$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a2ce5ac-7dfe-3ebf-b1b8-1e9b5000a9b1.roa File: 7a2ce5ac-7dfe-3ebf-b1b8-1e9b5000a9b1.roa (raw, json) Hash identifier: QVzDDWKGlcW6OCNbvUXsqZpvC3dwQbmJnIGsjeePxgE= Subject key identifier: 8E:70:AE:06:CD:5C:AB:1C:1F:A5:C6:96:DF:E7:0D:63:66:87:AF:F7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F729F08FD3C2D28F22A700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a2ce5ac-7dfe-3ebf-b1b8-1e9b5000a9b1.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 73.167.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:29:f0:8f:d3:c2:d2:8f:22:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=f9bda887-9dfa-4809-bc92-ba2e1d1943f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1f:2b:df:2a:fc:70:1e:95:23:08:a5:23:06: 92:dc:f9:b5:b7:d0:8b:9e:22:f1:61:b3:96:af:dc: 91:69:af:6a:17:14:31:b4:b4:e1:50:1e:ae:d7:da: c1:6c:a3:22:41:02:81:19:28:7a:57:5c:1a:e4:56: 03:c1:bd:ea:00:de:54:b0:16:cb:53:f1:42:f4:4c: 51:5b:e9:25:c6:69:21:e2:75:f4:36:44:70:94:1c: 6d:b6:7b:66:f0:14:52:36:56:79:88:cb:ae:c0:33: b7:36:59:1b:8d:ff:ae:46:94:12:33:62:86:a9:76: 46:f8:a2:3b:3c:16:1b:1d:ed:bd:bc:63:7f:a0:17: 40:1e:44:5b:2a:4e:5e:75:02:75:e3:d2:bd:e2:9f: 7a:ce:bd:f8:23:de:cf:c9:31:28:ce:65:e6:82:83: 7d:cd:e6:a1:7f:0c:f7:63:0f:e3:6c:57:1f:84:82: 49:1c:66:68:51:51:4e:41:43:0e:06:fe:85:c9:d8: 10:e7:47:7a:3d:9c:85:a4:b9:47:a3:05:60:75:5a: ed:21:61:9b:14:4c:d4:e1:1e:95:73:73:d4:63:19: dd:1a:28:58:12:bb:d0:3f:43:88:df:aa:cf:ba:d8: 05:c3:d4:7f:16:52:13:d9:bb:c8:41:76:b6:76:5f: bd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:70:AE:06:CD:5C:AB:1C:1F:A5:C6:96:DF:E7:0D:63:66:87:AF:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a2ce5ac-7dfe-3ebf-b1b8-1e9b5000a9b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.167.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:b5:92:f8:cc:82:02:00:0b:d6:72:13:18:c2:a3:0a:c6:43: 61:90:19:5c:34:6c:1b:d6:54:0f:e3:7e:a2:a5:78:f3:80:ce: 26:f4:ed:2b:b2:26:84:2c:5f:42:8d:fc:83:d7:ac:a0:fe:44: 20:a8:9f:6e:97:4f:f5:45:a0:a1:dd:5d:34:b9:78:2b:43:bf: a9:2f:11:a0:c0:cf:e6:12:2e:b0:38:08:7e:c2:51:5a:5e:d7: bc:77:d7:fa:a5:9e:42:c2:c9:63:90:9a:7d:9b:0f:e3:c2:98: 95:23:8a:da:50:0a:5b:35:35:fb:59:5b:4f:93:b1:e7:05:a5: 73:38:bd:a8:e6:2b:38:50:39:b9:d1:73:88:72:09:f8:1c:9b: ad:4b:6b:6e:22:d9:38:25:3d:45:59:a5:ff:44:d7:04:f0:90: e8:a7:3c:82:bc:60:c8:0c:78:59:0d:72:af:92:00:6e:30:8d: e1:dc:12:57:bb:2b:f4:06:fc:f3:4c:bd:a0:c1:68:4d:72:a8: e4:4c:70:b2:ee:a4:85:5c:c8:4f:bb:17:8c:ff:be:c7:6e:1f: 78:57:44:c8:72:27:1b:a7:33:b0:13:b2:36:30:09:76:3d:f7: 2b:03:ce:c9:80:b6:20:07:ce:ae:01:5d:75:f0:43:b8:97:6d: 8b:54:b4:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09ynwj9PC0o8ipwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZjliZGE4ODctOWRmYS00ODA5LWJjOTItYmEyZTFkMTk0M2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR8r3yr8cB6VIwilIwaS3Pm1t9CLniLxYbOW r9yRaa9qFxQxtLThUB6u19rBbKMiQQKBGSh6V1wa5FYDwb3qAN5UsBbLU/FC9ExR W+klxmkh4nX0NkRwlBxttntm8BRSNlZ5iMuuwDO3Nlkbjf+uRpQSM2KGqXZG+KI7 PBYbHe29vGN/oBdAHkRbKk5edQJ149K94p96zr34I97PyTEozmXmgoN9zeahfwz3 Yw/jbFcfhIJJHGZoUVFOQUMOBv6FydgQ50d6PZyFpLlHowVgdVrtIWGbFEzU4R6V c3PUYxndGihYErvQP0OI36rPutgFw9R/FlIT2bvIQXa2dl+9/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5wrgbNXKscH6XGlt/nDWNmh6/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2EyY2U1YWMtN2RmZS0z ZWJmLWIxYjgtMWU5YjUwMDBhOWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSae8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMK1kvjMggIAC9ZyExjCowrGQ2GQGVw0bBvWVA/jfqKlePOAzib07Suy JoQsX0KN/IPXrKD+RCCon26XT/VFoKHdXTS5eCtDv6kvEaDAz+YSLrA4CH7CUVpe 17x31/qlnkLCyWOQmn2bD+PCmJUjitpQCls1NftZW0+TsecFpXM4vajmKzhQObnR c4hyCfgcm61La24i2TglPUVZpf9E1wTwkOinPIK8YMgMeFkNcq+SAG4wjeHcEle7 K/QG/PNMvaDBaE1yqORMcLLupIVcyE+7F4z/vsduH3hXRMhyJxunM7ATsjYwCXY9 9ysDzsmAtiAHzq4BXXXwQ7iXbYtUtFQ= -----END CERTIFICATE-----Generated at Sun Apr 6 12:01:39 2025 by rpki-client