$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e178b7-aabc-3b65-b98a-9f879c6e7f4c.roa File: 33e178b7-aabc-3b65-b98a-9f879c6e7f4c.roa (raw, json) Hash identifier: c7ZoCRXP+VB/bJ9oiwxMhL2SPm48eGd1cQPFShUmyvE= Subject key identifier: 9C:76:5A:8B:5D:4A:73:17:C6:36:9B:B3:00:9C:90:D1:39:67:34:5B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CF601F2173CDFEC15CB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e178b7-aabc-3b65-b98a-9f879c6e7f4c.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 73.58.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:f6:01:f2:17:3c:df:ec:15:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=ff5b98e4-f34f-439d-8ac6-34d353f85b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:f4:02:7b:26:b8:db:25:c9:e9:07:64:ed: be:e9:5a:56:42:10:a5:12:c7:91:15:6e:c8:e7:39: ce:69:88:97:18:9e:e3:80:9b:cb:6e:8b:a1:8f:73: 4d:a7:f2:56:7f:65:c4:0d:85:70:7e:9a:fd:7c:b8: d2:4e:dc:c2:e8:4c:cd:78:15:7c:bc:df:b6:3f:3a: e6:30:5f:55:ed:1c:9e:10:e5:8e:7a:40:2d:e8:1c: 14:03:3f:93:6a:9d:a6:fa:85:f7:48:30:06:46:de: 81:83:30:ba:99:47:ac:dc:dd:eb:ff:13:33:bc:99: 61:d7:ad:5a:b3:2f:17:cd:f1:0f:55:15:43:06:75: 52:4c:00:fe:88:20:06:18:b8:51:79:0b:cc:ba:eb: 9c:5a:d5:34:7a:d4:83:64:5a:b5:1f:a9:f6:64:7d: f2:de:b6:c0:16:05:3a:09:e3:b2:9f:b8:05:ce:d6: e2:a7:24:7e:08:7c:51:2d:9f:54:36:fd:b2:b8:d6: 1f:79:83:bd:37:7e:26:0b:ab:27:6b:03:28:4b:24: 40:6f:ef:b8:5b:5c:8c:7a:cf:38:77:01:c5:ec:93: 49:96:6a:fe:82:35:ac:5e:d3:d8:c4:1f:6b:7a:46: 04:7b:4b:78:be:64:14:46:74:81:ef:aa:42:4d:d5: f3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:76:5A:8B:5D:4A:73:17:C6:36:9B:B3:00:9C:90:D1:39:67:34:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33e178b7-aabc-3b65-b98a-9f879c6e7f4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.58.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:40:87:1b:a8:e8:b7:3c:ec:86:5f:4c:6e:af:91:e4:8d:23: 91:3f:25:26:e5:b1:6e:f9:9a:b3:fe:42:13:67:20:ca:3f:00: 92:09:d5:3e:cb:e9:b8:19:0c:70:9d:47:f3:c8:80:65:ec:b5: 0e:32:eb:69:03:3f:c8:82:01:2d:08:18:02:b5:40:bb:9d:92: 1c:66:f6:39:eb:72:81:65:66:e0:40:b8:99:5a:65:26:29:8a: 8b:12:82:86:a3:b3:2b:12:66:e5:78:0f:fe:44:ee:e9:a1:2d: 7b:74:7b:71:4a:f2:11:ee:e1:59:d2:0f:07:42:90:1f:de:c4: af:7c:67:de:95:8a:9a:ab:8d:ac:f9:13:57:a4:aa:14:49:e0: 25:8d:5f:6a:aa:58:53:18:0d:c0:96:d4:29:7b:71:4a:50:5f: 90:0d:3e:bf:ad:8e:a5:39:11:db:57:13:20:ea:96:3b:01:2d: 48:6d:7c:7e:89:f8:c2:f4:1c:61:1c:6c:fb:fc:18:27:fb:26: 00:26:e6:f3:66:36:b0:ec:a6:1e:0e:60:cd:2e:15:65:bb:8d: 44:cd:1f:ff:9d:51:a7:fa:44:41:ee:78:d6:64:96:25:eb:f1: 2c:66:a3:76:af:08:26:c4:22:da:b4:2f:2b:ff:c7:63:be:31: c5:2a:b6:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebPYB8hc83+wVy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZmY1Yjk4ZTQtZjM0Zi00MzlkLThhYzYtMzRkMzUzZjg1YjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha30AnsmuNslyekHZO2+6VpWQhClEseRFW7I 5znOaYiXGJ7jgJvLbouhj3NNp/JWf2XEDYVwfpr9fLjSTtzC6EzNeBV8vN+2Pzrm MF9V7RyeEOWOekAt6BwUAz+Tap2m+oX3SDAGRt6BgzC6mUes3N3r/xMzvJlh161a sy8XzfEPVRVDBnVSTAD+iCAGGLhReQvMuuucWtU0etSDZFq1H6n2ZH3y3rbAFgU6 CeOyn7gFztbipyR+CHxRLZ9UNv2yuNYfeYO9N34mC6snawMoSyRAb++4W1yMes84 dwHF7JNJlmr+gjWsXtPYxB9rekYEe0t4vmQURnSB76pCTdXzlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJx2WotdSnMXxjabswCckNE5ZzRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzNlMTc4YjctYWFiYy0z YjY1LWI5OGEtOWY4NzljNmU3ZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSTrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5Ahxuo6Lc87IZfTG6vkeSNI5E/JSblsW75mrP+QhNnIMo/AJIJ1T7L 6bgZDHCdR/PIgGXstQ4y62kDP8iCAS0IGAK1QLudkhxm9jnrcoFlZuBAuJlaZSYp iosSgoajsysSZuV4D/5E7umhLXt0e3FK8hHu4VnSDwdCkB/exK98Z96Vipqrjaz5 E1ekqhRJ4CWNX2qqWFMYDcCW1Cl7cUpQX5ANPr+tjqU5EdtXEyDqljsBLUhtfH6J +ML0HGEcbPv8GCf7JgAm5vNmNrDsph4OYM0uFWW7jUTNH/+dUaf6REHueNZkliXr 8Sxmo3avCCbEItq0Lyv/x2O+McUqthk= -----END CERTIFICATE-----Generated at Mon Apr 7 05:45:54 2025 by rpki-client