$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e2cb9d4-15cb-364b-bae0-3e52fb611f18.roa File: 5e2cb9d4-15cb-364b-bae0-3e52fb611f18.roa (raw, json) Hash identifier: F6TrxV0wC/Jh+qG8vaeRmTtvRbutlzlgzWvKbfxM2yo= Subject key identifier: 70:C9:2A:14:26:98:F1:6A:97:F9:68:A2:A4:C7:E5:4C:03:F1:52:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0FCEA3D795E8E67F7E740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e2cb9d4-15cb-364b-bae0-3e52fb611f18.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 73.209.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:fc:ea:3d:79:5e:8e:67:f7:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=7a2d8d8c-b7d4-4c34-a158-e81a3ff286c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9e:a8:9f:65:71:ae:76:e0:6f:26:85:02:72: a2:b7:57:aa:81:86:04:85:4a:4a:2a:4e:b4:24:f2: 1e:78:dc:df:8f:c9:00:9d:80:73:14:27:99:e5:5a: ba:ec:d7:98:79:04:bf:1f:48:6f:92:50:ae:62:dd: fa:69:c1:ca:63:72:ef:43:a0:d5:62:f2:e5:66:05: 40:6e:46:00:fe:83:f8:fc:ef:84:5f:0a:2b:32:72: 9e:63:bc:4b:8f:41:a5:80:80:26:1f:97:b3:c6:11: 84:94:60:d7:ed:02:7d:4b:4f:da:47:16:14:b0:8b: af:5b:c3:25:a5:fd:b3:17:ba:aa:13:84:06:af:63: 12:e6:db:67:f1:03:c4:a7:24:ac:67:4e:aa:51:1a: b7:2d:8b:85:e7:13:4e:bf:c6:a8:e1:c7:33:8f:c2: d6:05:bf:c7:16:4d:49:b6:a1:8a:f5:8e:9d:65:84: c6:c1:4b:b8:c5:07:de:7d:7a:2c:a3:49:db:72:92: ba:ba:96:08:97:ce:7c:b1:fd:e8:01:ee:e3:d1:93: 57:49:ad:80:5e:e2:94:76:61:03:1d:69:5f:8c:13: e9:d6:ce:8e:15:7d:ae:c4:4f:c6:80:af:6a:a3:1e: 2f:6d:b0:90:80:b4:b1:12:38:4a:05:47:c4:04:e7: 0f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C9:2A:14:26:98:F1:6A:97:F9:68:A2:A4:C7:E5:4C:03:F1:52:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e2cb9d4-15cb-364b-bae0-3e52fb611f18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.209.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b3:03:c8:51:4e:14:3b:c8:28:7b:8e:e7:5f:24:78:35:a2: f3:43:a6:9d:23:27:71:b7:9a:1a:b1:b2:29:52:a1:68:62:a8: f4:bd:ba:8b:95:76:f9:b6:39:c4:1c:a0:c3:eb:3f:ca:7d:1d: a6:e9:8c:f1:a0:b0:c5:c2:b1:a5:a9:29:e9:63:c7:da:a0:ce: 15:7d:33:3d:c5:c3:a6:94:a8:a5:51:6f:db:0a:fc:59:a4:c2: 9e:b7:6e:ef:aa:63:ed:80:eb:26:1d:f6:08:32:16:13:fb:5e: 99:42:70:f9:2b:58:fc:5c:01:7d:6d:61:7d:2b:1b:ae:34:0a: 8d:69:c0:81:b2:68:7c:09:f3:e7:60:4a:92:ff:4f:a0:21:21: 99:c2:19:c4:cc:ac:c3:2d:31:eb:54:35:44:82:99:74:64:0a: 6b:06:32:ba:20:cf:69:6a:93:13:41:77:c3:43:30:89:84:37: a2:60:ef:2b:10:ec:fb:2c:b0:be:85:f2:2f:cd:29:9f:9b:ab: 3a:04:b2:02:f8:33:d8:90:a1:72:16:bd:a4:e8:f5:e0:48:57: e3:30:f4:89:55:3b:2a:74:a9:95:50:35:1f:8d:ac:06:b7:08: 38:90:78:4f:86:e9:ac:13:ff:3c:f3:d4:88:0c:7f:ee:2f:e2: a9:94:aa:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssPzqPXlejmf350AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk N2EyZDhkOGMtYjdkNC00YzM0LWExNTgtZTgxYTNmZjI4NmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ6on2VxrnbgbyaFAnKit1eqgYYEhUpKKk60 JPIeeNzfj8kAnYBzFCeZ5Vq67NeYeQS/H0hvklCuYt36acHKY3LvQ6DVYvLlZgVA bkYA/oP4/O+EXworMnKeY7xLj0GlgIAmH5ezxhGElGDX7QJ9S0/aRxYUsIuvW8Ml pf2zF7qqE4QGr2MS5ttn8QPEpySsZ06qURq3LYuF5xNOv8ao4cczj8LWBb/HFk1J tqGK9Y6dZYTGwUu4xQfefXoso0nbcpK6upYIl858sf3oAe7j0ZNXSa2AXuKUdmED HWlfjBPp1s6OFX2uxE/GgK9qox4vbbCQgLSxEjhKBUfEBOcPSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDJKhQmmPFql/looqTH5UwD8VI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWUyY2I5ZDQtMTVjYi0z NjRiLWJhZTAtM2U1MmZiNjExZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACzA8hRThQ7yCh7judfJHg1ovNDpp0jJ3G3mhqxsilSoWhiqPS9uouV dvm2OcQcoMPrP8p9HabpjPGgsMXCsaWpKeljx9qgzhV9Mz3Fw6aUqKVRb9sK/Fmk wp63bu+qY+2A6yYd9ggyFhP7XplCcPkrWPxcAX1tYX0rG640Co1pwIGyaHwJ8+dg SpL/T6AhIZnCGcTMrMMtMetUNUSCmXRkCmsGMrogz2lqkxNBd8NDMImEN6Jg7ysQ 7PsssL6F8i/NKZ+bqzoEsgL4M9iQoXIWvaTo9eBIV+Mw9IlVOyp0qZVQNR+NrAa3 CDiQeE+G6awT/zzz1IgMf+4v4qmUqjg= -----END CERTIFICATE-----Generated at Mon Apr 7 06:20:28 2025 by rpki-client