$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1bceed1-112b-3fd5-ba4b-fae538678d05.roa File: a1bceed1-112b-3fd5-ba4b-fae538678d05.roa (raw, json) Hash identifier: Hq/bHGSzJw7Q9mjMzMKZjpZHdtazBKq2X4ZOu1/9o78= Subject key identifier: E3:55:81:1D:28:71:CA:5B:48:15:45:15:56:1B:C4:E5:92:D4:DA:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F22BFE83B7DFCF14DF786640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1bceed1-112b-3fd5-ba4b-fae538678d05.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 22258 IP address blocks: 73.177.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2b:fe:83:b7:df:cf:14:df:78:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=ff1149d0-cbc8-4e05-a0cd-43232710da0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ad:ab:6f:ba:23:bd:c1:7f:c5:e1:f3:c2:6e: ae:9b:2d:cd:a6:7c:3e:31:45:a4:8c:cd:8f:80:ae: f9:46:18:5c:9f:e1:2d:c7:6c:6d:e8:17:6f:2d:28: 3c:23:3b:87:4b:34:61:1b:ff:28:da:da:f9:31:09: 17:fe:7c:c6:71:f5:9f:2e:9b:0d:fa:1c:49:9f:27: a7:cf:b4:67:29:20:c5:fa:0f:9a:49:1d:68:74:16: ca:13:bf:f7:2e:5d:f2:f8:ce:43:91:6b:4f:02:99: a9:cc:04:a4:40:10:24:7c:b2:88:19:e1:7e:49:f4: 68:ca:97:e5:01:9b:33:12:4b:d2:5d:fc:47:b2:6f: 85:cf:90:15:ce:f5:d5:e4:5a:5a:02:46:20:71:7e: 3d:9c:51:00:5f:0c:5d:0e:4b:ba:a0:5d:51:7e:a3: 38:5d:8f:2a:31:f6:23:75:18:28:54:e3:bc:e7:1c: 4b:3f:6c:6b:f6:de:58:e6:f6:5b:c2:06:cc:3d:fa: 72:2d:7a:85:68:d3:5c:7c:8c:f6:4f:96:8d:b6:0c: f0:ac:52:10:4f:81:e1:e3:5a:e2:08:ed:5d:79:17: 2c:de:06:e4:da:35:c0:92:25:92:1b:4b:bc:16:d5: 13:5a:e7:6d:fa:c7:18:41:fb:46:2b:cb:81:33:db: 77:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:55:81:1D:28:71:CA:5B:48:15:45:15:56:1B:C4:E5:92:D4:DA:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1bceed1-112b-3fd5-ba4b-fae538678d05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.177.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:11:c6:72:55:a2:ec:b8:f6:49:41:b4:50:0e:55:bc:14:24: da:dc:8e:34:c8:91:06:8e:64:21:6e:47:19:66:95:d6:e2:49: aa:97:b8:db:94:5c:db:9a:45:22:cb:c8:25:ce:22:23:d3:9a: d2:0d:bc:7b:07:96:dc:12:78:cb:b8:ae:63:54:13:93:97:11: fd:5a:fe:db:98:9d:2d:0a:6f:73:af:97:50:67:02:b8:4f:39: ea:f3:2f:fc:b2:d2:d2:f9:a7:43:ed:a7:eb:cb:c2:67:da:4c: eb:e7:7e:38:72:da:3d:36:c2:fe:6d:72:b0:44:b7:4d:1d:a4: 4c:68:a5:fb:f3:09:d4:84:78:15:27:e3:a8:c8:2e:ba:23:7b: 65:b8:0d:1f:c1:89:cf:7c:87:d7:6a:b8:cb:e0:ba:96:a2:40: e3:1b:fe:94:6c:f8:60:63:f8:ec:f3:ce:71:45:3a:d1:fe:31: 43:69:78:cb:1e:0d:9f:ea:2d:05:76:2b:5e:17:05:44:9a:5a: 0a:47:ad:7b:43:ce:aa:6f:ad:45:c3:a6:09:bb:af:1f:bd:76: 6f:90:47:39:db:c0:ac:0a:ec:bd:ed:08:64:df:d3:72:c2:27: 4c:c9:3e:03:cb:d8:56:82:5c:9d:e1:e5:16:ef:a3:c2:48:f5: 4d:ab:67:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyK/6Dt9/PFN94ZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZmYxMTQ5ZDAtY2JjOC00ZTA1LWEwY2QtNDMyMzI3MTBkYTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK2rb7ojvcF/xeHzwm6umy3Npnw+MUWkjM2P gK75Rhhcn+Etx2xt6BdvLSg8IzuHSzRhG/8o2tr5MQkX/nzGcfWfLpsN+hxJnyen z7RnKSDF+g+aSR1odBbKE7/3Ll3y+M5DkWtPApmpzASkQBAkfLKIGeF+SfRoypfl AZszEkvSXfxHsm+Fz5AVzvXV5FpaAkYgcX49nFEAXwxdDku6oF1RfqM4XY8qMfYj dRgoVOO85xxLP2xr9t5Y5vZbwgbMPfpyLXqFaNNcfIz2T5aNtgzwrFIQT4Hh41ri CO1deRcs3gbk2jXAkiWSG0u8FtUTWudt+scYQftGK8uBM9t34wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONVgR0occpbSBVFFVYbxOWS1NodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTFiY2VlZDEtMTEyYi0z ZmQ1LWJhNGItZmFlNTM4Njc4ZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASbFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMRxnJVouy49klBtFAOVbwUJNrcjjTIkQaOZCFuRxlmldbiSaqXuNuU XNuaRSLLyCXOIiPTmtINvHsHltwSeMu4rmNUE5OXEf1a/tuYnS0Kb3Ovl1BnArhP OerzL/yy0tL5p0Ptp+vLwmfaTOvnfjhy2j02wv5tcrBEt00dpExopfvzCdSEeBUn 46jILroje2W4DR/Bic98h9dquMvgupaiQOMb/pRs+GBj+OzzznFFOtH+MUNpeMse DZ/qLQV2K14XBUSaWgpHrXtDzqpvrUXDpgm7rx+9dm+QRznbwKwK7L3tCGTf03LC J0zJPgPL2FaCXJ3h5Rbvo8JI9U2rZ9k= -----END CERTIFICATE-----Generated at Mon Apr 7 05:53:46 2025 by rpki-client