$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/665b5ad6-6dea-380d-acf9-5591116f806d.roa File: 665b5ad6-6dea-380d-acf9-5591116f806d.roa (raw, json) Hash identifier: RmCYhsOCD0G+gzsx6vVYg6n8QuZUwmQnLxludt7KO9A= Subject key identifier: F4:3A:4F:1D:90:F1:40:2F:A4:CE:A9:56:B4:6B:E9:D1:48:4C:22:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858484C11FBD01980564E9AA22600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/665b5ad6-6dea-380d-acf9-5591116f806d.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 33659 IP address blocks: 73.33.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:11:fb:d0:19:80:56:4e:9a:a2:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=cd6324e0-5f22-49a3-8ca4-35c49c5d146d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:cb:01:38:41:18:43:47:98:09:81:b3:04:85: 76:22:cd:fc:b6:bb:41:b7:c2:8f:75:9a:79:25:49: 5b:bc:18:cc:a5:bf:a6:6c:8e:4a:be:2e:37:19:21: 6c:e6:6e:8a:47:bf:b2:db:71:a3:6f:f3:45:28:cf: 00:9a:65:99:f7:8b:8e:ef:22:ab:00:5b:fe:fb:0a: de:ec:cc:da:c4:38:58:b8:6c:c7:09:a6:21:20:70: e3:59:6c:41:c4:8a:d3:43:59:9c:03:8c:bf:8d:5a: 33:19:2c:90:cd:d5:ab:6d:e0:56:6d:32:ad:c5:52: 22:98:53:f2:28:44:56:6a:b3:5a:ec:fb:c7:5f:dc: ad:ce:86:58:00:31:cf:70:8d:52:d5:b5:e1:04:a6: 72:5c:33:4f:5a:ad:fd:23:9f:3a:63:a6:df:02:dd: 51:a4:09:24:84:f9:2b:78:bb:66:58:e8:2f:7f:30: 0c:eb:ff:88:c8:9a:9f:b0:9e:a4:95:54:55:15:20: d3:de:fb:1a:dc:e9:ba:0c:7e:e7:60:fb:eb:8f:59: f1:bf:2d:21:4a:6b:b8:b7:92:93:c9:ab:ab:5e:a1: 21:7a:21:55:ef:7f:cb:6e:85:3d:45:f9:89:d2:a9: 01:80:d0:86:d0:89:dc:34:1b:4b:f6:82:bc:e1:8c: 6c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3A:4F:1D:90:F1:40:2F:A4:CE:A9:56:B4:6B:E9:D1:48:4C:22:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/665b5ad6-6dea-380d-acf9-5591116f806d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.33.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:6f:77:16:e8:ad:0b:fd:84:c7:cf:f1:10:e4:93:9a:3c:c4: 34:7d:71:d5:ad:2c:10:1e:2a:8f:b9:c8:54:86:9e:0b:63:59: db:fe:31:33:6e:d0:bb:fd:24:84:d3:34:29:e8:76:78:92:d5: 0f:1a:95:6d:b9:5f:71:34:ff:ce:31:d6:21:b3:d8:99:bb:e1: 3c:7d:32:fd:23:cb:55:d1:54:9f:3d:b1:43:7f:a9:96:22:8a: 89:a0:90:ca:d3:4b:67:81:32:98:19:5a:1f:90:42:8f:13:30: 9b:6d:cf:b4:6f:bc:7d:34:d0:6d:4e:b1:0d:da:0d:0a:15:a4: 18:58:5d:72:2f:94:21:86:b5:0d:ad:33:79:12:f8:cf:89:bf: 0e:d3:97:76:42:9c:0b:f8:aa:18:4c:88:f0:1f:e9:67:21:57: 07:01:bc:8b:54:2b:9a:8b:cc:e9:1c:e8:76:2c:d6:89:4d:b9: bd:95:cb:b2:fa:5c:87:d7:a6:11:2c:77:e6:29:8b:35:db:30: 00:37:78:27:73:6a:73:67:c0:c1:6d:53:35:f0:31:6b:c4:ba: 27:03:2f:c3:41:9f:ba:a0:f8:cd:c7:b4:9a:0f:bf:e5:61:a9: 2f:10:29:75:39:9f:b1:ea:df:59:af:c4:40:8e:4c:16:5b:8b: f9:cf:10:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEfvQGYBWTpqiJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk Y2Q2MzI0ZTAtNWYyMi00OWEzLThjYTQtMzVjNDljNWQxNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMsBOEEYQ0eYCYGzBIV2Is38trtBt8KPdZp5 JUlbvBjMpb+mbI5Kvi43GSFs5m6KR7+y23Gjb/NFKM8AmmWZ94uO7yKrAFv++wre 7MzaxDhYuGzHCaYhIHDjWWxBxIrTQ1mcA4y/jVozGSyQzdWrbeBWbTKtxVIimFPy KERWarNa7PvHX9ytzoZYADHPcI1S1bXhBKZyXDNPWq39I586Y6bfAt1RpAkkhPkr eLtmWOgvfzAM6/+IyJqfsJ6klVRVFSDT3vsa3Om6DH7nYPvrj1nxvy0hSmu4t5KT yaurXqEheiFV73/LboU9RfmJ0qkBgNCG0IncNBtL9oK84YxsYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ6Tx2Q8UAvpM6pVrRr6dFITCI3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjY1YjVhZDYtNmRlYS0z ODBkLWFjZjktNTU5MTExNmY4MDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBvdxborQv9hMfP8RDkk5o8xDR9cdWtLBAeKo+5yFSGngtjWdv+MTNu 0Lv9JITTNCnodniS1Q8alW25X3E0/84x1iGz2Jm74Tx9Mv0jy1XRVJ89sUN/qZYi iomgkMrTS2eBMpgZWh+QQo8TMJttz7RvvH000G1OsQ3aDQoVpBhYXXIvlCGGtQ2t M3kS+M+Jvw7Tl3ZCnAv4qhhMiPAf6WchVwcBvItUK5qLzOkc6HYs1olNub2Vy7L6 XIfXphEsd+YpizXbMAA3eCdzanNnwMFtUzXwMWvEuicDL8NBn7qg+M3HtJoPv+Vh qS8QKXU5n7Hq31mvxECOTBZbi/nPEEA= -----END CERTIFICATE-----Generated at Sun Feb 16 20:35:16 2025 by rpki-client