$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eb7afca-40e1-3c26-8496-c6c78114be57.roa File: 4eb7afca-40e1-3c26-8496-c6c78114be57.roa (raw, json) Hash identifier: 8UkS4gfFZZr613+2/z3oXMYc6z1LvzeozJCTHw8T+lY= Subject key identifier: FF:3E:3A:EC:F7:B1:70:48:60:A2:3A:3D:A4:17:DE:F0:70:19:DD:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CF3D4A1DBF8B2ADDB5E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eb7afca-40e1-3c26-8496-c6c78114be57.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 73.19.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:f3:d4:a1:db:f8:b2:ad:db:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=d323a765-f2fd-4f4d-b4fb-639a286f37aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:d2:7d:53:21:2e:65:76:50:eb:4e:e9:89: 8c:3c:19:6a:69:63:9c:39:06:f5:ae:80:30:d3:77: b0:0a:52:7e:4f:8d:72:03:1b:09:3d:d3:f8:8f:ee: 31:55:7c:57:1b:09:41:4d:21:c0:01:00:50:83:f7: c9:4c:7c:69:0c:d9:0c:44:86:7b:a9:f2:f3:be:0a: 23:eb:2a:83:b7:5d:25:a0:3f:39:2e:e6:0e:82:51: d1:99:16:f2:70:bd:49:ff:2c:f8:e1:3c:07:d5:b2: dc:ab:cb:ff:8f:7c:b0:8f:3c:bf:62:f4:14:52:9c: 24:89:e0:c1:b4:33:1a:05:a9:15:44:98:ea:e6:df: 5f:36:a9:c2:f4:9d:c2:97:96:f1:0a:7d:19:3b:5b: e3:ea:51:ff:ac:80:16:2b:c8:df:9e:60:c9:60:2c: cf:eb:0e:9d:e9:50:f0:27:47:31:37:81:6a:02:34: 78:8f:43:3b:54:9a:8d:ca:f3:93:a6:e9:c2:54:30: 73:87:2d:2e:62:ae:13:53:d8:dd:60:5b:c9:7f:f3: 7b:d5:2b:54:32:66:1e:cb:0b:37:ea:a7:57:c6:d5: ac:a7:c4:ea:1d:e7:4a:db:2e:d4:36:35:ce:c3:ed: 10:25:de:92:07:41:65:16:e9:b4:c1:1b:5c:52:eb: 03:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3E:3A:EC:F7:B1:70:48:60:A2:3A:3D:A4:17:DE:F0:70:19:DD:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eb7afca-40e1-3c26-8496-c6c78114be57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.19.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c3:c1:3c:36:7c:0c:07:b3:c3:ba:a4:3a:98:bf:ac:88:12: 12:2a:af:cd:15:44:48:94:43:68:bb:25:08:d1:f2:c0:77:9d: 7b:65:4d:f3:1b:49:21:8c:94:2d:8d:39:8e:ac:31:2b:05:22: 71:c8:1b:3d:62:0f:b6:05:7e:1e:bc:15:fc:80:b0:e0:16:93: 80:f1:98:9d:b8:61:78:01:b0:31:dc:3a:76:48:2a:78:73:b2: c4:7d:91:c1:07:cb:c3:fc:7d:43:6c:cf:9a:32:56:63:79:b4: 7c:31:72:e1:c2:bc:fc:01:59:cd:a3:82:5b:ee:91:0e:79:b5: 19:0f:3c:c4:32:34:91:7c:f6:c8:0a:70:08:1d:45:ba:74:87: 87:9f:a2:97:b4:a0:d3:a3:a4:6e:68:b8:ac:22:d6:d2:13:37: 41:0f:78:a5:db:f0:6c:e1:ff:35:96:e1:b9:e4:d6:1e:ba:28: f2:73:68:c7:e0:2e:7c:4b:af:6e:54:46:6a:57:c3:76:76:9b: fc:dd:66:99:f6:82:9c:80:22:37:b6:09:54:da:11:38:3f:cd: fa:1e:76:74:22:8a:a9:5e:20:bd:e0:6e:88:d4:50:05:55:5b: f2:71:ed:78:60:34:e6:c3:bd:b6:45:a4:1b:d5:d9:d4:a4:2e: af:1d:6b:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebPPUodv4sq3bXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZDMyM2E3NjUtZjJmZC00ZjRkLWI0ZmItNjM5YTI4NmYzN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszjSfVMhLmV2UOtO6YmMPBlqaWOcOQb1roAw 03ewClJ+T41yAxsJPdP4j+4xVXxXGwlBTSHAAQBQg/fJTHxpDNkMRIZ7qfLzvgoj 6yqDt10loD85LuYOglHRmRbycL1J/yz44TwH1bLcq8v/j3ywjzy/YvQUUpwkieDB tDMaBakVRJjq5t9fNqnC9J3Cl5bxCn0ZO1vj6lH/rIAWK8jfnmDJYCzP6w6d6VDw J0cxN4FqAjR4j0M7VJqNyvOTpunCVDBzhy0uYq4TU9jdYFvJf/N71StUMmYeyws3 6qdXxtWsp8TqHedK2y7UNjXOw+0QJd6SB0FlFum0wRtcUusDLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8+Ouz3sXBIYKI6PaQX3vBwGd0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGViN2FmY2EtNDBlMS0z YzI2LTg0OTYtYzZjNzgxMTRiZTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvDwTw2fAwHs8O6pDqYv6yIEhIqr80VREiUQ2i7JQjR8sB3nXtlTfMb SSGMlC2NOY6sMSsFInHIGz1iD7YFfh68FfyAsOAWk4DxmJ24YXgBsDHcOnZIKnhz ssR9kcEHy8P8fUNsz5oyVmN5tHwxcuHCvPwBWc2jglvukQ55tRkPPMQyNJF89sgK cAgdRbp0h4efope0oNOjpG5ouKwi1tITN0EPeKXb8Gzh/zWW4bnk1h66KPJzaMfg LnxLr25URmpXw3Z2m/zdZpn2gpyAIje2CVTaETg/zfoednQiiqleIL3gbojUUAVV W/Jx7XhgNObDvbZFpBvV2dSkLq8dayI= -----END CERTIFICATE-----Generated at Mon Apr 7 06:46:46 2025 by rpki-client