$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d54eb52-49c2-34f3-aa55-3b9a734c81d6.roa File: 2d54eb52-49c2-34f3-aa55-3b9a734c81d6.roa (raw, json) Hash identifier: N37vAv4cG/qWrPf2mlJ8e4owXvLaTV44a0MGQG5ueco= Subject key identifier: 10:01:53:6C:5F:30:D0:9E:0E:B9:E0:90:88:D7:1A:83:3D:F6:0D:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6D66F4EC1EB38FC7592A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d54eb52-49c2-34f3-aa55-3b9a734c81d6.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 73.67.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:d6:6f:4e:c1:eb:38:fc:75:92:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=68b5a632-bfa0-4580-b65e-cac0e32e8f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:16:52:bc:ab:09:48:00:1a:5f:03:ff:25:4e: d6:d7:5f:49:2e:27:30:d0:a0:4c:42:bb:72:9e:ec: 4a:59:03:41:74:ab:57:7d:77:2f:db:4e:1a:8d:c6: f3:4b:9e:47:0a:bb:d8:44:be:f4:b6:14:cf:29:96: e0:1c:1b:ef:13:b0:00:94:e6:0a:09:ec:1f:27:ca: 46:fd:72:cf:a9:e0:5c:a6:8c:3c:a5:94:ff:56:e8: 3b:b1:42:8e:a1:17:7d:8f:e3:69:f5:ec:eb:83:4d: d4:49:36:3d:d4:12:ae:e3:4c:c2:6e:4f:74:a4:5e: de:60:fb:89:43:54:1b:60:3f:c8:01:f5:c6:ca:82: e0:6f:f1:b4:ab:d4:bd:f1:06:e0:db:a4:ec:60:ab: a0:f7:61:52:af:13:45:0a:d2:6e:97:5a:b5:88:c9: 36:06:be:27:eb:aa:c8:4a:de:28:6d:9b:34:ff:7f: 43:f2:17:4d:b6:35:fc:09:b9:73:03:b0:c2:f1:65: a4:e9:ee:e8:81:0f:62:0f:bc:25:c1:70:3c:58:32: cf:9f:27:18:13:95:ef:58:0a:da:97:c6:56:fe:d4: 30:62:dc:ed:ea:fd:5f:dd:d4:53:1f:23:1b:2d:af: ea:34:b8:89:11:a7:15:25:56:94:7f:23:c7:61:50: 42:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:01:53:6C:5F:30:D0:9E:0E:B9:E0:90:88:D7:1A:83:3D:F6:0D:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d54eb52-49c2-34f3-aa55-3b9a734c81d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.67.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:0d:cb:d6:52:47:03:db:ee:cf:63:7a:9b:ff:1e:b2:cf:56: f8:07:90:a6:a7:dc:01:32:d8:d4:07:fd:64:52:2a:e7:38:68: 06:73:14:19:74:78:e5:1e:0a:f2:be:68:e5:e9:10:0d:9a:48: 21:7d:4b:7e:05:63:40:68:da:26:24:ae:19:9c:46:a6:49:f3: 75:ee:4b:7a:03:8a:4f:1d:24:97:d6:9b:31:2a:b6:4b:5e:24: 6e:fc:8e:36:a3:e2:de:68:1a:1b:a9:08:a4:59:f6:40:92:e7: a9:58:11:6a:a5:63:a3:98:70:ff:b5:22:ae:0f:57:49:7c:5f: e9:22:d4:20:0b:5f:bf:8b:ed:28:bc:57:cf:f5:56:70:67:50: 88:20:07:ea:0b:d5:60:d8:45:7f:9f:49:0f:48:66:2e:6b:ed: b3:61:30:c5:fe:19:0d:7a:56:75:7e:1e:84:ac:0c:86:61:9f: 71:8c:df:56:30:da:bc:d4:9a:d0:ed:cf:19:a9:8a:48:45:b2: 7e:e4:32:7a:a3:7b:4a:fa:95:3c:92:04:16:f0:86:a1:58:6a: 3e:91:17:bb:25:b9:bd:35:8c:35:40:f6:d5:9c:6e:b8:da:c9: fa:ed:1d:1d:ef:89:12:ec:d4:eb:f9:c2:a0:82:b5:1b:cd:24: e2:b8:0c:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09tZvTsHrOPx1kqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NjhiNWE2MzItYmZhMC00NTgwLWI2NWUtY2FjMGUzMmU4ZjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRZSvKsJSAAaXwP/JU7W119JLicw0KBMQrty nuxKWQNBdKtXfXcv204ajcbzS55HCrvYRL70thTPKZbgHBvvE7AAlOYKCewfJ8pG /XLPqeBcpow8pZT/Vug7sUKOoRd9j+Np9ezrg03USTY91BKu40zCbk90pF7eYPuJ Q1QbYD/IAfXGyoLgb/G0q9S98Qbg26TsYKug92FSrxNFCtJul1q1iMk2Br4n66rI St4obZs0/39D8hdNtjX8CblzA7DC8WWk6e7ogQ9iD7wlwXA8WDLPnycYE5XvWAra l8ZW/tQwYtzt6v1f3dRTHyMbLa/qNLiJEacVJVaUfyPHYVBCpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBABU2xfMNCeDrngkIjXGoM99g0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmQ1NGViNTItNDljMi0z NGYzLWFhNTUtM2I5YTczNGM4MWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUNy9ZSRwPb7s9jepv/HrLPVvgHkKan3AEy2NQH/WRSKuc4aAZzFBl0 eOUeCvK+aOXpEA2aSCF9S34FY0Bo2iYkrhmcRqZJ83XuS3oDik8dJJfWmzEqtkte JG78jjaj4t5oGhupCKRZ9kCS56lYEWqlY6OYcP+1Iq4PV0l8X+ki1CALX7+L7Si8 V8/1VnBnUIggB+oL1WDYRX+fSQ9IZi5r7bNhMMX+GQ16VnV+HoSsDIZhn3GM31Yw 2rzUmtDtzxmpikhFsn7kMnqje0r6lTySBBbwhqFYaj6RF7slub01jDVA9tWcbrja yfrtHR3viRLs1Ov5wqCCtRvNJOK4DFA= -----END CERTIFICATE-----Generated at Mon Apr 7 05:48:48 2025 by rpki-client