$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39873da3-8881-3459-ad71-33da20d3da5e.roa File: 39873da3-8881-3459-ad71-33da20d3da5e.roa (raw, json) Hash identifier: A9U6djE1oYu3bGGAkF0fNN1IFs5aeVaOM9/YFvU/xtw= Subject key identifier: 5F:05:FC:E2:BC:F7:DA:D4:D0:5D:72:58:CB:FB:0D:DA:41:3F:9F:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFFBE5CA34BDD9BE9E6390 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39873da3-8881-3459-ad71-33da20d3da5e.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 73.202.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:fb:e5:ca:34:bd:d9:be:9e:63:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=dc09d8eb-73fe-4e2e-a306-500b8fc97540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:25:d9:6a:95:5c:34:5d:6d:1a:5e:41:aa:22: fe:ce:7d:40:53:f4:f0:49:63:05:ba:fe:a8:96:71: e6:f3:f7:7d:81:65:64:a9:98:4b:c9:a5:6d:94:bf: cf:44:80:41:d1:5d:a3:2c:79:46:e7:66:fd:f8:69: 98:ce:15:0d:b1:9f:f7:07:5a:fd:c3:21:c0:02:2a: f7:4d:99:1c:cf:bf:9b:8b:12:85:a9:72:f6:f3:2c: 5d:7e:a3:a3:51:d5:a1:67:52:c3:40:c8:06:9c:5e: 2e:6a:f9:80:78:e7:fc:25:f4:ca:a0:56:76:7b:bc: 36:c0:f3:29:b9:73:55:bd:f6:bf:f1:9a:81:b0:0f: b1:d6:d1:b7:d9:80:e6:7c:72:36:fd:3e:5f:6f:33: 39:52:95:00:af:66:fb:fe:48:86:04:cc:a5:a1:1f: ef:db:06:e3:6e:61:67:26:ca:29:06:42:84:cd:09: 56:37:2a:0c:3e:c5:8d:db:08:02:2d:b4:94:d0:bc: e6:7c:ae:79:6f:35:94:6b:5c:da:26:89:7d:58:4b: 5f:52:66:2e:9f:b5:31:ac:4a:3f:24:52:5e:60:de: 88:60:e0:a0:5b:e3:48:8d:a7:fc:e6:a4:7d:50:1e: 0c:ed:5f:e0:13:8c:52:82:95:eb:8d:30:47:ae:f9: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:05:FC:E2:BC:F7:DA:D4:D0:5D:72:58:CB:FB:0D:DA:41:3F:9F:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39873da3-8881-3459-ad71-33da20d3da5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.202.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:67:8a:a3:bc:31:1c:b1:18:b2:22:da:85:a9:ea:32:35:d8: 17:e3:a4:a9:e6:c8:6c:f8:87:32:ef:76:32:60:d2:89:94:0f: 1c:9a:06:65:10:6c:cb:cc:16:15:5e:9b:53:0b:f7:c4:30:50: 21:6b:82:b8:91:92:d3:73:6f:24:46:0a:83:b4:a0:18:22:e5: e4:c5:08:f2:b7:e0:b9:61:cf:01:90:e3:5b:eb:a9:85:18:d2: 4a:87:55:42:36:b5:fa:98:76:6c:28:e9:84:d2:28:34:e1:a9: a3:86:78:8b:be:53:c4:92:ef:28:3a:11:fd:e5:cf:a5:af:d6: 13:00:ad:97:5f:c3:b7:ab:42:24:04:52:18:de:4e:d0:93:f1: ff:78:a1:71:67:9d:67:08:33:bf:6c:00:a0:dd:7e:ca:84:de: d5:8c:7f:ad:82:f0:a1:42:22:7b:e4:be:84:ef:b4:f0:f6:7f: be:cb:0d:57:4b:ec:0e:e8:33:a6:6f:45:6c:1a:7e:60:a0:c1: fb:0c:55:96:ef:a8:91:bc:4b:1c:e7:c2:3c:2d:f1:77:5f:6a: 74:9e:5c:39:7d:43:5e:28:05:4b:4a:a3:de:fb:1c:9e:c1:d0: c3:55:21:36:4e:23:84:59:d8:b7:b2:13:1b:da:4d:5c:3c:31: eb:30:a6:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr/vlyjS92b6eY5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZGMwOWQ4ZWItNzNmZS00ZTJlLWEzMDYtNTAwYjhmYzk3NTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyXZapVcNF1tGl5BqiL+zn1AU/TwSWMFuv6o lnHm8/d9gWVkqZhLyaVtlL/PRIBB0V2jLHlG52b9+GmYzhUNsZ/3B1r9wyHAAir3 TZkcz7+bixKFqXL28yxdfqOjUdWhZ1LDQMgGnF4uavmAeOf8JfTKoFZ2e7w2wPMp uXNVvfa/8ZqBsA+x1tG32YDmfHI2/T5fbzM5UpUAr2b7/kiGBMyloR/v2wbjbmFn JsopBkKEzQlWNyoMPsWN2wgCLbSU0LzmfK55bzWUa1zaJol9WEtfUmYun7UxrEo/ JFJeYN6IYOCgW+NIjaf85qR9UB4M7V/gE4xSgpXrjTBHrvnI1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8F/OK899rU0F1yWMv7DdpBP59RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk4NzNkYTMtODg4MS0z NDU5LWFkNzEtMzNkYTIwZDNkYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCScp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNniqO8MRyxGLIi2oWp6jI12BfjpKnmyGz4hzLvdjJg0omUDxyaBmUQ bMvMFhVem1ML98QwUCFrgriRktNzbyRGCoO0oBgi5eTFCPK34LlhzwGQ41vrqYUY 0kqHVUI2tfqYdmwo6YTSKDThqaOGeIu+U8SS7yg6Ef3lz6Wv1hMArZdfw7erQiQE UhjeTtCT8f94oXFnnWcIM79sAKDdfsqE3tWMf62C8KFCInvkvoTvtPD2f77LDVdL 7A7oM6ZvRWwafmCgwfsMVZbvqJG8Sxznwjwt8XdfanSeXDl9Q14oBUtKo977HJ7B 0MNVITZOI4RZ2LeyExvaTVw8MeswpqM= -----END CERTIFICATE-----Generated at Mon Apr 7 09:41:50 2025 by rpki-client