$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45149432-a83a-35b5-9bed-268644e93868.roa File: 45149432-a83a-35b5-9bed-268644e93868.roa (raw, json) Hash identifier: VdMoE6NV6G9I1U0qQUPv97dQaYBpNEx8eJ74An4g5f4= Subject key identifier: 51:39:1C:ED:C4:81:11:BD:BA:AA:42:6C:02:D8:EA:4E:94:1E:6B:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F88E6835B843B16B4724C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45149432-a83a-35b5-9bed-268644e93868.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 73.218.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:8e:68:35:b8:43:b1:6b:47:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=92f0668f-0383-4c7d-b40d-fea614917996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a2:50:d3:39:f1:96:a1:6f:8e:b4:4b:33:7d: ce:ae:e0:d7:2b:cb:49:d4:25:fb:19:ab:83:58:ce: a4:70:6d:7f:da:92:8c:82:26:25:1f:6d:6c:fa:4a: e9:8c:52:ed:ff:a7:e7:18:08:82:6d:f6:25:93:08: a1:2a:c9:c8:76:d5:79:f5:73:f1:fb:90:3b:af:68: a7:57:a2:26:a5:23:21:26:f6:8b:59:2c:03:a1:48: fb:5f:c9:9f:09:25:1b:e9:73:d2:4e:3a:c9:a9:8d: 62:1c:3b:20:11:f3:59:7e:9d:17:1b:03:ea:cf:37: 6e:e9:c3:90:de:8c:e3:be:97:6b:0e:84:cc:8d:23: ec:55:24:6e:ee:66:fe:c5:03:a4:fd:24:34:65:01: 43:4b:8e:a5:a3:ce:fb:ac:da:20:de:5f:50:87:9c: 01:35:89:5c:12:69:fd:e5:eb:e4:b3:e2:33:64:52: 2c:a1:55:cd:e4:0b:e2:a6:be:8d:82:45:b4:37:a3: 9f:74:c8:81:9b:70:82:73:b2:0f:e6:ae:c4:81:a7: 83:d8:eb:f3:27:6b:97:70:2e:ab:4e:e0:8c:98:77: 28:1d:49:37:88:db:40:15:3f:7d:ef:0b:1b:84:a9: f7:a5:36:c2:36:21:4f:4c:f4:31:10:da:0f:5e:6f: 56:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:39:1C:ED:C4:81:11:BD:BA:AA:42:6C:02:D8:EA:4E:94:1E:6B:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45149432-a83a-35b5-9bed-268644e93868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.218.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:1f:4f:9c:c4:f3:ed:6d:ca:73:7e:9b:d4:80:d2:ed:0b:f8: e8:bb:16:90:fc:8a:7e:4f:ec:89:3d:f9:8b:f4:6a:6f:a8:7c: 21:d5:63:06:1a:c1:48:38:09:fc:ae:fb:e7:fd:78:35:54:48: 0f:18:75:20:ae:1e:3d:47:7f:a9:91:b5:83:c9:53:3d:d1:63: 09:1f:49:58:7a:91:12:c3:33:ec:62:ee:24:35:76:ff:47:aa: c2:24:0d:3e:10:85:3e:29:30:fc:ce:71:07:5a:85:f2:dc:2d: 39:61:0c:2a:94:0a:22:19:48:01:fa:ff:7b:55:dc:3d:da:69: 2d:fa:ca:ad:d2:b7:c6:16:1d:84:45:ae:ce:4a:b7:8a:ab:c0: f1:52:ce:6c:8f:9e:80:1c:d0:4a:83:30:9c:b6:3c:ef:41:1b: a7:21:c8:dc:35:1f:38:4a:a7:f8:83:00:6d:0a:58:44:52:a6: 2d:76:d8:db:ee:43:4f:90:3a:53:de:c0:1e:8d:8e:eb:66:f3: 86:64:c3:0f:a5:b4:05:02:43:5b:2e:4e:1e:06:4c:7f:a8:af: 26:f2:d2:1d:f2:02:19:0c:ae:91:8a:99:0f:76:c1:b7:7e:7e: 4a:04:5a:b6:19:23:b0:73:c6:45:50:51:d1:b8:c1:f2:b5:83: a4:4b:da:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+I5oNbhDsWtHJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OTJmMDY2OGYtMDM4My00YzdkLWI0MGQtZmVhNjE0OTE3OTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaJQ0znxlqFvjrRLM33OruDXK8tJ1CX7GauD WM6kcG1/2pKMgiYlH21s+krpjFLt/6fnGAiCbfYlkwihKsnIdtV59XPx+5A7r2in V6ImpSMhJvaLWSwDoUj7X8mfCSUb6XPSTjrJqY1iHDsgEfNZfp0XGwPqzzdu6cOQ 3ozjvpdrDoTMjSPsVSRu7mb+xQOk/SQ0ZQFDS46lo877rNog3l9Qh5wBNYlcEmn9 5evks+IzZFIsoVXN5Avipr6NgkW0N6OfdMiBm3CCc7IP5q7EgaeD2OvzJ2uXcC6r TuCMmHcoHUk3iNtAFT997wsbhKn3pTbCNiFPTPQxENoPXm9WGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFE5HO3EgRG9uqpCbALY6k6UHmsDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDUxNDk0MzItYTgzYS0z NWI1LTliZWQtMjY4NjQ0ZTkzODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdqKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8fT5zE8+1tynN+m9SA0u0L+Oi7FpD8in5P7Ik9+Yv0am+ofCHVYwYa wUg4Cfyu++f9eDVUSA8YdSCuHj1Hf6mRtYPJUz3RYwkfSVh6kRLDM+xi7iQ1dv9H qsIkDT4QhT4pMPzOcQdahfLcLTlhDCqUCiIZSAH6/3tV3D3aaS36yq3St8YWHYRF rs5Kt4qrwPFSzmyPnoAc0EqDMJy2PO9BG6chyNw1HzhKp/iDAG0KWERSpi122Nvu Q0+QOlPewB6Njutm84Zkww+ltAUCQ1suTh4GTH+oryby0h3yAhkMrpGKmQ92wbd+ fkoEWrYZI7BzxkVQUdG4wfK1g6RL2kQ= -----END CERTIFICATE-----Generated at Sun Apr 6 15:08:45 2025 by rpki-client