$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3e8ae6a-5aa4-34a9-8bc4-516f374d2778.roa File: c3e8ae6a-5aa4-34a9-8bc4-516f374d2778.roa (raw, json) Hash identifier: s7gPkO1hvWAe1Md0vlLtLRhjgX4S7t05uhGkO7E3v98= Subject key identifier: 93:55:F7:18:61:2C:25:D8:92:D0:EE:64:C7:8F:A4:A2:87:C3:A7:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1AD01302D6D7BDE1ADF60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3e8ae6a-5aa4-34a9-8bc4-516f374d2778.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 73.93.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:ad:01:30:2d:6d:7b:de:1a:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=e42f181a-08d1-4d6c-ab21-360af963b3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:6f:b3:4e:0c:a2:b6:b4:99:4a:7b:53:9b: b1:2e:57:b5:4f:06:f3:b4:ed:37:8b:0c:d8:a2:21: 52:80:ea:c7:42:a7:a0:62:34:28:fd:dd:5e:0d:bf: a1:47:8d:70:56:b8:82:5a:af:dc:61:85:c0:d9:2c: c8:f4:74:d6:ed:f3:de:71:04:9f:b7:d6:93:62:a3: b0:89:63:5d:59:8c:9e:4e:ef:69:57:b2:65:1e:4f: 4b:7c:9e:05:ed:46:ff:a6:7f:ab:22:0c:50:df:24: 18:90:22:79:4d:74:6d:3b:16:ea:17:c3:ad:f3:76: 4d:39:76:41:32:44:0c:fc:84:36:50:28:50:aa:d7: ed:be:e4:7f:07:66:df:62:9d:8b:99:bc:4b:cc:b0: b7:8b:e0:63:97:e0:d3:f8:86:d8:89:be:16:56:4c: 3d:33:da:a9:d1:59:d2:bb:f2:82:87:37:c7:08:3f: 6e:fa:9b:cf:ef:18:d7:da:7e:9a:95:24:2a:5a:68: de:27:f6:90:a0:ec:9a:c9:40:61:f1:b6:ff:17:b2: cf:95:ba:17:90:c0:40:e0:d1:80:07:82:c6:0e:3b: fd:c0:3d:70:86:06:ec:1a:bf:2c:07:a9:86:d0:5c: 73:80:a0:40:a7:46:42:07:36:d0:9b:9e:0d:86:94: 0b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:55:F7:18:61:2C:25:D8:92:D0:EE:64:C7:8F:A4:A2:87:C3:A7:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3e8ae6a-5aa4-34a9-8bc4-516f374d2778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.93.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:af:7b:49:f6:f0:5b:6e:59:4f:13:38:6e:88:76:2a:ca:6b: e5:28:26:94:aa:b6:e3:25:2d:ed:f3:f6:4b:06:34:4c:61:2b: df:70:7e:ed:3b:85:23:bc:e3:6c:d2:13:ed:11:eb:9c:2d:f3: 29:98:01:b9:21:26:29:b5:c0:d3:12:42:bc:1b:1f:f9:07:f1: 7e:ee:84:9b:df:e0:dc:f1:e4:b7:34:e8:4d:c3:78:7d:56:80: 2b:b7:e8:6e:3a:c5:5f:1c:0e:db:94:d2:0f:fc:df:3b:cb:bf: 93:e9:9c:c3:b1:6c:99:e4:29:36:29:49:68:bb:dd:10:9d:93: 42:d0:ee:b2:85:99:cc:d4:6f:66:ab:07:07:66:7d:d0:16:65: 1c:26:0e:09:1f:79:31:e4:0b:b3:3d:8c:ca:74:a2:2a:24:b6: 17:47:3c:8d:78:c0:16:83:f4:6d:89:d2:98:27:81:f8:5b:93: 94:c2:e4:3a:f7:89:97:7d:e9:d9:99:9f:06:01:0b:82:b6:30: 71:6f:97:ae:7e:a9:85:a8:1d:47:be:4f:4e:e7:88:9b:b9:0e: 12:34:cf:da:98:6e:78:a0:33:6b:83:76:b5:9c:44:31:1e:3c: a4:61:6a:e6:04:e1:24:71:a3:ee:6f:49:97:6b:70:22:4d:c0: bf:76:95:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssa0BMC1te94a32AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTQyZjE4MWEtMDhkMS00ZDZjLWFiMjEtMzYwYWY5NjNiM2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk1vs04Mora0mUp7U5uxLle1TwbztO03iwzY oiFSgOrHQqegYjQo/d1eDb+hR41wVriCWq/cYYXA2SzI9HTW7fPecQSft9aTYqOw iWNdWYyeTu9pV7JlHk9LfJ4F7Ub/pn+rIgxQ3yQYkCJ5TXRtOxbqF8Ot83ZNOXZB MkQM/IQ2UChQqtftvuR/B2bfYp2LmbxLzLC3i+Bjl+DT+IbYib4WVkw9M9qp0VnS u/KChzfHCD9u+pvP7xjX2n6alSQqWmjeJ/aQoOyayUBh8bb/F7LPlboXkMBA4NGA B4LGDjv9wD1whgbsGr8sB6mG0FxzgKBAp0ZCBzbQm54NhpQLcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNV9xhhLCXYktDuZMePpKKHw6dmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzNlOGFlNmEtNWFhNC0z NGE5LThiYzQtNTE2ZjM3NGQyNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSV3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKve0n28FtuWU8TOG6IdirKa+UoJpSqtuMlLe3z9ksGNExhK99wfu07 hSO842zSE+0R65wt8ymYAbkhJim1wNMSQrwbH/kH8X7uhJvf4Nzx5Lc06E3DeH1W gCu36G46xV8cDtuU0g/83zvLv5PpnMOxbJnkKTYpSWi73RCdk0LQ7rKFmczUb2ar BwdmfdAWZRwmDgkfeTHkC7M9jMp0oiokthdHPI14wBaD9G2J0pgngfhbk5TC5Dr3 iZd96dmZnwYBC4K2MHFvl65+qYWoHUe+T07niJu5DhI0z9qYbnigM2uDdrWcRDEe PKRhauYE4SRxo+5vSZdrcCJNwL92lSg= -----END CERTIFICATE-----Generated at Mon Apr 7 06:12:24 2025 by rpki-client