$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca001775-332f-3522-b2e1-6e8edd046621.roa File: ca001775-332f-3522-b2e1-6e8edd046621.roa (raw, json) Hash identifier: MaJyo6ICd9/HrljPg3YFflXGCeMWlqCbTv2SYutcaXA= Subject key identifier: 16:E5:FA:45:EC:B7:2E:2B:CA:4F:AF:70:A6:ED:91:E9:70:0B:2F:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0746A67E8C7DC94DBA240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca001775-332f-3522-b2e1-6e8edd046621.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 73.248.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:74:6a:67:e8:c7:dc:94:db:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=ef5ff239-366b-4d79-8633-d9ff12bb8bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:88:b5:67:fe:13:65:1b:ad:53:84:e9:1a:45: 69:d3:d8:54:51:a1:3d:5a:ab:d6:1a:cb:90:09:8c: 92:8c:e9:86:fc:bf:95:d2:9c:c6:28:a0:a2:7b:54: 33:79:81:b0:4a:ad:45:84:be:b3:03:bf:26:c3:5a: e6:62:a7:ca:b3:b6:58:16:87:0a:e9:07:0b:78:3b: df:83:dc:01:46:73:6e:c2:a2:20:aa:20:57:8e:ce: e0:a8:08:a6:fc:e4:8f:58:f2:e9:f7:41:0a:9e:26: c5:85:1c:ca:47:d3:4a:84:4b:d1:0d:9a:32:44:c5: 46:95:b3:63:dc:8e:da:71:9d:81:90:66:05:1a:89: 6a:71:37:d1:db:f2:bf:43:43:ea:bb:bd:1a:46:65: 1b:fa:fa:99:15:21:36:e3:bc:23:42:53:03:9a:01: c3:df:a1:b4:63:90:17:e1:be:ed:a2:c4:e0:b5:b6: 39:13:6d:60:c1:ed:10:4d:1d:ef:b8:38:18:1e:8e: 12:b1:50:ab:3b:b4:bd:6e:52:b9:6f:78:e4:0d:53: 96:40:d1:15:69:0d:a9:0f:b8:0a:0f:ba:a6:52:60: 47:3c:33:7c:82:c9:86:c9:f6:da:8a:8d:7b:cb:d2: 31:21:89:6e:29:d9:e5:ad:c7:af:00:04:60:8e:32: 1b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E5:FA:45:EC:B7:2E:2B:CA:4F:AF:70:A6:ED:91:E9:70:0B:2F:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca001775-332f-3522-b2e1-6e8edd046621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.248.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0e:5c:c1:4b:b0:b7:6f:55:83:37:31:2e:90:54:92:64:86: 92:42:79:f6:c9:be:e0:eb:9c:73:aa:8f:e8:55:58:25:48:bc: 7d:40:20:11:e5:d0:f7:24:55:cf:58:18:fe:00:73:c9:6d:71: e1:2a:e9:b2:bd:0b:56:37:ac:2a:af:11:c2:5b:03:7d:55:17: da:8f:c1:82:40:e1:10:b5:f8:2b:89:54:bf:8c:2b:ed:97:ac: 3b:1c:22:d3:5d:eb:18:6e:62:82:f4:f4:4d:c1:64:83:27:9a: 56:e8:07:89:a2:81:ff:1b:65:b0:cf:7b:8f:7b:9c:50:ce:2a: e7:f1:d0:29:10:06:b2:32:82:bf:ff:6a:fc:d2:7a:18:89:0f: ea:a4:9a:07:18:84:4e:d0:d6:74:65:01:bd:96:f4:72:7f:e4: 35:93:bf:71:31:1f:77:d8:dd:f4:41:df:b3:2c:f1:8d:31:80: ff:3d:70:f2:13:6c:5b:f1:65:02:86:b3:56:18:e3:14:ed:d3: 4c:d9:f7:d0:0e:98:3b:86:ee:8a:db:4b:d9:9f:af:a5:b8:bc: 68:47:68:9e:ad:9b:a3:cf:ed:1c:59:68:4e:29:ed:c5:64:52: 1a:b3:31:ca:bb:31:a1:77:36:50:cf:0d:25:de:b2:43:78:20: 9d:34:5d:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssHRqZ+jH3JTbokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZWY1ZmYyMzktMzY2Yi00ZDc5LTg2MzMtZDlmZjEyYmI4YmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoi1Z/4TZRutU4TpGkVp09hUUaE9WqvWGsuQ CYySjOmG/L+V0pzGKKCie1QzeYGwSq1FhL6zA78mw1rmYqfKs7ZYFocK6QcLeDvf g9wBRnNuwqIgqiBXjs7gqAim/OSPWPLp90EKnibFhRzKR9NKhEvRDZoyRMVGlbNj 3I7acZ2BkGYFGolqcTfR2/K/Q0Pqu70aRmUb+vqZFSE247wjQlMDmgHD36G0Y5AX 4b7tosTgtbY5E21gwe0QTR3vuDgYHo4SsVCrO7S9blK5b3jkDVOWQNEVaQ2pD7gK D7qmUmBHPDN8gsmGyfbaio17y9IxIYluKdnlrcevAARgjjIbNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbl+kXsty4ryk+vcKbtkelwCy+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2EwMDE3NzUtMzMyZi0z NTIyLWIyZTEtNmU4ZWRkMDQ2NjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSfgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkOXMFLsLdvVYM3MS6QVJJkhpJCefbJvuDrnHOqj+hVWCVIvH1AIBHl 0PckVc9YGP4Ac8ltceEq6bK9C1Y3rCqvEcJbA31VF9qPwYJA4RC1+CuJVL+MK+2X rDscItNd6xhuYoL09E3BZIMnmlboB4migf8bZbDPe497nFDOKufx0CkQBrIygr// avzSehiJD+qkmgcYhE7Q1nRlAb2W9HJ/5DWTv3ExH3fY3fRB37Ms8Y0xgP89cPIT bFvxZQKGs1YY4xTt00zZ99AOmDuG7orbS9mfr6W4vGhHaJ6tm6PP7RxZaE4p7cVk UhqzMcq7MaF3NlDPDSXeskN4IJ00XQo= -----END CERTIFICATE-----Generated at Sun Apr 6 19:24:02 2025 by rpki-client