$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/499c451c-ee2e-356a-b642-cc16aeaf578a.roa File: 499c451c-ee2e-356a-b642-cc16aeaf578a.roa (raw, json) Hash identifier: fX4kwwhxv/2Y+k0565ueSELPUVgyn1vfD9X1j4xw6D0= Subject key identifier: 45:BC:CC:D9:1A:5F:24:E5:57:3A:62:8C:86:46:C3:E6:29:B9:BB:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF9BE630D32724A7C67980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/499c451c-ee2e-356a-b642-cc16aeaf578a.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 73.74.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:9b:e6:30:d3:27:24:a7:c6:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=183fc32a-b34f-41df-8a3d-540ef4ec7788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:38:1d:ad:df:22:8e:4b:39:09:ce:b9:89:06: 90:37:94:98:15:7f:88:a3:10:ff:7f:cf:a1:90:76: a1:d0:b4:c1:cb:4e:9f:42:82:c3:01:fe:8a:e1:69: f2:4f:6e:53:bc:81:5e:eb:a8:bd:93:0e:15:c2:b1: 25:87:a4:09:b5:34:3e:d1:05:71:21:58:70:81:9c: 25:91:23:84:a2:e7:da:0f:33:37:ba:21:cd:2b:58: e8:40:38:26:a0:e0:4c:7c:56:2a:5b:8e:92:44:5b: 71:33:bc:e9:dc:a0:b7:27:23:b7:bd:a2:e1:6b:66: e0:da:fb:14:d8:17:d8:29:c3:01:eb:4e:75:2d:29: 76:a6:64:f7:04:73:e8:11:63:02:f2:d1:b5:5f:2e: be:7c:ed:e8:3d:76:d4:ab:e1:70:29:2b:21:0c:be: aa:1e:3e:86:75:45:ad:be:32:77:39:f7:c5:a3:15: 0b:a0:a8:2b:6b:6e:6f:a3:af:e6:46:b7:1c:6a:99: 87:54:74:0d:d5:ed:61:00:a1:ce:a3:f2:0a:4d:13: 5f:07:c1:7b:ee:71:5c:70:a3:e2:74:d1:77:76:0a: 40:c8:89:29:95:e0:d0:79:98:3f:f2:41:71:b7:6c: 85:4c:f5:5f:e6:44:d0:17:2d:7d:6f:ec:e2:e1:af: 26:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BC:CC:D9:1A:5F:24:E5:57:3A:62:8C:86:46:C3:E6:29:B9:BB:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/499c451c-ee2e-356a-b642-cc16aeaf578a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.74.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:4e:54:63:62:98:a3:12:ec:52:bd:2d:f7:15:d6:d3:d9:e1: 5b:05:fe:04:55:a0:ef:5a:dc:d1:a3:4e:2c:2c:95:87:e2:ac: 5f:50:8c:e4:f6:33:b8:16:2b:fb:53:dc:2c:c2:29:da:cf:00: 3c:95:7d:3b:55:6a:4c:96:f5:96:5b:af:c4:a5:dc:f2:3a:c8: 07:62:8e:a0:d7:d3:6e:2d:fc:cc:e9:27:2d:2e:f7:83:04:2a: 08:08:2f:98:bb:c7:47:dc:10:5f:0a:92:64:23:66:b1:93:f7: 40:dc:9a:a6:9c:04:36:f4:12:6d:e7:75:3a:fb:85:e8:f6:6d: 59:74:8c:82:34:d8:84:8a:87:1a:3a:0e:9d:f6:6a:4f:48:bd: 2f:83:bc:9c:c7:34:e8:2c:c2:cf:be:7e:12:9e:57:f6:b0:ae: 26:93:4d:16:5c:7c:67:41:46:63:98:7f:27:86:14:2e:06:84: 3c:c3:70:f9:47:bb:32:04:7a:cd:48:c8:4b:2a:1d:09:21:55: 3e:ef:fb:ca:c1:34:11:ff:07:38:af:b0:e7:2a:de:51:c7:b7: d5:df:e6:d0:4b:e3:19:dc:94:e6:23:bb:95:51:42:dc:0d:ef: f1:44:13:e2:ef:eb:6b:87:fe:a9:b5:eb:a9:65:9d:98:be:fd: 80:15:da:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr5vmMNMnJKfGeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MTgzZmMzMmEtYjM0Zi00MWRmLThhM2QtNTQwZWY0ZWM3Nzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDgdrd8ijks5Cc65iQaQN5SYFX+IoxD/f8+h kHah0LTBy06fQoLDAf6K4WnyT25TvIFe66i9kw4VwrElh6QJtTQ+0QVxIVhwgZwl kSOEoufaDzM3uiHNK1joQDgmoOBMfFYqW46SRFtxM7zp3KC3JyO3vaLha2bg2vsU 2BfYKcMB6051LSl2pmT3BHPoEWMC8tG1Xy6+fO3oPXbUq+FwKSshDL6qHj6GdUWt vjJ3OffFoxULoKgra25vo6/mRrccapmHVHQN1e1hAKHOo/IKTRNfB8F77nFccKPi dNF3dgpAyIkpleDQeZg/8kFxt2yFTPVf5kTQFy19b+zi4a8mmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEW8zNkaXyTlVzpijIZGw+YpubtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDk5YzQ1MWMtZWUyZS0z NTZhLWI2NDItY2MxNmFlYWY1NzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSUrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANtOVGNimKMS7FK9LfcV1tPZ4VsF/gRVoO9a3NGjTiwslYfirF9QjOT2 M7gWK/tT3CzCKdrPADyVfTtVakyW9ZZbr8Sl3PI6yAdijqDX024t/MzpJy0u94ME KggIL5i7x0fcEF8KkmQjZrGT90DcmqacBDb0Em3ndTr7hej2bVl0jII02ISKhxo6 Dp32ak9IvS+DvJzHNOgsws++fhKeV/awriaTTRZcfGdBRmOYfyeGFC4GhDzDcPlH uzIEes1IyEsqHQkhVT7v+8rBNBH/BzivsOcq3lHHt9Xf5tBL4xnclOYju5VRQtwN 7/FEE+Lv62uH/qm166llnZi+/YAV2sY= -----END CERTIFICATE-----Generated at Mon Apr 7 09:46:55 2025 by rpki-client