$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dfec1f5-a3b8-3428-9a3b-82a9cff03cb7.roa File: 5dfec1f5-a3b8-3428-9a3b-82a9cff03cb7.roa (raw, json) Hash identifier: V17cpkoBoym5IvdC4MjFODwa3HrECx+UoFFSILSZV3w= Subject key identifier: 80:ED:0D:94:53:52:61:DF:EC:A9:55:98:79:DA:B1:5F:24:B0:F6:D3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6C4E9FA3E94095CF09480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dfec1f5-a3b8-3428-9a3b-82a9cff03cb7.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 73.157.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:c4:e9:fa:3e:94:09:5c:f0:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=1c8fea47-666a-451a-a374-8f71b6012bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:e0:dd:c8:8f:ba:60:75:e4:64:42:3d:96: b5:5a:ce:a1:ed:8a:63:8e:39:e1:0a:e9:df:87:65: fd:21:7d:39:ca:9e:66:e8:ec:5f:46:81:e7:5a:15: bd:38:3e:20:c3:e8:07:c0:ec:32:79:65:6a:8a:58: df:33:af:59:05:d5:85:6d:3f:f6:19:35:54:77:c4: 7d:6b:d9:46:ba:92:14:97:fc:b9:0b:ac:08:1b:b9: 2a:ab:3c:66:d8:52:53:38:06:3a:da:a4:38:f0:68: 3c:80:95:2c:46:45:c3:41:fa:11:58:b9:a9:4c:e5: bb:dc:bd:a5:63:e5:5e:fe:c7:fa:bb:88:f2:49:84: 21:6f:6b:79:9e:99:d7:0b:20:77:c9:72:35:c4:1e: 48:b3:e3:9d:d1:49:52:38:41:2e:d0:86:49:60:78: ee:b0:a1:67:bf:21:2b:03:06:5e:6c:00:4e:c4:22: c4:59:fb:34:7a:36:2f:67:38:56:79:b0:d1:b3:2b: de:1e:57:67:34:62:c0:e9:c8:45:65:53:6c:b0:07: 52:0f:56:54:fa:c9:b6:ae:e3:b2:5b:85:ad:78:38: b5:b9:26:8a:38:7a:7b:de:8d:60:13:8f:02:2d:b9: 1c:0a:ec:df:3a:c3:78:f8:88:55:ff:a9:87:40:89: a7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:ED:0D:94:53:52:61:DF:EC:A9:55:98:79:DA:B1:5F:24:B0:F6:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dfec1f5-a3b8-3428-9a3b-82a9cff03cb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.157.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:fe:fe:e6:ca:fc:27:d6:0d:aa:6b:70:40:0b:93:8d:4e:66: 1e:56:0e:94:da:cd:3d:6a:22:2a:ea:eb:38:bd:58:78:46:67: 66:b9:15:fa:ef:02:fa:5c:58:06:02:7e:59:f5:27:2c:07:c2: 38:45:6f:c4:17:95:fc:ce:af:76:73:89:8d:22:54:5e:26:58: db:b5:49:0d:e6:01:ad:5e:73:59:ef:6f:25:3c:de:ff:e2:46: 10:fe:ac:66:d7:d0:84:b7:58:ed:c3:c8:04:17:5a:b2:53:0a: 16:b2:7b:41:da:1a:7c:3c:6b:05:80:56:99:b5:c0:9d:e3:1e: 21:80:31:19:86:c4:39:0d:5e:da:7b:54:8f:e7:4f:c5:2b:aa: 2f:04:63:76:ae:1d:7e:d8:b2:b8:a5:37:e9:f0:47:3b:e8:e6: 8f:33:32:de:17:52:04:1b:b2:39:10:59:78:d8:fd:36:82:27: 33:2a:80:bf:d0:f0:16:51:a1:37:5c:79:4c:58:a5:07:6f:07: 6f:d3:78:11:13:4f:26:54:b7:64:7c:8b:f5:11:06:b3:5b:05: 55:a2:39:3f:32:f4:17:7f:24:4b:8e:0a:e5:a6:d1:d5:76:80: 9d:c5:33:c4:ed:be:1d:b4:ca:7b:6a:cc:a4:f6:34:0b:39:e8: c7:e2:bd:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09sTp+j6UCVzwlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MWM4ZmVhNDctNjY2YS00NTFhLWEzNzQtOGY3MWI2MDEyYmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD7g3ciPumB15GRCPZa1Ws6h7YpjjjnhCunf h2X9IX05yp5m6OxfRoHnWhW9OD4gw+gHwOwyeWVqiljfM69ZBdWFbT/2GTVUd8R9 a9lGupIUl/y5C6wIG7kqqzxm2FJTOAY62qQ48Gg8gJUsRkXDQfoRWLmpTOW73L2l Y+Ve/sf6u4jySYQhb2t5npnXCyB3yXI1xB5Is+Od0UlSOEEu0IZJYHjusKFnvyEr AwZebABOxCLEWfs0ejYvZzhWebDRsyveHldnNGLA6chFZVNssAdSD1ZU+sm2ruOy W4WteDi1uSaKOHp73o1gE48CLbkcCuzfOsN4+IhV/6mHQImn7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDtDZRTUmHf7KlVmHnasV8ksPbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWRmZWMxZjUtYTNiOC0z NDI4LTlhM2ItODJhOWNmZjAzY2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASZ2fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3+/ubK/CfWDaprcEALk41OZh5WDpTazT1qIirq6zi9WHhGZ2a5Ffrv AvpcWAYCfln1JywHwjhFb8QXlfzOr3ZziY0iVF4mWNu1SQ3mAa1ec1nvbyU83v/i RhD+rGbX0IS3WO3DyAQXWrJTChaye0HaGnw8awWAVpm1wJ3jHiGAMRmGxDkNXtp7 VI/nT8Urqi8EY3auHX7YsrilN+nwRzvo5o8zMt4XUgQbsjkQWXjY/TaCJzMqgL/Q 8BZRoTdceUxYpQdvB2/TeBETTyZUt2R8i/URBrNbBVWiOT8y9Bd/JEuOCuWm0dV2 gJ3FM8Ttvh20yntqzKT2NAs56MfivbM= -----END CERTIFICATE-----Generated at Mon Apr 7 05:48:57 2025 by rpki-client