$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5919c66c-d8ad-385a-915e-c44e94a558b3.roa File: 5919c66c-d8ad-385a-915e-c44e94a558b3.roa (raw, json) Hash identifier: yk/23UgCFSUDSjHI6nKFd8G0KgrnTvOSFaxSM5Ajv5Q= Subject key identifier: 6F:59:C7:D3:4A:D3:86:86:14:C9:D7:82:8F:7D:EC:E0:44:3C:EA:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F22C28CE02C2DBA7732185D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5919c66c-d8ad-385a-915e-c44e94a558b3.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 13367 IP address blocks: 174.53.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:28:ce:02:c2:db:a7:73:21:85:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=b28a35c3-2591-4263-aa9e-ba309740eed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2d:91:17:9e:be:fb:3e:93:73:e0:19:a7:53: df:c4:15:af:2c:ab:ba:fe:c1:f4:6f:49:54:d6:25: 53:78:6f:3a:c9:dd:f3:12:8c:9a:95:78:73:71:77: 0b:6f:0f:40:20:da:72:04:8d:22:73:17:ed:3d:cc: 7a:9d:f9:8a:9a:8b:34:bd:56:08:81:a6:ca:38:6e: b7:57:64:c3:a6:72:ff:12:10:11:c3:45:62:8d:bf: 47:ec:33:80:6b:81:2f:41:31:c1:1f:32:e7:4a:c7: 78:d2:92:01:18:44:14:b1:25:8c:1b:b6:39:c9:f8: 67:a6:c9:92:26:65:71:eb:35:29:46:ea:1d:3c:bb: 76:cc:82:bb:be:ba:eb:95:99:fa:25:71:f1:2e:96: e8:ab:60:1f:ec:cc:47:55:32:67:5e:7e:8f:6c:68: 0e:c9:d4:cb:14:e6:23:63:05:c9:56:b9:5f:af:09: 1a:c8:ba:9d:b7:a6:7b:bb:2f:45:d0:c2:7d:f2:79: 7d:30:16:fb:86:6f:44:5d:b7:71:e7:4b:b7:24:3a: c5:20:32:4f:27:27:e0:85:60:8f:6b:d4:06:98:13: b9:a2:bb:c9:f6:9d:cd:22:e6:a1:21:4a:3f:cf:08: 88:f9:73:32:a7:09:9c:fa:04:58:ea:06:da:de:27: 9d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:59:C7:D3:4A:D3:86:86:14:C9:D7:82:8F:7D:EC:E0:44:3C:EA:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5919c66c-d8ad-385a-915e-c44e94a558b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.53.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e2:e6:77:cc:5c:32:bf:4f:1a:5f:69:44:0d:55:9d:7e:28: 7b:e7:f0:a9:91:ea:31:e3:0a:34:b7:0e:13:d7:af:0d:b0:8b: 8f:da:38:ba:25:6f:fb:04:0c:34:e7:15:6c:4e:0c:11:f2:e9: c9:36:ea:d4:95:83:b3:3d:c1:23:e7:bf:03:d9:e3:90:3a:f3: 85:19:2c:3e:0e:be:7d:15:50:10:25:2b:5b:4b:f8:62:d2:be: 9a:2b:68:1c:d3:e1:24:72:ea:2b:7e:de:41:5d:01:be:e5:a2: 7f:e0:54:9d:d5:99:bc:c9:6b:71:69:69:95:ef:00:c2:4d:1b: 74:e8:5a:23:bf:f2:1a:3c:38:8d:8b:8f:4f:58:70:bb:fb:67: da:0f:e5:02:3f:68:54:8b:18:82:1f:9e:7b:55:92:47:b8:89: 04:25:ed:55:7e:38:8c:e8:f7:7d:4e:db:1c:58:94:eb:14:22: f5:1b:a5:77:0d:9a:9c:61:43:4e:7a:f0:c3:a9:9b:a1:49:9e: 26:b8:81:2b:00:23:7c:39:b8:e2:1d:d9:da:7f:d5:74:2e:dc: d9:e1:2c:f0:44:20:dd:20:80:52:e2:1c:f0:0d:b9:41:13:9d: 78:d2:32:9b:8f:ec:19:75:45:91:de:d4:9d:2f:c0:87:87:56: 8b:86:a3:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLCjOAsLbp3MhhdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk YjI4YTM1YzMtMjU5MS00MjYzLWFhOWUtYmEzMDk3NDBlZWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC2RF56++z6Tc+AZp1PfxBWvLKu6/sH0b0lU 1iVTeG86yd3zEoyalXhzcXcLbw9AINpyBI0icxftPcx6nfmKmos0vVYIgabKOG63 V2TDpnL/EhARw0Vijb9H7DOAa4EvQTHBHzLnSsd40pIBGEQUsSWMG7Y5yfhnpsmS JmVx6zUpRuodPLt2zIK7vrrrlZn6JXHxLpboq2Af7MxHVTJnXn6PbGgOydTLFOYj YwXJVrlfrwkayLqdt6Z7uy9F0MJ98nl9MBb7hm9EXbdx50u3JDrFIDJPJyfghWCP a9QGmBO5orvJ9p3NIuahIUo/zwiI+XMypwmc+gRY6gba3iedSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9Zx9NK04aGFMnXgo997OBEPOpQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTkxOWM2NmMtZDhhZC0z ODVhLTkxNWUtYzQ0ZTk0YTU1OGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrjXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvi5nfMXDK/TxpfaUQNVZ1+KHvn8KmR6jHjCjS3DhPXrw2wi4/aOLol b/sEDDTnFWxODBHy6ck26tSVg7M9wSPnvwPZ45A684UZLD4Ovn0VUBAlK1tL+GLS vporaBzT4SRy6it+3kFdAb7lon/gVJ3VmbzJa3FpaZXvAMJNG3ToWiO/8ho8OI2L j09YcLv7Z9oP5QI/aFSLGIIfnntVkke4iQQl7VV+OIzo931O2xxYlOsUIvUbpXcN mpxhQ0568MOpm6FJnia4gSsAI3w5uOId2dp/1XQu3NnhLPBEIN0ggFLiHPANuUET nXjSMpuP7Bl1RZHe1J0vwIeHVouGo50= -----END CERTIFICATE-----Generated at Mon Apr 7 06:06:45 2025 by rpki-client