$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f0a8b2f-d46a-39ca-9c84-e9c6890ad322.roa File: 2f0a8b2f-d46a-39ca-9c84-e9c6890ad322.roa (raw, json) Hash identifier: 6D+NmlI958munBP4ZGHusvALRJPB13xPqSdeuUB86yU= Subject key identifier: 79:74:3B:96:E2:97:E4:1F:1B:88:2C:8D:4F:50:75:F6:CE:A3:72:F9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C51A7DC1EA52C6A8B9180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f0a8b2f-d46a-39ca-9c84-e9c6890ad322.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 73.62.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:51:a7:dc:1e:a5:2c:6a:8b:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=40cc5549-cce8-4a0d-88cb-a0ead624f8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:62:40:8e:9f:5e:ab:9c:0b:f4:c2:7d:78:52: 66:e8:08:79:72:e0:47:40:3a:19:18:92:91:4f:a9: 12:f8:43:16:38:a9:4c:47:01:5d:5a:4a:c0:08:f4: dd:f4:1d:23:a5:9a:25:98:8c:e7:51:6f:85:a7:48: 74:9f:85:37:f5:0b:83:4e:1b:6e:a4:4b:31:13:e4: 35:88:8f:d0:76:35:7e:66:24:3f:23:6f:3f:7a:6c: 53:6c:66:65:53:23:3a:ae:b8:85:a5:bb:2c:c9:a4: 46:1c:9f:94:79:aa:fd:17:65:39:2c:03:06:a9:f2: 77:15:d7:98:3d:ad:75:7b:f2:65:38:bc:50:16:27: 40:81:4e:4e:58:38:6c:2d:f0:8d:fa:55:6b:2f:28: bd:39:20:c2:b5:bb:05:99:f3:c2:17:b9:bf:e3:f9: b5:ea:93:a7:83:85:37:47:7e:b9:e1:c5:7a:7c:21: 5c:83:46:79:cf:22:61:82:d8:5b:aa:96:c4:85:e6: 2f:d6:f6:b3:f2:8f:0c:fb:04:4c:75:65:df:6e:8c: 64:7c:41:82:c2:3f:a8:c4:58:c1:76:1f:42:bb:96: dd:a3:fe:50:23:76:fc:bc:72:d9:fc:c2:d1:5c:97: f3:6d:d9:51:c4:ce:88:59:29:0f:34:85:b1:42:76: ba:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:74:3B:96:E2:97:E4:1F:1B:88:2C:8D:4F:50:75:F6:CE:A3:72:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f0a8b2f-d46a-39ca-9c84-e9c6890ad322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.62.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:46:56:bd:46:7f:1b:7d:c3:f4:17:3d:57:4b:55:0a:a2:2c: 2b:ef:ad:3d:69:b7:fb:5d:58:ac:b2:71:fc:6d:1a:e7:35:cf: 26:65:57:03:cd:8c:35:0e:7a:ee:57:b0:02:fe:15:0e:d8:74: 83:85:9a:92:73:73:94:d8:20:80:97:86:52:25:0a:0b:ae:85: 13:01:7b:4f:0d:09:24:3b:1b:d7:6c:fa:b6:15:fa:96:f0:7f: fd:7f:12:86:0c:0b:b5:11:1a:b2:ba:5b:99:e8:2d:98:f9:ad: 89:91:2c:12:fa:bc:f8:e9:0b:cc:01:c9:34:7d:45:d0:a9:9d: e1:28:76:ad:4f:aa:f1:17:00:82:6e:65:2c:d2:ed:1d:de:60: 59:4a:36:47:20:f9:e0:a7:c8:d1:7d:d0:36:35:1f:fd:0c:e6: 76:0a:49:ff:d5:8d:b0:b6:e6:2b:84:e9:2c:a1:26:42:3d:8f: 3e:53:8f:c1:77:06:d0:6b:ac:26:af:c9:95:aa:59:02:ef:d8: 8f:7c:df:d0:64:23:64:04:e2:85:45:14:4a:31:be:6e:9f:93: d9:93:28:94:c7:dc:cf:72:3a:ca:13:ab:b1:87:18:ad:13:36: d1:64:8a:36:a9:33:25:7b:0f:a2:e2:a6:a1:6e:d8:7f:e4:97: 50:92:1c:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebFGn3B6lLGqLkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NDBjYzU1NDktY2NlOC00YTBkLTg4Y2ItYTBlYWQ2MjRmOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimJAjp9eq5wL9MJ9eFJm6Ah5cuBHQDoZGJKR T6kS+EMWOKlMRwFdWkrACPTd9B0jpZolmIznUW+Fp0h0n4U39QuDThtupEsxE+Q1 iI/QdjV+ZiQ/I28/emxTbGZlUyM6rriFpbssyaRGHJ+Uear9F2U5LAMGqfJ3FdeY Pa11e/JlOLxQFidAgU5OWDhsLfCN+lVrLyi9OSDCtbsFmfPCF7m/4/m16pOng4U3 R3654cV6fCFcg0Z5zyJhgthbqpbEheYv1vaz8o8M+wRMdWXfboxkfEGCwj+oxFjB dh9Cu5bdo/5QI3b8vHLZ/MLRXJfzbdlRxM6IWSkPNIWxQna6zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHl0O5bil+QfG4gsjU9QdfbOo3L5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmYwYThiMmYtZDQ2YS0z OWNhLTljODQtZTljNjg5MGFkMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCST7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdGVr1Gfxt9w/QXPVdLVQqiLCvvrT1pt/tdWKyycfxtGuc1zyZlVwPN jDUOeu5XsAL+FQ7YdIOFmpJzc5TYIICXhlIlCguuhRMBe08NCSQ7G9ds+rYV+pbw f/1/EoYMC7URGrK6W5noLZj5rYmRLBL6vPjpC8wByTR9RdCpneEodq1PqvEXAIJu ZSzS7R3eYFlKNkcg+eCnyNF90DY1H/0M5nYKSf/VjbC25iuE6SyhJkI9jz5Tj8F3 BtBrrCavyZWqWQLv2I9839BkI2QE4oVFFEoxvm6fk9mTKJTH3M9yOsoTq7GHGK0T NtFkijapMyV7D6LipqFu2H/kl1CSHEE= -----END CERTIFICATE-----Generated at Mon Apr 7 06:20:09 2025 by rpki-client