$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87cb7c7b-d7d6-3e7e-a6cd-aff0836170da.roa File: 87cb7c7b-d7d6-3e7e-a6cd-aff0836170da.roa (raw, json) Hash identifier: kBAy38IqQyHgUlmvakT2t9IfImy1zJMksgSAQF9YXME= Subject key identifier: 39:9D:21:D2:86:76:C6:98:06:B3:C8:8C:E8:28:A9:20:25:93:54:63 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B93A5A6F2B74394E3DD40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87cb7c7b-d7d6-3e7e-a6cd-aff0836170da.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 73.121.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:93:a5:a6:f2:b7:43:94:e3:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c8b85996-89e9-4c5c-8472-60d8f7dae964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9b:f7:cf:a0:3c:d3:0c:c5:7f:33:7c:62:7f: 2c:09:e4:88:41:17:af:f5:35:58:98:bf:51:ff:48: db:01:be:a9:12:50:32:2b:28:d0:c5:02:be:40:e1: d6:5b:8d:26:f6:5e:5d:99:23:c4:06:0f:85:49:e9: 83:0e:28:1b:82:94:4d:a1:59:54:c8:43:53:10:a1: 34:15:48:e4:38:79:10:f9:41:75:b1:71:68:a4:3d: 6f:14:45:eb:8c:2c:22:16:36:98:3d:2d:f0:14:a6: 2e:ed:45:54:ed:c3:2a:57:94:04:1f:fc:58:c4:38: 78:08:d6:4b:1b:f6:4d:76:4f:67:79:24:d1:12:e7: 1a:a8:74:a6:3f:d4:a3:60:cb:41:14:e0:fe:86:1f: 82:36:07:b9:4d:ff:5e:b0:42:15:bd:d8:b9:34:86: 00:99:c3:08:b4:e0:2d:61:4d:10:dc:4a:56:c3:33: 79:4b:37:cf:b8:9d:d4:69:4c:dc:be:7c:19:76:e3: d9:27:7e:79:86:2d:85:8e:0a:19:75:1d:2a:1b:b7: c8:8c:75:0b:fd:7f:00:e0:7d:5a:e6:79:49:0a:f7: b7:2e:2e:e0:12:74:5e:72:46:9f:02:72:06:f9:b4: 0d:5e:0f:d8:b6:5a:3e:ce:71:4f:00:12:62:b6:37: 1e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9D:21:D2:86:76:C6:98:06:B3:C8:8C:E8:28:A9:20:25:93:54:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87cb7c7b-d7d6-3e7e-a6cd-aff0836170da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.121.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:ba:3a:79:c0:ce:f1:f5:7e:71:7f:c7:47:17:6b:a8:2a:ba: 4c:94:c2:85:dc:3f:27:25:b0:6c:d9:88:89:63:c1:42:ce:80: 97:16:fa:0f:18:6f:3b:6b:36:ce:dc:d9:d5:19:ef:e5:b5:ba: f5:27:d3:5f:f8:03:fd:71:5a:19:95:f8:5c:28:d6:4c:ec:05: ba:27:ad:21:a7:7f:d3:5b:be:42:50:0c:61:d9:36:fc:ae:df: 1c:85:fa:b3:0c:45:d1:3e:ae:c8:6a:30:29:26:b9:96:00:da: 9f:fd:2a:07:b3:d8:96:89:65:7c:49:d2:83:02:b4:ca:f3:11: a5:e0:14:ee:d4:ae:26:a9:02:6a:a2:46:d8:a8:a1:7e:3e:45: f9:e9:e3:ca:24:e5:dd:8c:e1:ab:24:4b:70:64:c8:92:f8:86: 65:9e:bc:19:c7:44:aa:0f:22:6d:b8:50:8b:7a:ff:1a:14:5d: 0c:34:87:98:b2:42:6d:07:ab:86:67:56:49:ca:07:24:b7:97: 4a:10:cc:36:2b:ed:0d:38:22:a4:93:47:a8:c5:4f:5f:5e:a6: 72:2c:9f:05:3e:67:ca:90:fe:4f:6e:63:6d:2a:1c:1c:98:44: 84:e7:60:3b:2b:d0:88:cf:8b:fc:86:b7:5f:d8:a7:be:e3:e5: 2f:de:21:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea5OlpvK3Q5Tj3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YzhiODU5OTYtODllOS00YzVjLTg0NzItNjBkOGY3ZGFlOTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25v3z6A80wzFfzN8Yn8sCeSIQRev9TVYmL9R /0jbAb6pElAyKyjQxQK+QOHWW40m9l5dmSPEBg+FSemDDigbgpRNoVlUyENTEKE0 FUjkOHkQ+UF1sXFopD1vFEXrjCwiFjaYPS3wFKYu7UVU7cMqV5QEH/xYxDh4CNZL G/ZNdk9neSTREucaqHSmP9SjYMtBFOD+hh+CNge5Tf9esEIVvdi5NIYAmcMItOAt YU0Q3EpWwzN5SzfPuJ3UaUzcvnwZduPZJ355hi2FjgoZdR0qG7fIjHUL/X8A4H1a 5nlJCve3Li7gEnReckafAnIG+bQNXg/Ytlo+znFPABJitjceIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmdIdKGdsaYBrPIjOgoqSAlk1RjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODdjYjdjN2ItZDdkNi0z ZTdlLWE2Y2QtYWZmMDgzNjE3MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASXnhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABe6OnnAzvH1fnF/x0cXa6gqukyUwoXcPyclsGzZiIljwULOgJcW+g8Y bztrNs7c2dUZ7+W1uvUn01/4A/1xWhmV+Fwo1kzsBbonrSGnf9NbvkJQDGHZNvyu 3xyF+rMMRdE+rshqMCkmuZYA2p/9Kgez2JaJZXxJ0oMCtMrzEaXgFO7UriapAmqi RtiooX4+Rfnp48ok5d2M4askS3BkyJL4hmWevBnHRKoPIm24UIt6/xoUXQw0h5iy Qm0Hq4ZnVknKByS3l0oQzDYr7Q04IqSTR6jFT19epnIsnwU+Z8qQ/k9uY20qHByY RITnYDsr0IjPi/yGt1/Yp77j5S/eIUA= -----END CERTIFICATE-----Generated at Mon Apr 7 05:53:28 2025 by rpki-client