA8vhw7jI5DWkN2JW7gvzPss6DLPzV678BrZGRxkcbr +nmEJlz0eZ6nONVyLJsT32YDpF/dnqs= -----END CERTIFICATE-----Generated at Mon Apr 7 09:45:35 2025 by rpki-client