$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48be08a8-3c77-3b8a-9880-432f853d21b7.roa File: 48be08a8-3c77-3b8a-9880-432f853d21b7.roa (raw, json) Hash identifier: EGMKXiZReQ1jq9fdsQqQPvzl4PiCGfeB8wn6OfFUVOA= Subject key identifier: B4:24:CE:1D:6E:9E:36:66:33:B5:47:10:04:7E:0E:DB:19:8A:7A:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAEED1D2C2EED851C48DC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48be08a8-3c77-3b8a-9880-432f853d21b7.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 73.226.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:ed:1d:2c:2e:ed:85:1c:48:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f8a1cfb8-a636-4a8e-b042-af2a51fe9500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1c:16:76:3f:b7:9b:f3:df:5b:08:48:7d:dd: a6:e2:d2:ff:93:fa:b4:3d:90:6b:80:e2:95:64:07: ce:2a:7e:65:2d:61:d9:0d:10:c1:6b:b2:1f:42:5b: 10:1d:38:1e:16:4a:72:ed:32:46:e0:37:d5:ab:47: bd:c4:37:14:76:9b:e6:4e:05:e0:29:31:bd:3f:5c: c7:59:c8:ba:db:b9:79:f0:3b:0c:a6:34:33:e0:2a: 6a:a6:43:e5:df:72:f7:a3:de:52:66:0c:95:75:ee: 5c:b7:ea:55:03:c9:49:6e:ab:24:de:c7:1f:a2:67: 6a:60:2f:cb:a8:35:d4:5b:e6:41:63:8f:f5:30:de: 0c:05:a3:c8:1c:0d:35:52:96:bf:dc:30:df:14:e0: 24:71:95:8c:ee:89:1c:47:b3:31:db:88:da:03:44: 04:a9:2a:48:29:b1:57:dd:8a:95:f7:d2:ac:af:1b: f5:53:53:68:b3:d4:38:02:41:4a:60:26:6f:65:81: c1:6e:df:21:2e:91:4b:b6:ee:df:f8:d3:e1:73:59: 75:7d:3a:05:d3:79:cf:c6:9f:70:95:af:3f:88:5f: bc:23:2a:98:1a:57:91:6b:49:13:e6:79:28:62:ca: df:15:aa:4b:6e:73:eb:20:7b:67:70:6d:82:ec:02: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:24:CE:1D:6E:9E:36:66:33:B5:47:10:04:7E:0E:DB:19:8A:7A:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48be08a8-3c77-3b8a-9880-432f853d21b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.226.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:19:21:9d:c6:72:d0:e5:47:16:57:9e:65:6c:51:20:8a:54: b5:6a:8b:4e:c7:e0:53:6a:3b:98:bf:2d:ff:92:97:db:c5:93: e2:4c:af:6a:40:30:77:17:70:bc:bc:d7:24:f0:be:61:61:03: 29:d2:af:ee:7e:f7:e2:79:6f:bd:c2:dd:f7:c6:0f:df:c8:86: 7a:7c:13:1e:9d:3a:48:86:63:d9:43:13:e2:92:2c:53:ef:ce: 71:51:43:49:4b:1d:08:68:80:6e:c5:53:0b:2d:c9:74:9e:54: 54:38:8f:c6:b0:38:1b:8f:61:88:00:67:06:76:9c:e9:43:bc: cf:4a:aa:50:4d:32:40:00:13:8c:84:90:e8:c2:dd:67:da:06: b1:42:bd:1c:ff:5f:19:d2:d7:7f:e1:b3:69:cc:46:62:cc:dc: 51:64:6e:f9:ee:ac:88:d8:95:16:0d:29:dc:85:4d:33:ad:97: 12:7d:6f:6c:23:58:88:cc:63:ab:ae:a7:97:18:8c:86:19:24: 59:3c:1e:0b:96:b8:b1:dc:0c:b3:6a:46:4e:ba:3f:32:43:c5: 21:96:17:7c:3c:ad:5e:47:b3:e6:a3:63:3c:b9:9f:34:78:8f: d5:87:4a:76:44:42:b2:88:32:59:8f:8d:84:d2:2c:1a:ca:1d: 01:eb:12:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksru0dLC7thRxI3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjhhMWNmYjgtYTYzNi00YThlLWIwNDItYWYyYTUxZmU5NTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxwWdj+3m/PfWwhIfd2m4tL/k/q0PZBrgOKV ZAfOKn5lLWHZDRDBa7IfQlsQHTgeFkpy7TJG4DfVq0e9xDcUdpvmTgXgKTG9P1zH Wci627l58DsMpjQz4CpqpkPl33L3o95SZgyVde5ct+pVA8lJbqsk3scfomdqYC/L qDXUW+ZBY4/1MN4MBaPIHA01Upa/3DDfFOAkcZWM7okcR7Mx24jaA0QEqSpIKbFX 3YqV99Ksrxv1U1Nos9Q4AkFKYCZvZYHBbt8hLpFLtu7f+NPhc1l1fToF03nPxp9w la8/iF+8IyqYGleRa0kT5nkoYsrfFapLbnPrIHtncG2C7AIQZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQkzh1unjZmM7VHEAR+DtsZinqhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDhiZTA4YTgtM2M3Ny0z YjhhLTk4ODAtNDMyZjg1M2QyMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeJ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQZIZ3GctDlRxZXnmVsUSCKVLVqi07H4FNqO5i/Lf+Sl9vFk+JMr2pA MHcXcLy81yTwvmFhAynSr+5+9+J5b73C3ffGD9/Ihnp8Ex6dOkiGY9lDE+KSLFPv znFRQ0lLHQhogG7FUwstyXSeVFQ4j8awOBuPYYgAZwZ2nOlDvM9KqlBNMkAAE4yE kOjC3WfaBrFCvRz/XxnS13/hs2nMRmLM3FFkbvnurIjYlRYNKdyFTTOtlxJ9b2wj WIjMY6uup5cYjIYZJFk8HguWuLHcDLNqRk66PzJDxSGWF3w8rV5Hs+ajYzy5nzR4 j9WHSnZEQrKIMlmPjYTSLBrKHQHrEgA= -----END CERTIFICATE-----Generated at Sun Apr 6 19:15:16 2025 by rpki-client