$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94def0d7-3dbe-3214-bf28-45f0530abc54.roa File: 94def0d7-3dbe-3214-bf28-45f0530abc54.roa (raw, json) Hash identifier: MS6w8Ld0NdVLjetn59yPBlddGm2tXSoGIJl81jKHn3s= Subject key identifier: 3A:C7:7E:CF:71:9A:15:0E:42:07:37:56:90:F3:A4:3A:3B:8F:F0:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DC7F2625C20B92FBAC200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94def0d7-3dbe-3214-bf28-45f0530abc54.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 73.164.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:c7:f2:62:5c:20:b9:2f:ba:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c588f307-a168-420e-8718-0661a46d8d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8b:80:17:a8:7c:5c:6c:92:04:d2:78:62:06: f8:3f:2b:fe:38:a1:f9:84:02:93:c1:1c:eb:53:ad: 78:22:ed:5b:91:86:a9:33:f2:80:c9:58:c5:bb:5a: 00:b0:a3:d8:cf:38:a2:59:a9:46:a1:0b:dc:8e:e1: d4:e1:51:af:bc:9e:2a:d3:b6:cc:a8:05:a2:20:6a: 94:c2:24:bb:11:9b:4c:1e:35:3f:9b:83:2f:83:63: 9d:0e:43:b1:a6:ef:40:e3:66:58:73:53:da:76:ee: 23:2d:79:23:1d:63:b9:00:01:98:a5:95:b4:3a:96: 0c:89:cd:1f:9f:d5:a4:83:82:9e:e6:c9:56:8e:0f: 2e:42:3c:77:e0:5d:a3:b4:20:80:7a:07:21:bc:d4: bb:58:31:8b:e6:4d:61:f0:6a:34:de:a2:1f:71:30: 67:45:79:e7:39:9e:64:47:4b:c8:b5:5a:6b:ed:a0: 09:0c:51:14:a0:50:a8:7b:88:a3:ff:92:84:27:c8: 49:1b:d7:dd:85:f7:33:1f:55:3a:f5:b6:91:75:74: a0:a9:dd:1b:3c:02:92:58:33:83:63:26:97:0f:1f: 1b:35:9d:6f:f4:94:bb:d6:9b:c6:6a:d6:ab:cf:54: 22:a9:82:94:4e:93:77:27:dc:b4:28:7d:9d:35:4f: 21:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C7:7E:CF:71:9A:15:0E:42:07:37:56:90:F3:A4:3A:3B:8F:F0:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94def0d7-3dbe-3214-bf28-45f0530abc54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.164.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:05:7f:b9:b1:bc:a6:65:67:69:53:33:76:d2:2e:1a:d1:ed: 60:a1:04:ab:a4:fe:03:90:c3:74:ae:36:13:a3:8a:95:3d:d3: aa:d4:94:8e:e7:2a:33:31:d5:f2:54:8e:63:20:b6:f0:e7:37: 23:0b:6f:c3:63:ed:f7:c8:08:2b:9e:43:14:85:1c:33:85:61: f6:1a:ee:0a:d7:e6:57:a4:93:e0:09:67:d0:90:17:f8:07:03: 9b:ea:e6:53:cf:ee:e4:e6:03:d6:14:bb:b1:07:2b:b3:34:83: 88:a9:da:c6:07:22:70:f2:c9:93:76:d3:c9:95:78:20:53:79: bd:df:e2:65:a7:f2:9b:8d:04:69:1f:00:f2:ba:68:e3:e6:32: b7:9e:e6:de:53:ed:ae:c5:b9:4c:15:cc:64:82:6a:39:f2:10: 24:b5:42:8a:ba:ce:31:db:a6:d1:a6:e1:2c:67:8f:06:a9:f8: 69:f5:cf:75:e1:c9:2b:e7:22:3a:ab:a9:6f:ba:f6:33:f5:58: 13:ff:71:8e:b9:06:31:42:8d:c7:3d:87:e0:ab:26:27:ba:03: 16:31:0e:ec:c8:7d:a3:99:a6:5b:18:66:c1:eb:76:3a:71:e7: b7:88:ef:7f:10:97:b3:fc:31:c7:b3:70:ec:7e:ee:e2:4f:fe: c1:29:0e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebcfyYlwguS+6wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YzU4OGYzMDctYTE2OC00MjBlLTg3MTgtMDY2MWE0NmQ4ZDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIuAF6h8XGySBNJ4Ygb4Pyv+OKH5hAKTwRzr U614Iu1bkYapM/KAyVjFu1oAsKPYzziiWalGoQvcjuHU4VGvvJ4q07bMqAWiIGqU wiS7EZtMHjU/m4Mvg2OdDkOxpu9A42ZYc1Padu4jLXkjHWO5AAGYpZW0OpYMic0f n9Wkg4Ke5slWjg8uQjx34F2jtCCAegchvNS7WDGL5k1h8Go03qIfcTBnRXnnOZ5k R0vItVpr7aAJDFEUoFCoe4ij/5KEJ8hJG9fdhfczH1U69baRdXSgqd0bPAKSWDOD YyaXDx8bNZ1v9JS71pvGatarz1QiqYKUTpN3J9y0KH2dNU8h9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrHfs9xmhUOQgc3VpDzpDo7j/DVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTRkZWYwZDctM2RiZS0z MjE0LWJmMjgtNDVmMDUzMGFiYzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaQ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUFf7mxvKZlZ2lTM3bSLhrR7WChBKuk/gOQw3SuNhOjipU906rUlI7n KjMx1fJUjmMgtvDnNyMLb8Nj7ffICCueQxSFHDOFYfYa7grX5lekk+AJZ9CQF/gH A5vq5lPP7uTmA9YUu7EHK7M0g4ip2sYHInDyyZN208mVeCBTeb3f4mWn8puNBGkf APK6aOPmMree5t5T7a7FuUwVzGSCajnyECS1Qoq6zjHbptGm4Sxnjwap+Gn1z3Xh ySvnIjqrqW+69jP1WBP/cY65BjFCjcc9h+CrJie6AxYxDuzIfaOZplsYZsHrdjpx 57eI738Ql7P8McezcOx+7uJP/sEpDsA= -----END CERTIFICATE-----Generated at Mon Apr 7 09:34:21 2025 by rpki-client