$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fbbf195-53a3-366d-b014-a4977a4acfe6.roa File: 2fbbf195-53a3-366d-b014-a4977a4acfe6.roa (raw, json) Hash identifier: RALM+8eyoXNkJX7ml+cvRdntgei3EnXKNIrdZe+6r3A= Subject key identifier: 00:90:D7:2B:AC:FB:5D:BD:35:6C:13:97:D3:F1:C7:03:04:01:AF:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB197917F97559CB5C76A20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fbbf195-53a3-366d-b014-a4977a4acfe6.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 73.222.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:97:91:7f:97:55:9c:b5:c7:6a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=8957a25c-b92b-4a3d-89a8-fc59733ebb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:72:a7:9e:41:13:71:7f:42:54:96:b9:d3:da: 0a:95:d0:25:63:05:ba:fe:aa:15:9b:51:9d:c1:1d: 9a:be:8c:08:45:a2:86:ee:8d:53:5b:7c:9b:43:b0: cb:13:6d:67:e8:2a:f6:6a:fd:e6:46:43:2b:63:93: 3b:5f:f7:7c:d0:5d:b4:e8:c1:64:6d:75:a9:9d:09: 75:27:50:38:b9:2c:2c:1a:df:43:78:c6:33:f1:83: 09:6c:52:95:f4:3d:b8:1a:e7:75:d1:c2:20:22:16: 35:3e:e8:5c:5b:75:3b:b7:c0:c7:6c:9f:b1:52:66: fb:de:d2:98:9a:1b:df:d2:28:20:7f:1d:c7:89:3b: 45:79:0c:5f:8b:bb:17:3a:d8:16:4f:23:24:15:6e: 69:f5:30:c6:7d:f5:23:b5:ee:a9:25:4f:e7:b1:ec: 33:c5:e2:f9:29:d2:1d:29:9d:ee:0a:4b:5b:54:cb: 20:a2:13:01:3f:c9:3f:24:55:32:b5:d8:77:ff:cc: 73:c2:8d:2f:b5:43:ba:2c:eb:48:ef:54:2a:92:e6: 21:1d:f5:8b:83:15:c9:f3:00:47:c1:af:4a:d9:b1: 8b:9b:d4:b6:5e:6d:c6:a1:8f:91:da:e6:59:df:11: 11:e0:14:26:aa:18:8c:b7:bc:e0:21:2a:18:da:55: a8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:90:D7:2B:AC:FB:5D:BD:35:6C:13:97:D3:F1:C7:03:04:01:AF:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fbbf195-53a3-366d-b014-a4977a4acfe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.222.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:19:5b:eb:03:b2:71:a1:0e:c2:25:c2:7c:5a:ce:3d:c6:73: b0:3b:85:12:60:ea:74:4d:8b:4f:62:a7:fb:e3:90:d4:f6:27: e9:ce:79:89:87:37:01:8a:63:89:93:2a:3a:84:6d:21:4d:8c: 57:31:72:73:df:16:f8:64:6d:04:c7:77:fe:25:2a:ca:c0:66: f0:48:56:b6:75:40:24:c4:68:83:4f:e7:5b:c8:8c:1f:74:53: 63:86:72:dc:e5:fc:29:9d:22:15:08:56:75:42:0f:29:a1:f7: 6d:2f:ec:45:ce:ec:67:70:0a:b3:67:53:d5:a8:61:1f:08:d0: 28:be:2d:b3:f2:18:d9:de:69:11:8c:5e:9b:4b:5c:e0:e0:d2: 91:9e:35:a6:30:ec:d3:38:f5:22:ab:aa:37:f7:dd:55:4a:9f: 75:9d:01:2e:76:81:ce:2d:a1:a4:b9:c2:8b:0f:09:0e:69:62: fe:e7:59:5b:b2:db:a5:86:43:08:66:dd:a2:ff:43:0b:04:fb: c4:71:a7:02:a9:50:6f:99:d4:b6:32:3f:c9:5c:5f:e1:1f:44: c0:ff:cc:f5:32:b0:17:3f:ec:88:2b:28:37:01:93:65:9f:fa: 04:f0:9e:7c:b0:b6:b3:a3:c7:49:69:3b:d3:cb:cc:18:ca:42: f1:31:e5:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssZeRf5dVnLXHaiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODk1N2EyNWMtYjkyYi00YTNkLTg5YTgtZmM1OTczM2ViYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnKnnkETcX9CVJa509oKldAlYwW6/qoVm1Gd wR2avowIRaKG7o1TW3ybQ7DLE21n6Cr2av3mRkMrY5M7X/d80F206MFkbXWpnQl1 J1A4uSwsGt9DeMYz8YMJbFKV9D24Gud10cIgIhY1PuhcW3U7t8DHbJ+xUmb73tKY mhvf0iggfx3HiTtFeQxfi7sXOtgWTyMkFW5p9TDGffUjte6pJU/nsewzxeL5KdId KZ3uCktbVMsgohMBP8k/JFUytdh3/8xzwo0vtUO6LOtI71QqkuYhHfWLgxXJ8wBH wa9K2bGLm9S2Xm3GoY+R2uZZ3xER4BQmqhiMt7zgISoY2lWo+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACQ1yus+129NWwTl9PxxwMEAa/zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmZiYmYxOTUtNTNhMy0z NjZkLWIwMTQtYTQ5NzdhNGFjZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSd5KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUZW+sDsnGhDsIlwnxazj3Gc7A7hRJg6nRNi09ip/vjkNT2J+nOeYmH NwGKY4mTKjqEbSFNjFcxcnPfFvhkbQTHd/4lKsrAZvBIVrZ1QCTEaINP51vIjB90 U2OGctzl/CmdIhUIVnVCDymh920v7EXO7GdwCrNnU9WoYR8I0Ci+LbPyGNneaRGM XptLXODg0pGeNaYw7NM49SKrqjf33VVKn3WdAS52gc4toaS5wosPCQ5pYv7nWVuy 26WGQwhm3aL/QwsE+8RxpwKpUG+Z1LYyP8lcX+EfRMD/zPUysBc/7IgrKDcBk2Wf +gTwnnywtrOjx0lpO9PLzBjKQvEx5Wg= -----END CERTIFICATE-----Generated at Mon Apr 7 06:17:28 2025 by rpki-client