$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c9501f5-2b60-3ffc-a5ba-66b9cecd9be8.roa File: 3c9501f5-2b60-3ffc-a5ba-66b9cecd9be8.roa (raw, json) Hash identifier: 0y3HX89koOgCikR3Y2Uhq14wExjL9CSctaeEtO9bmUk= Subject key identifier: AC:1F:70:0B:5A:02:69:50:60:C1:6A:0B:B5:4C:9C:6B:84:C3:AE:7D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F898DB753E35EBA11E1A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c9501f5-2b60-3ffc-a5ba-66b9cecd9be8.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 73.234.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:98:db:75:3e:35:eb:a1:1e:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d8f49687-9b1e-4a06-a820-4ca0993d6bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6c:c2:41:a5:d1:45:6b:c9:c5:91:d5:ee:7c: 30:20:2a:fc:56:47:7d:ab:2b:b7:ae:f1:53:55:43: 27:f5:3f:00:f9:48:d5:ca:7e:00:8c:81:86:61:dc: de:f5:b7:33:1f:65:9f:ed:9f:41:c6:0d:81:98:31: b9:e0:b3:e4:56:37:46:75:b6:15:dc:63:96:7d:99: cb:e2:c7:59:9c:7a:9f:e3:44:47:ac:39:36:b5:1b: 7d:d9:25:c5:b1:ab:0e:6d:f5:60:3a:18:29:07:a2: 38:d5:c1:de:3c:c5:63:18:64:9a:58:76:b4:e4:f6: 85:d8:02:cc:e9:14:23:22:6e:c0:c4:74:76:e3:19: 1e:01:f5:7f:c7:b6:fd:70:8b:a2:94:d7:2d:78:9a: 4e:9d:97:2a:c5:4c:c1:40:2d:10:46:f9:52:ca:1d: e7:b8:5d:5b:d1:db:39:bf:57:1e:3b:6d:d8:5f:a6: 10:35:4c:87:d4:f4:63:01:8d:2d:ea:96:c5:52:2f: 34:19:cd:3f:9d:ec:c8:4c:01:1d:cb:5e:d0:21:71: 1a:ba:87:de:7e:30:68:1b:e5:ac:26:6d:f6:36:4b: 50:77:b8:81:4f:bf:8f:b5:f7:92:15:3f:f0:38:fb: a5:b3:10:75:f3:d3:86:39:b7:84:70:d1:72:9a:9b: da:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1F:70:0B:5A:02:69:50:60:C1:6A:0B:B5:4C:9C:6B:84:C3:AE:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c9501f5-2b60-3ffc-a5ba-66b9cecd9be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.234.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:56:5e:e2:66:93:e0:55:37:70:dc:d1:c7:fa:bb:d9:5b:e8: 10:57:56:7e:e6:03:88:84:15:b7:05:3a:d9:8c:40:56:5d:d4: 3c:d8:6e:2d:b4:f8:c7:0f:69:7f:f0:41:51:f4:e5:12:c9:88: 97:4e:62:5c:b4:b3:d5:96:f9:bd:99:86:1d:48:ff:d8:ad:a0: 74:e3:d1:70:5f:3f:9a:6f:1a:44:67:43:82:57:9f:68:74:51: 66:da:cf:9e:15:b0:2c:d6:81:66:69:61:68:3a:b7:4e:82:9d: 5c:8c:db:e6:48:9a:aa:30:ae:81:db:57:2f:ae:e9:09:a4:58: bb:93:88:77:02:21:06:52:b4:22:a1:a3:30:10:57:4c:1d:de: 86:3f:bc:f8:ed:c1:f8:17:bf:1f:d6:f3:08:99:f5:87:f7:20: 42:c0:c0:ef:1f:a5:62:d8:26:ff:fe:05:06:3a:73:22:e8:96: f8:72:34:db:76:a8:03:0b:bc:05:30:99:31:84:ab:e7:77:c2: d9:75:01:bd:ca:23:2f:49:2a:a9:9f:b3:fb:5c:02:c8:13:cd: 4a:73:c3:b9:63:27:fd:19:03:8b:da:06:5d:37:a7:d8:83:04: e7:bb:70:22:dd:fb:08:2d:b4:44:80:77:a5:80:bd:fe:d2:a1: 17:23:37:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+JjbdT4166EeGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDhmNDk2ODctOWIxZS00YTA2LWE4MjAtNGNhMDk5M2Q2YmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGzCQaXRRWvJxZHV7nwwICr8Vkd9qyu3rvFT VUMn9T8A+UjVyn4AjIGGYdze9bczH2Wf7Z9Bxg2BmDG54LPkVjdGdbYV3GOWfZnL 4sdZnHqf40RHrDk2tRt92SXFsasObfVgOhgpB6I41cHePMVjGGSaWHa05PaF2ALM 6RQjIm7AxHR24xkeAfV/x7b9cIuilNcteJpOnZcqxUzBQC0QRvlSyh3nuF1b0ds5 v1ceO23YX6YQNUyH1PRjAY0t6pbFUi80Gc0/nezITAEdy17QIXEauofefjBoG+Ws Jm32NktQd7iBT7+PtfeSFT/wOPulsxB189OGObeEcNFympvaywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwfcAtaAmlQYMFqC7VMnGuEw659MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M5NTAxZjUtMmI2MC0z ZmZjLWE1YmEtNjZiOWNlY2Q5YmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9WXuJmk+BVN3Dc0cf6u9lb6BBXVn7mA4iEFbcFOtmMQFZd1DzYbi20 +McPaX/wQVH05RLJiJdOYly0s9WW+b2Zhh1I/9itoHTj0XBfP5pvGkRnQ4JXn2h0 UWbaz54VsCzWgWZpYWg6t06CnVyM2+ZImqowroHbVy+u6QmkWLuTiHcCIQZStCKh ozAQV0wd3oY/vPjtwfgXvx/W8wiZ9Yf3IELAwO8fpWLYJv/+BQY6cyLolvhyNNt2 qAMLvAUwmTGEq+d3wtl1Ab3KIy9JKqmfs/tcAsgTzUpzw7ljJ/0ZA4vaBl03p9iD BOe7cCLd+wgttESAd6WAvf7SoRcjN5w= -----END CERTIFICATE-----Generated at Sun Apr 6 12:01:59 2025 by rpki-client