$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/595255c9-b825-326d-a681-bf53dc65beb6.roa File: 595255c9-b825-326d-a681-bf53dc65beb6.roa (raw, json) Hash identifier: GI8Ag6Mh+Ki85G1XZDMiD/j+UDba/3pv5I92ZQPGlCs= Subject key identifier: 6D:3F:24:C0:7C:AA:EC:B4:C9:B8:55:47:BE:57:06:2C:C6:29:48:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F92B315F0EBDE5AA84E800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/595255c9-b825-326d-a681-bf53dc65beb6.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 73.232.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:2b:31:5f:0e:bd:e5:aa:84:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=4f9616d0-b9d6-467f-a64d-5e6a3e18d39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2a:e8:ec:a8:cc:37:ad:62:3b:63:5f:a2:33: c0:82:71:5c:e8:68:4f:0c:eb:35:f6:26:02:84:d7: 37:cd:ba:0e:a7:b6:63:cb:5d:92:a3:3b:c3:81:57: 59:07:ff:1a:ff:47:56:2e:95:e3:9f:d0:da:6d:cf: da:ce:93:81:7c:39:1c:c2:3d:b4:dd:d2:3d:d7:70: a5:2c:28:70:9d:32:3b:c9:b8:f0:37:fe:7b:95:b9: 00:b7:95:2c:d1:f0:d7:f6:ef:94:6c:44:7f:79:99: 3e:9a:91:6f:09:9c:20:1b:50:62:da:f9:ba:c1:9f: ae:c4:2a:06:39:a0:66:09:09:0d:1e:f9:83:ff:e8: a2:08:0b:39:30:ea:37:66:40:b6:d7:04:14:a6:6f: 2c:4b:e2:07:13:a1:59:5b:1a:14:3d:06:c4:ac:a0: 98:58:51:db:5f:9b:08:23:ee:7d:6b:44:9f:bf:4e: e6:98:2c:0a:87:d1:67:d1:a1:0c:d1:3e:65:47:32: 88:0e:b3:79:c0:d6:ce:e0:97:3e:6c:a0:1b:9e:62: 82:88:c5:ec:45:dc:3a:be:28:03:75:ab:eb:8e:46: 25:c7:3d:94:0e:fb:a6:86:98:bc:81:43:17:f6:04: 98:58:fb:e1:42:b6:b7:82:63:35:54:b5:04:8e:da: c4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3F:24:C0:7C:AA:EC:B4:C9:B8:55:47:BE:57:06:2C:C6:29:48:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/595255c9-b825-326d-a681-bf53dc65beb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.232.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:31:44:60:db:fb:4c:09:7b:bf:62:c0:6d:50:74:08:67:30: 5b:e1:7e:0e:81:a2:a3:59:5a:d8:ee:7e:53:bf:01:3a:82:d5: 5d:bf:d3:ea:0a:96:cf:3c:de:7b:b9:59:12:70:b3:a3:c5:46: 52:21:cb:7b:30:eb:e2:59:d9:2f:b9:3d:76:53:31:6d:fa:68: 9d:22:c0:bb:6a:27:36:22:c9:1f:59:12:f5:ee:e8:17:07:55: eb:b5:51:7d:2f:ab:aa:33:fa:a1:2e:cc:73:ac:6b:11:bf:51: 0c:25:48:79:56:24:21:e4:c3:b8:46:1d:d9:64:f9:d0:47:15: a4:0b:f0:6b:1d:e7:c1:fa:b9:59:75:b3:06:64:c4:0f:21:66: a9:c6:51:0a:e3:57:a7:06:1e:9a:fa:19:c2:4e:ba:5a:0c:5b: 69:b0:30:63:b0:c2:90:b8:4c:43:4f:34:bb:42:20:4d:90:23: 28:1f:be:b0:81:27:75:5e:27:8a:70:46:2c:d8:67:29:ad:99: 71:c6:be:af:15:6a:f1:0c:fa:2d:b5:21:dd:1e:63:ab:6c:44: 35:0d:d3:9c:11:40:6e:ea:65:5b:29:16:34:23:fb:95:45:61: 5a:4a:4f:d9:6f:c8:99:4c:b1:20:da:0c:c8:8c:9b:fb:b4:33: ed:c0:25:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+SsxXw695aqE6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NGY5NjE2ZDAtYjlkNi00NjdmLWE2NGQtNWU2YTNlMThkMzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyro7KjMN61iO2NfojPAgnFc6GhPDOs19iYC hNc3zboOp7Zjy12SozvDgVdZB/8a/0dWLpXjn9Dabc/azpOBfDkcwj203dI913Cl LChwnTI7ybjwN/57lbkAt5Us0fDX9u+UbER/eZk+mpFvCZwgG1Bi2vm6wZ+uxCoG OaBmCQkNHvmD/+iiCAs5MOo3ZkC21wQUpm8sS+IHE6FZWxoUPQbErKCYWFHbX5sI I+59a0Sfv07mmCwKh9Fn0aEM0T5lRzKIDrN5wNbO4Jc+bKAbnmKCiMXsRdw6vigD davrjkYlxz2UDvumhpi8gUMX9gSYWPvhQra3gmM1VLUEjtrEdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0/JMB8quy0ybhVR75XBizGKUinMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTk1MjU1YzktYjgyNS0z MjZkLWE2ODEtYmY1M2RjNjViZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSeicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoxRGDb+0wJe79iwG1QdAhnMFvhfg6BoqNZWtjuflO/ATqC1V2/0+oK ls883nu5WRJws6PFRlIhy3sw6+JZ2S+5PXZTMW36aJ0iwLtqJzYiyR9ZEvXu6BcH Veu1UX0vq6oz+qEuzHOsaxG/UQwlSHlWJCHkw7hGHdlk+dBHFaQL8Gsd58H6uVl1 swZkxA8hZqnGUQrjV6cGHpr6GcJOuloMW2mwMGOwwpC4TENPNLtCIE2QIygfvrCB J3VeJ4pwRizYZymtmXHGvq8VavEM+i21Id0eY6tsRDUN05wRQG7qZVspFjQj+5VF YVpKT9lvyJlMsSDaDMiMm/u0M+3AJQU= -----END CERTIFICATE-----Generated at Mon Apr 7 16:04:18 2025 by rpki-client