$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f85f45-0322-3b89-9068-1444e66a79d9.roa File: a2f85f45-0322-3b89-9068-1444e66a79d9.roa (raw, json) Hash identifier: L17Y2Yyt1w6dwlzhE/WSU74y8BBQkfLASGg2GPJTrP0= Subject key identifier: 45:3A:85:8B:4F:18:89:A8:7F:61:63:5A:84:88:B1:7D:0F:4E:4B:CF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C56118F4A963D1A3FFC40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f85f45-0322-3b89-9068-1444e66a79d9.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 73.94.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:56:11:8f:4a:96:3d:1a:3f:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=ad0582cc-de08-42cd-a0e9-883f6aaa1bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b1:87:b7:bf:07:e3:5c:ee:ea:03:f0:1f:27: 59:25:1d:bb:52:06:88:61:be:1f:54:0b:30:7e:8c: 93:00:cc:b9:78:e5:e4:d2:f6:3f:1f:e6:d9:1d:7d: 22:1c:9f:a1:21:d8:67:27:13:2d:df:f3:71:70:bc: 47:81:de:04:b4:cb:39:b5:90:12:d7:cf:d7:e3:23: c6:ea:21:81:d4:6a:ff:6d:68:c5:2c:30:c3:7b:02: 73:d2:90:46:35:1b:b6:bc:2f:d0:de:6c:9e:cc:12: fd:1d:b2:0d:8d:5a:84:01:b5:88:d3:9f:50:07:7c: 37:5d:13:76:ea:94:b4:76:cf:2c:47:81:5b:e6:52: 4e:b1:67:98:02:90:13:88:c4:a9:6a:7b:2d:7d:3b: 59:65:d1:09:94:20:9d:22:9b:a5:ee:de:54:d8:db: 0b:ac:85:67:b3:fc:12:33:3e:89:0b:25:fd:13:73: 67:13:d2:14:0d:5d:4f:ac:54:ea:27:4a:36:89:40: 51:dc:44:43:b3:60:b3:33:31:9e:a3:38:56:05:eb: 97:80:ac:ce:c1:e5:76:3b:64:d3:70:63:be:ec:7b: a7:48:c9:5b:01:28:81:42:89:94:4e:26:a0:b3:af: 52:2c:23:97:7a:68:14:61:fe:2e:4a:73:0e:0e:8b: dd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3A:85:8B:4F:18:89:A8:7F:61:63:5A:84:88:B1:7D:0F:4E:4B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f85f45-0322-3b89-9068-1444e66a79d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.94.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b7:93:f1:79:e7:f3:82:97:28:a1:24:aa:d6:49:09:28:fd: 97:01:5c:58:68:de:52:51:0c:c2:e0:d6:57:fa:62:d4:ec:94: cd:97:80:a4:5b:f1:42:54:4a:66:01:5b:6d:68:e1:01:d7:85: 83:54:dc:e9:99:19:10:41:7b:1e:a1:ac:d0:f0:00:79:98:e7: d5:01:6d:16:be:0d:91:65:c1:d1:14:65:c4:4d:29:97:87:5d: a0:2a:42:6e:c4:7a:df:1b:98:21:00:93:d0:5e:c9:53:3d:11: 5a:2e:40:42:23:0e:b3:df:23:d4:2f:78:0f:09:85:3f:5c:8a: 08:8f:be:23:ae:79:64:ae:22:3a:c1:b5:6c:a4:dc:e7:05:16: 71:55:54:18:0f:0c:ce:c8:c3:2f:02:ea:0c:85:6a:02:df:c5: 37:2c:cb:93:1f:ad:cc:2b:bf:7e:65:f9:05:dc:04:0f:6c:64: 45:9e:7a:a3:00:6d:04:9a:c2:5b:0f:ad:1e:59:e7:82:1a:17: 13:42:ee:24:a8:bc:de:ce:fe:d7:b1:97:96:f9:e5:7c:f5:01: 82:49:b5:af:29:3e:79:9d:a8:4d:ce:c5:21:49:19:ca:18:67: fb:69:56:5c:4f:0b:35:60:b7:52:e4:12:23:c3:69:15:76:f1: 3e:ab:ab:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebFYRj0qWPRo//EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YWQwNTgyY2MtZGUwOC00MmNkLWEwZTktODgzZjZhYWExYmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibGHt78H41zu6gPwHydZJR27UgaIYb4fVAsw foyTAMy5eOXk0vY/H+bZHX0iHJ+hIdhnJxMt3/NxcLxHgd4EtMs5tZAS18/X4yPG 6iGB1Gr/bWjFLDDDewJz0pBGNRu2vC/Q3myezBL9HbINjVqEAbWI059QB3w3XRN2 6pS0ds8sR4Fb5lJOsWeYApATiMSpanstfTtZZdEJlCCdIpul7t5U2NsLrIVns/wS Mz6JCyX9E3NnE9IUDV1PrFTqJ0o2iUBR3ERDs2CzMzGeozhWBeuXgKzOweV2O2TT cGO+7HunSMlbASiBQomUTiags69SLCOXemgUYf4uSnMODovdZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEU6hYtPGImof2FjWoSIsX0PTkvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTJmODVmNDUtMDMyMi0z Yjg5LTkwNjgtMTQ0NGU2NmE3OWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSV6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIG3k/F55/OClyihJKrWSQko/ZcBXFho3lJRDMLg1lf6YtTslM2XgKRb 8UJUSmYBW21o4QHXhYNU3OmZGRBBex6hrNDwAHmY59UBbRa+DZFlwdEUZcRNKZeH XaAqQm7Eet8bmCEAk9BeyVM9EVouQEIjDrPfI9QveA8JhT9cigiPviOueWSuIjrB tWyk3OcFFnFVVBgPDM7Iwy8C6gyFagLfxTcsy5Mfrcwrv35l+QXcBA9sZEWeeqMA bQSawlsPrR5Z54IaFxNC7iSovN7O/texl5b55Xz1AYJJta8pPnmdqE3OxSFJGcoY Z/tpVlxPCzVgt1LkEiPDaRV28T6rq/k= -----END CERTIFICATE-----Generated at Mon Apr 7 06:06:06 2025 by rpki-client