$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84271f34-93b3-3888-8511-6d0c5a17973a.roa File: 84271f34-93b3-3888-8511-6d0c5a17973a.roa (raw, json) Hash identifier: MFNXAFfdZhZ1Pr3uxxdF0Qv2SzOi2NPjNCO+jhLqYGA= Subject key identifier: C4:24:8E:20:46:50:06:D9:3A:C9:4B:DF:4A:B2:36:23:60:47:A9:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1A0FD4EE4A0B9C1B20580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84271f34-93b3-3888-8511-6d0c5a17973a.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 73.252.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:a0:fd:4e:e4:a0:b9:c1:b2:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=bbcde3f0-8cd8-453c-8707-b8cd0968b4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:50:fe:76:ed:04:8c:8a:26:21:c8:87:eb:dd: b0:da:a5:3b:78:42:2e:ac:fc:5f:4a:d9:36:47:fc: 0d:f4:56:b5:81:5c:15:30:17:f1:89:eb:8e:95:fb: c3:c8:fa:96:15:b4:5c:ea:13:29:bb:28:02:5c:e7: 78:a1:3e:d9:fd:6e:c4:f3:d9:16:ee:45:34:09:3d: 8b:da:fd:d0:2e:99:db:5b:ab:79:f4:35:97:0f:81: 7a:72:00:f7:d4:38:5b:cf:fd:50:ae:0a:f5:fa:72: 66:43:58:e6:ab:84:b2:a7:b1:8d:89:69:4d:18:79: b4:ac:58:b6:c8:61:97:15:37:23:86:02:9b:0b:e7: 3c:76:d6:53:4f:b9:31:bc:ef:f5:99:3a:79:e5:7b: dd:bc:27:63:b2:7f:93:21:20:61:76:48:74:ca:5e: a2:2a:2c:bc:44:95:66:f1:98:fc:3d:d8:98:04:97: 08:26:42:b6:f8:89:81:b5:b5:bf:42:6e:93:46:28: 26:d4:de:a4:32:1e:db:c9:ce:75:e0:08:37:6d:ac: 8c:63:df:f6:76:b9:26:87:7c:a0:40:46:45:26:7f: 7c:da:79:9c:c0:0c:2c:6b:26:ad:a9:00:15:8f:3c: ec:f6:39:29:79:fb:c2:3f:63:af:41:90:6c:58:1f: 62:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:24:8E:20:46:50:06:D9:3A:C9:4B:DF:4A:B2:36:23:60:47:A9:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84271f34-93b3-3888-8511-6d0c5a17973a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.252.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b8:a7:e6:3b:c5:41:41:f5:46:a1:fd:2c:48:6f:c8:c0:3d: b5:d2:11:0b:1a:54:a5:a6:83:25:4c:4b:f7:a9:a8:1e:05:ff: 29:47:ed:59:62:27:c7:4a:03:ea:69:3f:95:e1:3f:e8:69:54: 43:99:0c:5c:4e:85:37:a2:aa:11:63:57:78:03:2e:52:8e:40: 5c:6a:e0:ab:37:43:d2:fb:1a:18:b7:d8:4e:1a:14:a5:e3:38: b6:40:a0:41:0d:4a:cb:9a:0f:13:58:31:28:c2:b1:bd:74:cb: b9:b3:b6:32:92:6c:aa:2d:67:97:95:dd:84:fa:e2:11:13:24: b0:96:1b:e1:ee:1c:d7:6a:f0:a6:eb:33:cd:87:bd:3e:ca:b6: 24:11:f9:08:34:57:63:c7:0a:af:46:c6:20:8b:7c:dd:88:64: ac:c9:68:36:4a:65:64:a9:0c:77:f1:26:df:7e:31:14:bf:b0: 01:f4:a9:64:c5:5d:f0:df:58:8d:4e:f7:e5:a5:31:13:71:a8: 2e:6b:c6:e0:2e:61:51:a0:52:92:a8:fa:dd:c5:c5:81:28:7d: dd:b2:08:0d:f1:32:38:2a:29:50:0a:e0:76:39:6f:b5:74:dd: 61:2b:66:f8:74:a3:47:01:bd:1f:19:6e:43:8f:03:64:a6:4b: 5c:e7:c5:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssaD9TuSgucGyBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YmJjZGUzZjAtOGNkOC00NTNjLTg3MDctYjhjZDA5NjhiNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVD+du0EjIomIciH692w2qU7eEIurPxfStk2 R/wN9Fa1gVwVMBfxieuOlfvDyPqWFbRc6hMpuygCXOd4oT7Z/W7E89kW7kU0CT2L 2v3QLpnbW6t59DWXD4F6cgD31Dhbz/1Qrgr1+nJmQ1jmq4Syp7GNiWlNGHm0rFi2 yGGXFTcjhgKbC+c8dtZTT7kxvO/1mTp55XvdvCdjsn+TISBhdkh0yl6iKiy8RJVm 8Zj8PdiYBJcIJkK2+ImBtbW/Qm6TRigm1N6kMh7byc514Ag3bayMY9/2drkmh3yg QEZFJn982nmcwAwsayatqQAVjzzs9jkpefvCP2OvQZBsWB9i/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQkjiBGUAbZOslL30qyNiNgR6nAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODQyNzFmMzQtOTNiMy0z ODg4LTg1MTEtNmQwYzVhMTc5NzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfyWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEm4p+Y7xUFB9Uah/SxIb8jAPbXSEQsaVKWmgyVMS/epqB4F/ylH7Vli J8dKA+ppP5XhP+hpVEOZDFxOhTeiqhFjV3gDLlKOQFxq4Ks3Q9L7Ghi32E4aFKXj OLZAoEENSsuaDxNYMSjCsb10y7mztjKSbKotZ5eV3YT64hETJLCWG+HuHNdq8Kbr M82HvT7KtiQR+Qg0V2PHCq9GxiCLfN2IZKzJaDZKZWSpDHfxJt9+MRS/sAH0qWTF XfDfWI1O9+WlMRNxqC5rxuAuYVGgUpKo+t3FxYEofd2yCA3xMjgqKVAK4HY5b7V0 3WErZvh0o0cBvR8ZbkOPA2SmS1znxbI= -----END CERTIFICATE-----Generated at Mon Apr 7 16:11:55 2025 by rpki-client