$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/409028a4-4947-3141-b12a-fa6a3b6b9020.roa File: 409028a4-4947-3141-b12a-fa6a3b6b9020.roa (raw, json) Hash identifier: e46HgfhfaqmpPeRfPKpxT65RmYdZmoz7cvk12VUZnhU= Subject key identifier: 3B:A7:3E:CB:92:E2:A3:EE:0C:90:95:A8:6F:0C:12:94:C7:84:3F:33 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAEABC2D6EFCD28B34B1480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/409028a4-4947-3141-b12a-fa6a3b6b9020.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33660 IP address blocks: 73.65.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:ab:c2:d6:ef:cd:28:b3:4b:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=d65d25ad-b017-4577-8ac9-50b2c60a8a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a6:91:a3:d5:76:89:9d:b1:71:b1:0f:6d:d3: d8:1b:e2:1e:1a:49:e9:0c:34:d7:4c:3e:1e:e0:09: 7f:bc:e1:af:2f:e1:4c:15:a6:2e:41:1f:98:7c:0a: d8:fb:1a:dc:ab:4b:9d:fb:63:81:eb:f4:f6:95:e1: a3:88:45:5e:4c:7c:18:59:51:17:48:50:6e:4a:77: ff:5d:14:0d:0c:b4:37:2f:77:e1:d8:1d:45:1b:ca: 66:4d:34:9c:8b:41:91:93:7e:aa:90:fb:9f:c3:6f: 9a:5a:c2:3b:9a:de:84:d4:0e:d7:8a:e6:c1:8c:49: 33:f6:ae:ba:f1:2c:04:71:85:ad:0b:7a:72:bf:f4: 6e:9e:fd:3b:5a:c8:e4:11:e1:a9:25:28:04:48:3f: ab:cb:4a:0d:78:12:e1:e0:ca:af:72:59:80:d9:d0: 49:6a:7b:cc:68:01:5e:86:d4:cb:01:aa:88:98:1d: af:19:39:4a:d4:19:4b:3a:6c:fc:4c:77:0d:4b:a4: b6:b3:c8:6b:eb:1a:3c:03:71:3b:6e:f6:db:44:15: a9:92:13:23:69:6d:21:11:4c:83:b7:62:9c:cd:e8: 9a:a9:15:a5:13:91:ed:29:40:34:8c:51:a8:7c:5d: de:01:bc:22:dc:78:49:a2:7e:d6:f9:0e:a9:d0:c6: 35:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A7:3E:CB:92:E2:A3:EE:0C:90:95:A8:6F:0C:12:94:C7:84:3F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/409028a4-4947-3141-b12a-fa6a3b6b9020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.65.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:61:15:7a:15:72:70:82:a0:fc:45:bf:f6:83:c8:6c:5e:86: e5:b8:1f:ff:cf:c8:10:fb:92:df:e4:25:51:36:3e:75:a3:86: ee:e3:da:80:2a:dd:d2:9c:4f:d0:34:31:bd:34:e7:06:f4:f1: d5:44:a1:20:c3:57:79:16:b0:68:66:be:5d:7d:3b:44:d8:a9: b5:61:fc:fa:37:ae:2c:86:02:42:94:c5:e0:47:22:d1:50:13: 43:73:a6:1a:79:2e:47:53:cb:50:62:5e:f0:6c:d3:72:35:61: f9:d6:29:3f:45:d0:8e:b5:e6:bb:d2:18:ac:b3:fe:68:4a:d1: 4b:b0:78:75:df:b8:c1:78:ab:d5:11:3d:45:bb:d2:90:15:2d: 08:e5:d4:a6:30:ad:55:86:ff:4c:73:ad:76:56:c0:51:38:05: f8:1d:7b:88:1c:b8:57:b5:90:29:40:4b:db:6b:59:02:08:e2: c1:02:76:9f:20:40:38:6a:d7:f4:a3:2a:29:26:19:17:eb:10: 85:91:a9:f5:85:bf:57:2a:19:80:b2:ff:ec:13:35:20:02:e5: 9d:03:7c:8d:1b:04:2d:9a:e6:61:ed:bd:de:4b:63:f8:7f:87: ba:27:96:e4:20:49:01:8e:4f:33:bc:18:88:1b:07:20:42:d7: 89:56:a1:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrqvC1u/NKLNLFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDY1ZDI1YWQtYjAxNy00NTc3LThhYzktNTBiMmM2MGE4YTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqaRo9V2iZ2xcbEPbdPYG+IeGknpDDTXTD4e 4Al/vOGvL+FMFaYuQR+YfArY+xrcq0ud+2OB6/T2leGjiEVeTHwYWVEXSFBuSnf/ XRQNDLQ3L3fh2B1FG8pmTTSci0GRk36qkPufw2+aWsI7mt6E1A7XiubBjEkz9q66 8SwEcYWtC3pyv/Runv07WsjkEeGpJSgESD+ry0oNeBLh4MqvclmA2dBJanvMaAFe htTLAaqImB2vGTlK1BlLOmz8THcNS6S2s8hr6xo8A3E7bvbbRBWpkhMjaW0hEUyD t2KczeiaqRWlE5HtKUA0jFGofF3eAbwi3HhJon7W+Q6p0MY1IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDunPsuS4qPuDJCVqG8MEpTHhD8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDA5MDI4YTQtNDk0Ny0z MTQxLWIxMmEtZmE2YTNiNmI5MDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASUGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMRhFXoVcnCCoPxFv/aDyGxehuW4H//PyBD7kt/kJVE2PnWjhu7j2oAq 3dKcT9A0Mb005wb08dVEoSDDV3kWsGhmvl19O0TYqbVh/Po3riyGAkKUxeBHItFQ E0Nzphp5LkdTy1BiXvBs03I1YfnWKT9F0I615rvSGKyz/mhK0UuweHXfuMF4q9UR PUW70pAVLQjl1KYwrVWG/0xzrXZWwFE4Bfgde4gcuFe1kClAS9trWQII4sECdp8g QDhq1/SjKikmGRfrEIWRqfWFv1cqGYCy/+wTNSAC5Z0DfI0bBC2a5mHtvd5LY/h/ h7onluQgSQGOTzO8GIgbByBC14lWocU= -----END CERTIFICATE-----Generated at Mon Apr 7 09:41:42 2025 by rpki-client