$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b06e96a-09b5-341e-a9d3-dcfc7d1e16d2.roa File: 8b06e96a-09b5-341e-a9d3-dcfc7d1e16d2.roa (raw, json) Hash identifier: Ks+5RpKHgZC7Cg/TalESWISN/zS8VZYYWtGMfJLuOKc= Subject key identifier: E5:B4:AC:56:81:A4:7E:D1:ED:1E:EB:05:D7:32:DF:4E:9A:84:55:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F75329120A81DDED1DAB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b06e96a-09b5-341e-a9d3-dcfc7d1e16d2.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 73.68.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:53:29:12:0a:81:dd:ed:1d:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=9ea463bf-30e3-4fe5-bb95-dae672101886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:5a:ba:76:72:4d:81:7c:40:31:57:ef:19: 70:80:43:bb:7d:c8:a3:59:9b:7d:c8:b3:22:e5:0b: 65:29:e9:42:a6:fd:e7:a1:60:29:dc:cb:d0:af:9c: c2:5b:be:e9:e9:47:d7:62:0c:4f:09:6d:89:02:3e: 5e:76:0e:a8:2e:86:d9:22:02:19:37:43:85:d2:a3: a4:21:e1:18:20:69:fa:23:84:dd:2b:73:37:a5:56: f7:a8:66:c5:da:4b:a6:ca:ee:bc:8c:c2:db:6d:88: 04:5a:fe:0f:85:ea:44:57:6a:d6:32:1f:b7:3e:d0: 2c:f8:21:e0:a0:2c:71:2c:ab:8f:0a:94:4f:c4:7f: 49:8c:2d:3a:8b:e2:e7:c8:c2:f3:3c:05:d7:e5:8d: 27:46:01:1a:7f:25:f3:be:b4:59:6a:00:53:f5:b7: 76:8e:97:d3:bd:62:f3:56:2e:87:b7:5f:bd:11:6f: 9b:f2:f3:bd:71:49:3a:38:62:f5:be:8f:9e:b9:63: 87:f1:ef:7a:42:96:16:65:d4:cb:12:00:08:b7:4d: ba:88:9a:02:7a:25:8a:27:14:d7:dc:21:a5:bf:d3: ad:20:f3:a7:e3:a0:fc:e0:fd:2e:2b:41:d3:05:27: a0:4f:69:85:18:b7:08:72:24:6b:7e:bb:28:bd:a5: a3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B4:AC:56:81:A4:7E:D1:ED:1E:EB:05:D7:32:DF:4E:9A:84:55:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b06e96a-09b5-341e-a9d3-dcfc7d1e16d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.68.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:70:f7:43:9f:a2:cb:a6:6b:e2:9f:3c:1b:6c:51:a5:17:bd: 14:fb:6c:85:b9:90:c3:d9:37:3d:29:7d:46:c8:23:10:a0:f1: 4c:50:8b:19:43:95:6b:33:e7:60:54:3c:eb:f1:0f:1e:f3:60: 3c:d8:4d:65:e5:1b:11:87:a3:6c:a8:ad:2b:09:17:66:f1:25: 29:a8:8e:09:6a:52:36:e6:41:ca:4b:5c:d2:c6:08:1a:02:b3: 66:91:fb:8e:87:c3:d5:ef:49:b7:94:4c:14:e4:6a:97:2e:e7: a8:63:21:41:b7:82:d5:bb:56:d5:10:3b:c3:d3:a9:a4:84:7d: 37:95:71:1a:70:aa:43:b5:14:24:6b:cf:eb:eb:1e:f9:f4:1c: f9:18:d3:0f:c9:05:fa:93:db:54:c3:b7:34:79:46:8a:d7:ef: e4:55:79:33:7e:ea:da:80:ee:06:01:92:08:7f:32:cf:1d:ed: ea:cd:14:fb:aa:68:3a:1e:94:e3:0d:95:cd:3d:c5:28:24:26: 1c:6a:0a:34:94:f6:0a:0f:21:a9:d3:af:44:8d:62:34:56:d5: ce:cd:e6:22:9d:54:0f:1a:84:1f:87:39:80:bb:af:11:96:14: f7:bb:3c:1c:b5:ef:1a:53:9c:fd:48:91:70:b2:08:32:a0:b1: 1a:67:50:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj091MpEgqB3e0dq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OWVhNDYzYmYtMzBlMy00ZmU1LWJiOTUtZGFlNjcyMTAxODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3taunZyTYF8QDFX7xlwgEO7fcijWZt9yLMi 5QtlKelCpv3noWAp3MvQr5zCW77p6UfXYgxPCW2JAj5edg6oLobZIgIZN0OF0qOk IeEYIGn6I4TdK3M3pVb3qGbF2kumyu68jMLbbYgEWv4PhepEV2rWMh+3PtAs+CHg oCxxLKuPCpRPxH9JjC06i+LnyMLzPAXX5Y0nRgEafyXzvrRZagBT9bd2jpfTvWLz Vi6Ht1+9EW+b8vO9cUk6OGL1vo+euWOH8e96QpYWZdTLEgAIt026iJoCeiWKJxTX 3CGlv9OtIPOn46D84P0uK0HTBSegT2mFGLcIciRrfrsovaWjNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOW0rFaBpH7R7R7rBdcy306ahFWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGIwNmU5NmEtMDliNS0z NDFlLWE5ZDMtZGNmYzdkMWUxNmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUTSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlw90Ofosuma+KfPBtsUaUXvRT7bIW5kMPZNz0pfUbIIxCg8UxQixlD lWsz52BUPOvxDx7zYDzYTWXlGxGHo2yorSsJF2bxJSmojglqUjbmQcpLXNLGCBoC s2aR+46Hw9XvSbeUTBTkapcu56hjIUG3gtW7VtUQO8PTqaSEfTeVcRpwqkO1FCRr z+vrHvn0HPkY0w/JBfqT21TDtzR5RorX7+RVeTN+6tqA7gYBkgh/Ms8d7erNFPuq aDoelOMNlc09xSgkJhxqCjSU9goPIanTr0SNYjRW1c7N5iKdVA8ahB+HOYC7rxGW FPe7PBy17xpTnP1IkXCyCDKgsRpnUIQ= -----END CERTIFICATE-----Generated at Sun Apr 6 09:35:20 2025 by rpki-client