$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0e5ab93-a265-34e1-8082-13190d3b8c2e.roa File: b0e5ab93-a265-34e1-8082-13190d3b8c2e.roa (raw, json) Hash identifier: 9KRoYo7xzmqCyJ1TsqrziiIXYk16Mmn/FClBrI97RSc= Subject key identifier: 90:E0:A3:1C:37:A7:8C:7D:0A:DA:9E:0F:AD:6A:EE:1E:36:EB:A1:7D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C59254172495722EB1500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0e5ab93-a265-34e1-8082-13190d3b8c2e.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 73.228.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:59:25:41:72:49:57:22:eb:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=9991ef43-2fde-4dad-bcf8-6a6e4589af14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:5c:1c:a3:82:80:57:00:ba:57:37:1a:ce: 08:2e:22:62:13:4a:e1:02:3c:5f:7b:d4:50:b1:d4: 10:1d:c4:73:48:f7:fc:68:f9:d6:c2:af:7c:2c:87: a6:be:f2:b1:eb:25:9d:52:0d:f8:8f:31:43:34:c7: a4:cf:7a:bd:ce:04:58:b2:69:04:23:eb:23:80:ef: fc:6a:48:1d:a3:39:ba:e0:42:5c:e5:cc:5a:76:90: 2c:33:6b:68:ca:6c:4a:d6:ee:43:fb:66:42:ae:5e: 9d:bb:2a:20:8b:71:27:33:74:b1:13:6a:2d:7c:77: 97:3f:cf:b2:48:fb:17:d1:ba:ee:ea:21:80:12:6c: 49:e0:f3:e7:02:bc:67:e4:7f:e5:d7:6f:86:20:af: 3a:fc:e7:eb:c0:d8:17:6a:43:75:e0:db:c5:5d:db: 9f:00:b8:10:3b:be:19:22:5f:24:45:c4:83:24:23: 7b:da:43:c7:d0:b9:11:92:a8:6a:7b:61:99:b0:3d: c0:fd:b0:e7:c2:85:73:13:16:df:f0:06:6a:80:ed: 96:53:0d:9b:3d:03:af:0a:5e:df:81:b2:0a:75:d5: e4:2b:be:99:eb:cf:86:0f:a3:d6:aa:5c:b0:c1:5b: 0a:a3:8a:7c:23:8d:da:df:a2:38:34:e2:bb:94:3a: 32:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E0:A3:1C:37:A7:8C:7D:0A:DA:9E:0F:AD:6A:EE:1E:36:EB:A1:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0e5ab93-a265-34e1-8082-13190d3b8c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.228.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9a:be:d6:4c:c8:be:71:75:e0:49:43:e7:7e:dc:62:61:82: 73:dc:68:49:81:34:78:07:4c:09:e6:fb:04:b8:bd:bd:7a:a2: 45:75:23:35:d6:db:9d:76:ac:ec:c6:6e:b0:04:5a:11:41:a6: 8f:94:34:6e:8d:83:3a:24:78:c2:13:ce:db:7f:68:29:19:d6: 4d:a8:5b:5b:58:f5:23:b1:db:5f:12:3a:e5:cf:53:e2:23:ab: 72:07:4b:41:4d:93:69:78:55:78:46:b7:70:df:b9:67:cb:0e: a1:8f:7b:ff:76:ad:b1:30:05:09:ce:d9:ea:0e:3a:4e:28:8c: 60:af:8f:fe:47:73:ef:03:d2:6b:8d:b0:31:e0:2a:fe:da:7e: 04:b4:93:cc:5a:59:41:af:43:bb:33:36:39:34:28:71:d5:de: e8:51:a5:e2:8a:60:6f:f6:09:21:04:46:04:5f:b5:6c:09:60: d4:5d:bf:4b:b6:7c:de:29:34:7f:40:9a:b3:a6:e1:39:ff:6f: ab:b4:7e:d2:84:5d:8b:59:ee:89:09:0b:52:35:6f:72:bb:39: 67:9d:bf:e3:a4:8d:ed:00:4b:2f:e0:2b:78:f9:d7:ae:99:67: 9d:ee:a2:0f:35:d2:4a:3c:7d:df:f7:a6:45:14:42:00:2e:c6: d1:3e:e5:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebFklQXJJVyLrFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OTk5MWVmNDMtMmZkZS00ZGFkLWJjZjgtNmE2ZTQ1ODlhZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnZcHKOCgFcAulc3Gs4ILiJiE0rhAjxfe9RQ sdQQHcRzSPf8aPnWwq98LIemvvKx6yWdUg34jzFDNMekz3q9zgRYsmkEI+sjgO/8 akgdozm64EJc5cxadpAsM2toymxK1u5D+2ZCrl6duyogi3EnM3SxE2otfHeXP8+y SPsX0bru6iGAEmxJ4PPnArxn5H/l12+GIK86/OfrwNgXakN14NvFXdufALgQO74Z Il8kRcSDJCN72kPH0LkRkqhqe2GZsD3A/bDnwoVzExbf8AZqgO2WUw2bPQOvCl7f gbIKddXkK76Z68+GD6PWqlywwVsKo4p8I43a36I4NOK7lDoyzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDgoxw3p4x9CtqeD61q7h4266F9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjBlNWFiOTMtYTI2NS0z NGUxLTgwODItMTMxOTBkM2I4YzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeSYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyavtZMyL5xdeBJQ+d+3GJhgnPcaEmBNHgHTAnm+wS4vb16okV1IzXW 2512rOzGbrAEWhFBpo+UNG6NgzokeMITztt/aCkZ1k2oW1tY9SOx218SOuXPU+Ij q3IHS0FNk2l4VXhGt3DfuWfLDqGPe/92rbEwBQnO2eoOOk4ojGCvj/5Hc+8D0muN sDHgKv7afgS0k8xaWUGvQ7szNjk0KHHV3uhRpeKKYG/2CSEERgRftWwJYNRdv0u2 fN4pNH9AmrOm4Tn/b6u0ftKEXYtZ7okJC1I1b3K7OWedv+Okje0ASy/gK3j5166Z Z53uog810ko8fd/3pkUUQgAuxtE+5SM= -----END CERTIFICATE-----Generated at Mon Apr 7 05:54:35 2025 by rpki-client