$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c83de52a-eb5c-3e27-b6fe-a7e638bc7fe3.roa File: c83de52a-eb5c-3e27-b6fe-a7e638bc7fe3.roa (raw, json) Hash identifier: nFblWm1R0YIsbZc85Ahp6LQFN3rRRZtBIlN9OA+0+VY= Subject key identifier: 2A:A2:5E:A3:DA:A4:F5:71:97:6A:CC:66:45:8E:66:E8:74:6A:A2:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F9477CEBE1CECE032FB340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c83de52a-eb5c-3e27-b6fe-a7e638bc7fe3.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 73.77.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:47:7c:eb:e1:ce:ce:03:2f:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=35b5c815-04a9-47a4-b4dc-27144e548ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:f8:60:4b:de:27:60:b0:e0:e3:40:63:b8: 7e:cc:7c:f2:78:89:8c:dd:ed:ed:e8:16:f1:1a:7e: 4c:b0:53:2d:50:c8:3f:af:7b:92:46:9c:13:5a:c1: 94:0d:98:ac:0d:7a:16:94:ca:db:c7:26:39:f8:ab: 07:02:78:1e:81:37:31:4b:08:26:c4:00:fe:0d:8f: d2:4b:eb:68:cf:1f:90:de:d5:fc:98:15:e9:a4:33: bb:f9:ee:29:b2:59:5a:93:5b:ea:f6:bd:64:98:f3: ba:1b:01:a9:bc:28:f0:d3:68:c1:23:05:01:cf:b9: 5f:bc:ee:90:9e:0f:36:21:e8:3f:fd:7d:c7:bb:65: 12:75:09:c4:21:f7:e5:89:9e:0f:95:e9:eb:74:67: f3:08:b0:7e:97:bc:4c:44:72:c8:e6:52:8c:64:68: b4:bb:e0:83:8f:96:15:cd:77:a6:93:a1:3d:80:4d: 6d:1e:15:7f:2a:eb:3c:e3:97:dc:8f:81:74:f6:e7: df:38:20:68:71:b5:1f:61:58:e7:00:68:46:66:eb: 2d:d3:79:79:ea:be:dd:02:0d:c8:76:56:6b:cf:85: a3:b5:bd:12:0e:e6:1c:2d:6d:2c:7d:06:63:92:e7: 91:d0:33:07:54:1e:5c:f5:85:d8:2e:ab:9b:57:bb: fa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A2:5E:A3:DA:A4:F5:71:97:6A:CC:66:45:8E:66:E8:74:6A:A2:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c83de52a-eb5c-3e27-b6fe-a7e638bc7fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.77.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:76:e5:1f:66:0c:39:9d:14:3c:10:6e:65:1b:5f:ee:34:cb: fa:93:4a:21:f1:b2:02:a1:99:c4:75:09:67:c4:89:0a:97:c0: 0f:4e:0b:93:59:d7:b3:0c:1b:77:b3:65:7b:8e:04:1b:b1:ed: dc:81:02:39:31:89:90:6c:55:6e:66:d8:43:55:39:20:35:52: af:de:6a:6c:12:d3:21:a3:4b:4f:d1:89:67:1b:f7:b5:46:33: e4:59:37:fc:67:6a:53:bf:e2:5a:d2:a0:eb:5d:65:c4:a8:1e: 93:63:5f:70:af:30:a9:a8:9a:98:8b:ea:eb:5f:49:c6:ff:ef: 0b:39:af:22:6b:a3:20:12:9d:d8:a0:94:46:32:04:62:d6:3b: dc:32:4c:26:be:fd:de:e1:cc:37:4a:83:ce:68:0f:7b:b7:ed: 7f:35:e0:17:00:c2:ff:fb:ae:7b:d1:f6:86:e6:eb:eb:4e:45: 3a:a8:ec:fe:6d:fe:ce:61:89:b8:8b:56:71:c5:aa:a2:29:e2: 44:b0:36:f2:b3:e6:1f:25:68:c3:cc:c5:93:f2:da:0a:0b:ee: 0d:c4:ca:11:c1:ef:20:7f:51:99:0f:b1:a4:1a:b9:a3:1a:ca: 95:d6:42:42:2f:15:c9:14:a9:08:53:18:98:5f:37:5e:ef:c0: 5c:91:76:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Ud86+HOzgMvs0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MzViNWM4MTUtMDRhOS00N2E0LWI0ZGMtMjcxNDRlNTQ4ZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTj4YEveJ2Cw4ONAY7h+zHzyeImM3e3t6Bbx Gn5MsFMtUMg/r3uSRpwTWsGUDZisDXoWlMrbxyY5+KsHAngegTcxSwgmxAD+DY/S S+tozx+Q3tX8mBXppDO7+e4psllak1vq9r1kmPO6GwGpvCjw02jBIwUBz7lfvO6Q ng82Ieg//X3Hu2USdQnEIffliZ4PlenrdGfzCLB+l7xMRHLI5lKMZGi0u+CDj5YV zXemk6E9gE1tHhV/Kus845fcj4F09uffOCBocbUfYVjnAGhGZust03l56r7dAg3I dlZrz4Wjtb0SDuYcLW0sfQZjkueR0DMHVB5c9YXYLqubV7v61QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqiXqPapPVxl2rMZkWOZuh0aqKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzgzZGU1MmEtZWI1Yy0z ZTI3LWI2ZmUtYTdlNjM4YmM3ZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASU2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF25R9mDDmdFDwQbmUbX+40y/qTSiHxsgKhmcR1CWfEiQqXwA9OC5NZ 17MMG3ezZXuOBBux7dyBAjkxiZBsVW5m2ENVOSA1Uq/eamwS0yGjS0/RiWcb97VG M+RZN/xnalO/4lrSoOtdZcSoHpNjX3CvMKmompiL6utfScb/7ws5ryJroyASndig lEYyBGLWO9wyTCa+/d7hzDdKg85oD3u37X814BcAwv/7rnvR9obm6+tORTqo7P5t /s5hibiLVnHFqqIp4kSwNvKz5h8laMPMxZPy2goL7g3EyhHB7yB/UZkPsaQauaMa ypXWQkIvFckUqQhTGJhfN17vwFyRdgo= -----END CERTIFICATE-----Generated at Mon Apr 7 05:51:56 2025 by rpki-client