$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44ead171-6c58-377a-8661-bc0431fc8ba6.roa File: 44ead171-6c58-377a-8661-bc0431fc8ba6.roa (raw, json) Hash identifier: cxuv6ygO7zZDY78K+GDXlCSCfAyNGaB8b5G7YeBRn4A= Subject key identifier: C7:20:58:25:6F:D4:EF:20:14:2D:67:74:96:C4:16:63:FB:05:8B:5B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8746DBD3209F0E4417880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44ead171-6c58-377a-8661-bc0431fc8ba6.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 73.123.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:74:6d:bd:32:09:f0:e4:41:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=85c52509-17a1-443a-b803-96b983cb975d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:52:7b:b7:27:d1:bd:02:cc:de:96:7a:79: 8f:0b:24:fc:39:cf:18:a2:1a:70:42:b7:58:a3:2c: c9:11:4e:ee:1b:2b:54:2b:46:0a:15:57:a2:c8:69: 60:06:fb:81:e3:34:5c:d2:c6:b1:84:dd:3a:89:f7: 9e:31:7d:25:22:b6:e1:77:6d:7d:8a:9b:50:64:a6: e9:4d:e2:8e:67:90:75:c5:17:d6:1e:2d:c2:5b:6a: d7:b9:86:a6:a9:44:d3:77:f1:19:e9:2d:4e:70:5b: b3:55:b1:bb:94:99:f5:08:f9:e4:d8:ed:77:29:73: a0:71:08:f7:91:81:2d:45:18:8a:50:b8:7a:c1:e2: d8:2f:1f:97:9b:a3:2e:29:57:78:3b:fc:64:d1:65: 52:22:12:e0:d8:db:51:32:ff:aa:6f:cc:86:76:75: 26:45:e5:ee:63:ec:1d:cc:33:1f:ef:90:ac:ac:ad: c2:46:63:b9:0d:51:8b:50:d4:cd:10:ca:e8:fa:c0: 39:34:b5:09:3b:d2:b9:ab:17:29:e1:d1:36:31:25: af:13:03:70:0e:62:f1:4e:fd:e2:b4:f5:9a:96:78: 4d:8b:8e:21:fa:5e:d6:5e:8f:e6:35:4d:db:f8:1c: 55:56:79:69:f8:95:fb:3c:0e:34:85:37:28:a7:9d: 2a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:20:58:25:6F:D4:EF:20:14:2D:67:74:96:C4:16:63:FB:05:8B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/44ead171-6c58-377a-8661-bc0431fc8ba6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.123.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:3a:c7:bc:50:07:ea:c2:d6:49:d2:61:42:b7:4c:34:fa:a8: 7a:f7:bb:4d:4b:87:d7:7e:17:cc:9a:f1:ea:50:26:c9:04:93: af:3e:db:2a:e4:88:9c:ee:e7:09:c9:ff:0e:d8:f2:57:c9:d7: f4:93:2f:fb:ca:9b:04:e1:f8:f9:23:65:1b:b1:19:22:77:1c: 88:45:ad:64:69:e7:7b:c8:d1:4a:c8:42:0c:f8:30:f3:c8:d7: 12:52:5a:ce:ce:3c:fc:fa:19:30:ce:fd:28:35:30:65:55:cb: 1f:e8:12:7e:9b:d3:96:21:15:cc:a4:03:ba:f9:09:6a:10:0d: 04:78:54:49:64:0d:9e:cd:3f:9a:01:9b:0c:01:62:b2:7d:78: bf:ae:f6:00:78:b3:10:0a:23:9b:08:1e:e8:78:ea:e6:02:8e: 18:d6:c2:a6:44:47:2a:8c:d3:26:13:2c:e7:67:4e:c2:c8:e3: 45:37:52:26:72:c8:d8:37:7b:4f:e8:f4:01:a2:d7:8c:a3:73: 62:db:38:47:9f:63:e5:52:f6:f6:c3:e3:ce:6f:3d:07:e3:bc: 56:d2:bb:4a:f4:32:00:55:ca:97:c5:46:83:59:6a:0c:9b:38: 45:a4:29:af:94:c4:08:9d:98:ea:55:a3:0d:ad:92:04:85:f1: bd:0e:8d:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+HRtvTIJ8ORBeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ODVjNTI1MDktMTdhMS00NDNhLWI4MDMtOTZiOTgzY2I5NzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdJSe7cn0b0CzN6WenmPCyT8Oc8YohpwQrdY oyzJEU7uGytUK0YKFVeiyGlgBvuB4zRc0saxhN06ifeeMX0lIrbhd219iptQZKbp TeKOZ5B1xRfWHi3CW2rXuYamqUTTd/EZ6S1OcFuzVbG7lJn1CPnk2O13KXOgcQj3 kYEtRRiKULh6weLYLx+Xm6MuKVd4O/xk0WVSIhLg2NtRMv+qb8yGdnUmReXuY+wd zDMf75CsrK3CRmO5DVGLUNTNEMro+sA5NLUJO9K5qxcp4dE2MSWvEwNwDmLxTv3i tPWalnhNi44h+l7WXo/mNU3b+BxVVnlp+JX7PA40hTcop50qhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcgWCVv1O8gFC1ndJbEFmP7BYtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDRlYWQxNzEtNmM1OC0z NzdhLTg2NjEtYmMwNDMxZmM4YmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSXvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGw6x7xQB+rC1knSYUK3TDT6qHr3u01Lh9d+F8ya8epQJskEk68+2yrk iJzu5wnJ/w7Y8lfJ1/STL/vKmwTh+PkjZRuxGSJ3HIhFrWRp53vI0UrIQgz4MPPI 1xJSWs7OPPz6GTDO/Sg1MGVVyx/oEn6b05YhFcykA7r5CWoQDQR4VElkDZ7NP5oB mwwBYrJ9eL+u9gB4sxAKI5sIHuh46uYCjhjWwqZERyqM0yYTLOdnTsLI40U3UiZy yNg3e0/o9AGi14yjc2LbOEefY+VS9vbD485vPQfjvFbSu0r0MgBVypfFRoNZagyb OEWkKa+UxAidmOpVow2tkgSF8b0Ojdg= -----END CERTIFICATE-----Generated at Sun Apr 6 12:10:39 2025 by rpki-client