$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ade92de-8ba3-31f1-9258-3724dc26a701.roa File: 3ade92de-8ba3-31f1-9258-3724dc26a701.roa (raw, json) Hash identifier: dDfto+G4Hbp6jVy8G4rJZA1a0rhHxtiWZ5iFqwZ1Xso= Subject key identifier: 1B:74:CA:38:53:9E:35:9F:4B:1E:F9:AD:BF:9E:BC:B3:F4:47:D0:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F92625924D3C502AD89700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ade92de-8ba3-31f1-9258-3724dc26a701.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 73.206.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:26:25:92:4d:3c:50:2a:d8:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=1db338bd-77d4-48b7-9638-ec470d8e28ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:86:82:49:e8:92:29:21:05:28:62:67:33: 12:25:31:a0:70:c6:c2:6a:6a:cd:ca:64:8f:ea:b9: da:35:d3:40:da:6a:0c:8e:72:f0:cf:93:3a:05:b9: 13:42:21:20:8a:79:27:db:22:de:18:43:f0:bd:55: d3:6a:33:67:44:07:bf:d5:4b:15:56:bb:83:f4:ca: 96:32:ee:32:45:d8:80:52:67:68:c5:8d:eb:1b:e9: 07:89:99:5d:55:be:16:92:20:94:42:32:a6:27:64: 8d:46:1d:67:6c:3c:86:90:72:9e:3c:95:60:b7:38: bd:e1:38:55:c8:7d:9b:d7:01:da:8e:3c:45:3d:a7: f1:e2:d1:19:60:45:50:42:21:cb:c5:e3:2c:5c:cd: e6:88:cc:21:a5:17:38:a1:bf:df:1b:ee:63:dc:e7: 57:e1:ce:61:21:01:ba:4f:9e:b1:74:99:ab:7c:55: c6:54:33:d4:e0:06:c3:fa:e0:39:c1:d8:fb:28:f5: 8e:c4:38:23:18:6f:ee:a6:80:24:4a:e1:e3:5d:8a: 21:93:ae:f2:ae:36:fa:0e:31:b7:fb:67:5c:8e:5a: 7d:d6:c1:41:86:43:42:3d:33:d0:f4:47:d9:3b:18: 18:54:84:cf:19:81:8a:35:0b:01:1c:8f:e9:57:c0: 8f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:74:CA:38:53:9E:35:9F:4B:1E:F9:AD:BF:9E:BC:B3:F4:47:D0:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ade92de-8ba3-31f1-9258-3724dc26a701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.206.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:2d:1d:aa:88:fc:6a:d9:f0:32:57:2e:0a:ee:76:c8:da:41: 4a:15:c1:73:ba:f1:7a:61:b6:e8:f2:03:54:d7:b4:1a:4e:6b: 01:5f:54:eb:38:c6:69:ea:07:94:e2:19:d0:6e:d5:91:09:9b: e5:f9:22:3a:c7:5f:1c:a9:8d:98:2b:00:81:59:96:c5:d0:7a: 07:e6:59:d9:6f:49:ee:ee:6a:0d:b5:3d:a3:36:de:e7:2d:2a: 95:04:b8:71:69:0a:23:08:3f:29:59:de:cd:7b:b5:80:ee:6c: 3c:c9:7e:57:4f:9d:0f:5f:49:ff:23:e0:ac:92:6d:75:62:c7: 67:05:b1:0d:13:14:d0:7d:31:ac:9d:5f:53:e8:e7:cc:6f:16: 2d:9d:38:e2:40:bc:18:00:86:c6:bc:71:c9:da:d5:e3:86:02: 7f:f0:8b:ea:bf:b7:21:1b:7c:50:51:b2:ab:65:66:8c:56:a5: 55:7f:75:3c:14:d1:c3:41:1f:a3:ea:3e:12:39:40:7a:11:ad: c7:1b:37:2f:dd:fa:94:02:12:6d:bc:06:5f:4e:92:71:19:14: db:5f:7c:51:02:f9:37:1d:e4:dd:68:30:b0:02:40:ac:7c:53: 19:51:a4:7b:74:a3:4e:75:c2:d2:30:80:8f:af:fb:72:c5:06: 72:30:35:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+SYlkk08UCrYlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MWRiMzM4YmQtNzdkNC00OGI3LTk2MzgtZWM0NzBkOGUyOGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1iGgknokikhBShiZzMSJTGgcMbCamrNymSP 6rnaNdNA2moMjnLwz5M6BbkTQiEginkn2yLeGEPwvVXTajNnRAe/1UsVVruD9MqW Mu4yRdiAUmdoxY3rG+kHiZldVb4WkiCUQjKmJ2SNRh1nbDyGkHKePJVgtzi94ThV yH2b1wHajjxFPafx4tEZYEVQQiHLxeMsXM3miMwhpRc4ob/fG+5j3OdX4c5hIQG6 T56xdJmrfFXGVDPU4AbD+uA5wdj7KPWOxDgjGG/upoAkSuHjXYohk67yrjb6DjG3 +2dcjlp91sFBhkNCPTPQ9EfZOxgYVITPGYGKNQsBHI/pV8CPqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBt0yjhTnjWfSx75rb+evLP0R9DJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FkZTkyZGUtOGJhMy0z MWYxLTkyNTgtMzcyNGRjMjZhNzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSc6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEtHaqI/GrZ8DJXLgrudsjaQUoVwXO68XphtujyA1TXtBpOawFfVOs4 xmnqB5TiGdBu1ZEJm+X5IjrHXxypjZgrAIFZlsXQegfmWdlvSe7uag21PaM23uct KpUEuHFpCiMIPylZ3s17tYDubDzJfldPnQ9fSf8j4KySbXVix2cFsQ0TFNB9Mayd X1Po58xvFi2dOOJAvBgAhsa8ccna1eOGAn/wi+q/tyEbfFBRsqtlZoxWpVV/dTwU 0cNBH6PqPhI5QHoRrccbNy/d+pQCEm28Bl9OknEZFNtffFEC+Tcd5N1oMLACQKx8 UxlRpHt0o051wtIwgI+v+3LFBnIwNfQ= -----END CERTIFICATE-----Generated at Mon Apr 7 09:43:21 2025 by rpki-client