$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b199252c-eaea-336a-bef9-85fd8ff65633.roa File: b199252c-eaea-336a-bef9-85fd8ff65633.roa (raw, json) Hash identifier: /0N1+CHIolpvUnmwegI8e//NqTgibj1Rz7881aycJ70= Subject key identifier: F7:BB:DE:6B:03:A8:4A:E2:C3:D4:7F:E5:0F:44:12:AE:FD:6A:EF:3C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F892C0A10A9EF6A2617D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b199252c-eaea-336a-bef9-85fd8ff65633.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 73.219.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:92:c0:a1:0a:9e:f6:a2:61:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=a4538b3c-73d2-488d-951e-e30deb7984af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:09:7d:4d:6c:a6:a5:82:0a:8e:d4:41:4e:0c: 4e:b4:08:ca:f5:14:44:43:12:29:b4:8d:6b:91:4b: eb:ec:79:e6:28:3b:e7:37:89:10:7b:4d:dc:fe:67: e9:4f:d0:f8:71:5c:0e:a6:68:60:38:ef:89:af:c3: e1:8e:1c:57:2f:69:59:74:7d:12:75:e5:93:0b:bb: 7b:4b:73:7b:f1:b1:59:8f:a4:28:c3:40:d0:98:15: b4:ce:0f:c4:49:67:c6:b8:12:ff:a0:68:48:6f:c1: 5c:04:51:77:a9:ed:5c:9e:d2:5d:e4:20:78:35:40: 29:3d:7d:72:29:a1:55:ab:b3:da:08:f1:98:47:88: fe:f9:46:f0:ed:2e:8d:e0:5d:45:1b:15:05:6f:23: 28:26:54:25:a2:3e:34:37:19:79:4a:d8:e9:38:c0: 1d:a0:e4:20:57:68:96:46:58:b6:c0:82:a2:89:ff: 44:13:50:33:1d:5f:ec:7c:a5:c1:26:6d:c8:ed:3a: e1:63:df:d8:3e:51:40:b1:e1:ed:80:aa:83:42:68: 95:c0:8d:10:60:e8:e9:bf:48:32:c2:19:93:e2:88: 0d:7e:3f:a8:41:ad:78:ff:66:cf:5e:8d:93:a8:5d: b7:5e:33:bf:77:bb:f4:70:97:c6:30:41:84:9a:04: 11:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BB:DE:6B:03:A8:4A:E2:C3:D4:7F:E5:0F:44:12:AE:FD:6A:EF:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b199252c-eaea-336a-bef9-85fd8ff65633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.219.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:65:46:1f:42:3d:1a:c9:be:4c:70:d7:ce:64:bd:c8:fd:db: a1:7f:76:b7:18:c2:0a:e7:bd:e7:ff:02:e9:8f:a9:ba:4e:cb: 19:43:23:c8:04:4e:19:17:16:6c:d0:7c:9b:e8:7a:5f:8c:d8: a9:9f:91:c4:58:01:d3:a7:e9:fc:15:7f:fa:34:6a:e8:3e:07: 85:c9:27:07:b2:b0:d0:fa:bb:d3:52:7d:97:d1:80:33:d6:9f: f3:6f:5b:b3:6b:ed:fa:f1:66:80:10:bb:db:1f:d2:ea:f2:76: 45:67:0d:7c:75:1f:64:90:68:3b:34:37:23:aa:96:62:ed:63: 92:23:bb:7a:42:24:62:41:d7:77:9e:8c:2f:c3:4c:60:31:0b: f4:f1:53:c0:13:a2:75:34:8c:d5:95:85:61:5d:31:3a:02:e9: 10:7b:91:17:ac:ac:d8:e9:f3:07:0b:3e:39:0b:0d:44:68:b7: 43:30:99:00:d5:80:b0:e8:04:6f:bc:bd:dc:7f:ad:4c:b5:16: 5a:e1:76:b1:b6:f0:23:81:8f:53:36:7b:33:40:31:48:17:14: 7a:7c:4a:ca:36:a3:42:bd:1b:c3:82:61:09:13:f9:d8:31:1a: 9e:95:76:95:ce:0e:fa:20:9e:b7:a3:e5:d7:71:ca:06:9a:15: 33:72:e7:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+JLAoQqe9qJhfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YTQ1MzhiM2MtNzNkMi00ODhkLTk1MWUtZTMwZGViNzk4NGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwl9TWympYIKjtRBTgxOtAjK9RREQxIptI1r kUvr7HnmKDvnN4kQe03c/mfpT9D4cVwOpmhgOO+Jr8PhjhxXL2lZdH0SdeWTC7t7 S3N78bFZj6Qow0DQmBW0zg/ESWfGuBL/oGhIb8FcBFF3qe1cntJd5CB4NUApPX1y KaFVq7PaCPGYR4j++Ubw7S6N4F1FGxUFbyMoJlQloj40Nxl5StjpOMAdoOQgV2iW Rli2wIKiif9EE1AzHV/sfKXBJm3I7TrhY9/YPlFAseHtgKqDQmiVwI0QYOjpv0gy whmT4ogNfj+oQa14/2bPXo2TqF23XjO/d7v0cJfGMEGEmgQRpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe73msDqEriw9R/5Q9EEq79au88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjE5OTI1MmMtZWFlYS0z MzZhLWJlZjktODVmZDhmZjY1NjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASdsYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNlRh9CPRrJvkxw185kvcj926F/drcYwgrnvef/AumPqbpOyxlDI8gE ThkXFmzQfJvoel+M2KmfkcRYAdOn6fwVf/o0aug+B4XJJweysND6u9NSfZfRgDPW n/NvW7Nr7frxZoAQu9sf0urydkVnDXx1H2SQaDs0NyOqlmLtY5Iju3pCJGJB13ee jC/DTGAxC/TxU8ATonU0jNWVhWFdMToC6RB7kResrNjp8wcLPjkLDURot0MwmQDV gLDoBG+8vdx/rUy1FlrhdrG28COBj1M2ezNAMUgXFHp8Sso2o0K9G8OCYQkT+dgx Gp6VdpXODvognrej5ddxygaaFTNy50g= -----END CERTIFICATE-----Generated at Fri Mar 14 07:58:36 2025 by rpki-client