$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60599a1e-c7cb-300b-b83f-f29f15f7051f.roa File: 60599a1e-c7cb-300b-b83f-f29f15f7051f.roa (raw, json) Hash identifier: ya32xlrDW9qwNosRpi3BLuDWkyPYzjNfYhSRl5jnTvg= Subject key identifier: 64:F7:8F:F6:92:4E:2D:AC:E6:D9:16:82:30:EC:1A:65:C0:A1:CB:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF76D0E871782F0582D860 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60599a1e-c7cb-300b-b83f-f29f15f7051f.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 73.22.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:76:d0:e8:71:78:2f:05:82:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=80d9ab8f-8e99-4178-9cef-24c10657b6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9e:de:21:50:5d:b6:59:6e:8a:c7:77:8c:54: ce:f1:f6:fa:62:86:f3:f7:2e:b5:e9:70:f6:7f:79: fc:a7:a1:fd:2b:35:78:ce:59:37:69:c8:d1:c5:fe: 5f:bf:91:c4:26:0a:98:8d:8d:36:87:ec:d7:5a:38: cc:49:ac:4a:20:49:53:02:be:47:4a:4d:8c:37:70: 9d:f9:95:ef:e6:a1:26:0c:68:d9:19:db:3c:77:bc: 1b:14:8a:1a:80:08:15:c8:2f:3c:89:42:b2:57:54: 4b:36:81:24:fa:3d:bd:59:2c:ea:40:41:9c:15:e0: e3:99:d7:f9:69:db:4c:ea:5f:28:1e:86:c6:5d:be: 40:87:1d:e1:9c:7e:85:e5:d2:c2:55:e2:43:b8:97: f3:02:68:4c:f0:16:40:66:bd:33:61:62:31:c3:ab: 38:8d:27:0b:14:de:61:a7:be:88:91:c9:dc:f5:e3: 50:87:d3:95:05:c3:58:22:d5:4f:55:d5:76:46:01: 8a:4c:02:71:8c:26:f0:3e:51:a5:7c:9f:85:7d:ee: 16:01:5b:5b:93:ce:ff:bb:31:4e:73:cd:1b:16:54: 5a:ea:5f:e0:13:c8:86:95:dc:20:e1:b6:3a:e2:38: 79:6c:06:5d:20:44:34:4c:23:aa:af:c9:69:2b:9e: 14:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F7:8F:F6:92:4E:2D:AC:E6:D9:16:82:30:EC:1A:65:C0:A1:CB:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60599a1e-c7cb-300b-b83f-f29f15f7051f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.22.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b1:62:53:7f:cc:38:d4:a5:a9:6c:38:eb:3a:dd:77:e9:f2: 98:31:08:23:ea:60:1b:9b:ac:f8:24:a8:3f:fd:65:60:8b:c0: 2e:0b:47:b0:c0:01:7e:24:71:b6:af:cc:e9:52:84:59:75:61: 2c:fb:30:dd:2a:a0:8f:74:e3:66:ee:50:5d:c8:e4:71:a2:dc: d2:b6:6b:c6:fd:5d:72:af:3d:dd:c9:3f:fb:fe:9e:8e:33:0b: e5:dc:4e:fb:1c:11:74:64:e5:13:59:22:a7:06:b3:be:73:72: 6f:5f:d1:8a:7f:1e:78:a3:4b:6a:fb:13:66:11:8c:28:7c:f2: a2:15:14:2b:25:73:2f:72:d6:f4:20:16:fe:a6:82:60:ab:a3: 63:5f:b8:54:e4:74:c1:97:71:ec:00:66:95:aa:ed:eb:d3:56: 0a:2e:6f:38:b9:be:ed:29:c7:f2:8a:93:5a:70:4b:1a:e9:7d: 67:bf:3a:ac:a4:cc:d4:78:60:09:af:c1:0e:f3:84:da:bd:01: b8:d2:3a:b1:ac:b3:a5:75:43:88:5d:c4:af:2a:be:f1:42:73: 31:4c:80:30:e5:d8:72:cb:14:95:0d:05:3d:67:fd:32:a3:fe: 41:6f:2c:e0:64:bb:48:06:9b:70:77:10:84:ca:a8:ea:49:4e: c4:6c:b5:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr3bQ6HF4LwWC2GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODBkOWFiOGYtOGU5OS00MTc4LTljZWYtMjRjMTA2NTdiNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5p7eIVBdtlluisd3jFTO8fb6Yobz9y616XD2 f3n8p6H9KzV4zlk3acjRxf5fv5HEJgqYjY02h+zXWjjMSaxKIElTAr5HSk2MN3Cd +ZXv5qEmDGjZGds8d7wbFIoagAgVyC88iUKyV1RLNoEk+j29WSzqQEGcFeDjmdf5 adtM6l8oHobGXb5Ahx3hnH6F5dLCVeJDuJfzAmhM8BZAZr0zYWIxw6s4jScLFN5h p76Ikcnc9eNQh9OVBcNYItVPVdV2RgGKTAJxjCbwPlGlfJ+Ffe4WAVtbk87/uzFO c80bFlRa6l/gE8iGldwg4bY64jh5bAZdIEQ0TCOqr8lpK54USQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT3j/aSTi2s5tkWgjDsGmXAocspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjA1OTlhMWUtYzdjYi0z MDBiLWI4M2YtZjI5ZjE1ZjcwNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASRaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKxYlN/zDjUpalsOOs63Xfp8pgxCCPqYBubrPgkqD/9ZWCLwC4LR7DA AX4kcbavzOlShFl1YSz7MN0qoI9042buUF3I5HGi3NK2a8b9XXKvPd3JP/v+no4z C+XcTvscEXRk5RNZIqcGs75zcm9f0Yp/HnijS2r7E2YRjCh88qIVFCslcy9y1vQg Fv6mgmCro2NfuFTkdMGXcewAZpWq7evTVgoubzi5vu0px/KKk1pwSxrpfWe/Oqyk zNR4YAmvwQ7zhNq9AbjSOrGss6V1Q4hdxK8qvvFCczFMgDDl2HLLFJUNBT1n/TKj /kFvLOBku0gGm3B3EITKqOpJTsRstcc= -----END CERTIFICATE-----Generated at Mon Apr 7 05:54:48 2025 by rpki-client