$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7004a0a-524c-3ebd-9dca-6f18a24193f9.roa File: c7004a0a-524c-3ebd-9dca-6f18a24193f9.roa (raw, json) Hash identifier: PNCRwHMOJiNJq+M8VNud9S0KF1dd0nlgd0X8RCjTxI4= Subject key identifier: EC:38:79:03:4D:A6:F7:7C:1A:F5:0B:D8:50:65:C8:AF:AB:9B:7E:69 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F73596A97D243D57373780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7004a0a-524c-3ebd-9dca-6f18a24193f9.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 73.218.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:35:96:a9:7d:24:3d:57:37:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=7c0c16d7-fffc-4585-bc98-1f2d3035dac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:de:04:20:e0:8b:70:28:3c:76:6b:5b:48:62: b8:1a:df:97:a8:fc:0a:7f:e6:4f:84:72:7a:a1:c4: 54:fc:1e:0d:d4:2d:4c:76:bc:70:4d:b9:2f:34:3b: 7c:fe:ff:d9:9c:44:2f:56:80:b2:9c:4a:f8:10:40: 35:70:9d:03:00:70:72:3d:0b:d9:72:c9:37:30:c7: 62:bc:af:1d:86:53:e1:1b:d8:14:53:74:c1:d2:c3: ff:a1:f5:fd:9b:16:ab:ba:b7:88:f5:b1:07:41:48: 8e:da:c3:6f:0f:3d:7e:ee:93:05:e7:b3:1f:e6:ca: e6:4b:e9:30:46:22:75:7d:07:f4:9e:97:01:52:a5: 54:65:bd:18:44:d6:bf:c0:70:3c:ca:a4:d8:95:db: 4a:90:06:7e:b9:1a:d8:db:ac:33:5c:27:33:ed:8c: b0:9d:89:5b:b1:e7:32:95:bf:39:bb:aa:06:47:ac: 21:e9:98:ba:e0:99:af:1c:fe:ea:19:4e:5e:4a:fc: 25:47:89:32:62:ec:4f:1e:25:29:13:02:96:1e:26: 32:23:90:05:7b:ed:d3:03:37:4d:9c:86:da:7f:f6: 36:1e:fa:fd:96:9e:c9:21:bb:20:86:ff:05:48:bc: d8:54:04:c9:bf:27:27:fd:13:a7:78:fc:af:07:79: 8d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:38:79:03:4D:A6:F7:7C:1A:F5:0B:D8:50:65:C8:AF:AB:9B:7E:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7004a0a-524c-3ebd-9dca-6f18a24193f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.218.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:20:37:eb:76:50:03:c7:9a:be:29:f5:82:f6:f3:32:cf:14: 8c:19:95:83:42:be:6f:84:c3:d4:30:ed:51:6b:da:5d:93:df: 94:a4:17:27:34:ad:ad:01:91:13:a9:e9:60:2b:d2:38:b8:d1: ef:05:30:36:88:6f:0b:82:98:cb:4e:82:95:2c:3e:9f:80:43: 73:da:a9:d4:c8:14:1a:2a:3e:3a:df:03:04:7e:59:14:cf:04: 7a:aa:79:64:72:e2:30:78:1a:bd:96:21:b2:39:7f:04:c9:d2: 21:28:77:71:44:96:eb:34:8b:61:b0:ea:29:0d:fc:03:9f:f8: 89:02:14:9e:93:d3:d9:6b:b4:e7:7e:16:09:e8:d0:aa:f8:17: 19:5d:7a:78:28:38:55:8a:d0:03:42:c2:64:b2:d2:a4:55:62: fa:47:d2:2e:f6:97:15:99:f3:11:d4:32:48:44:85:ed:4c:fb: 53:03:97:b5:a5:2d:68:28:e5:b4:52:69:a6:e6:24:fd:a7:82: aa:52:b3:b3:6f:bd:e7:0e:15:24:c5:31:3c:17:5e:45:8e:5d: a0:e4:89:b7:b1:44:7d:d4:17:b1:07:d5:55:2e:8c:47:98:0c: 03:f8:65:7e:07:cd:37:a2:cf:1c:69:70:84:9f:ea:ce:18:c2: 0a:3e:d8:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09zWWqX0kPVc3N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk N2MwYzE2ZDctZmZmYy00NTg1LWJjOTgtMWYyZDMwMzVkYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd4EIOCLcCg8dmtbSGK4Gt+XqPwKf+ZPhHJ6 ocRU/B4N1C1MdrxwTbkvNDt8/v/ZnEQvVoCynEr4EEA1cJ0DAHByPQvZcsk3MMdi vK8dhlPhG9gUU3TB0sP/ofX9mxarureI9bEHQUiO2sNvDz1+7pMF57Mf5srmS+kw RiJ1fQf0npcBUqVUZb0YRNa/wHA8yqTYldtKkAZ+uRrY26wzXCcz7YywnYlbsecy lb85u6oGR6wh6Zi64JmvHP7qGU5eSvwlR4kyYuxPHiUpEwKWHiYyI5AFe+3TAzdN nIbaf/Y2Hvr9lp7JIbsghv8FSLzYVATJvycn/ROnePyvB3mN4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOw4eQNNpvd8GvUL2FBlyK+rm35pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzcwMDRhMGEtNTI0Yy0z ZWJkLTlkY2EtNmYxOGEyNDE5M2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8gN+t2UAPHmr4p9YL28zLPFIwZlYNCvm+Ew9Qw7VFr2l2T35SkFyc0 ra0BkROp6WAr0ji40e8FMDaIbwuCmMtOgpUsPp+AQ3PaqdTIFBoqPjrfAwR+WRTP BHqqeWRy4jB4Gr2WIbI5fwTJ0iEod3FElus0i2Gw6ikN/AOf+IkCFJ6T09lrtOd+ Fgno0Kr4FxldengoOFWK0ANCwmSy0qRVYvpH0i72lxWZ8xHUMkhEhe1M+1MDl7Wl LWgo5bRSaabmJP2ngqpSs7NvvecOFSTFMTwXXkWOXaDkibexRH3UF7EH1VUujEeY DAP4ZX4HzTeizxxpcISf6s4Ywgo+2KE= -----END CERTIFICATE-----Generated at Sun Apr 6 12:04:19 2025 by rpki-client