$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6e8eca2-a59b-3da1-ac9a-f67a680e67d0.roa File: d6e8eca2-a59b-3da1-ac9a-f67a680e67d0.roa (raw, json) Hash identifier: 14mQg2CkukqqxSDZwcXz0B5+3UH8PXtHdY4HGUDc+mk= Subject key identifier: C8:16:8D:B8:1E:E8:A7:89:DD:2A:59:40:2A:B5:6F:72:EB:7C:9C:AB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F74829F8465D980C3F7980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6e8eca2-a59b-3da1-ac9a-f67a680e67d0.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 73.253.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:48:29:f8:46:5d:98:0c:3f:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=0d35e0ef-56dc-4123-84ad-8f8c46d8fca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:2c:a2:b4:44:28:59:ff:e9:c9:0f:25:59: e8:f2:80:70:3d:3c:8d:5a:97:cb:f4:9d:3f:3b:0d: 80:0e:c8:bf:9a:9f:4a:28:26:d2:c5:04:1c:e3:10: 85:58:27:09:1e:a5:b3:6c:d9:8d:70:81:5a:b7:37: 75:de:3a:4e:d7:4f:82:c5:09:9b:e4:93:f3:88:1b: da:12:28:60:f3:83:36:91:28:7b:e6:d0:1c:e4:62: f7:75:89:58:c7:d3:19:40:0b:d4:89:ee:83:b4:63: 5d:fe:f9:2b:64:f3:ad:1f:60:b6:29:9b:88:ba:5b: 6b:5b:ce:3d:c0:35:3b:9a:dd:dc:68:8c:c5:04:4d: 1b:90:5d:96:99:22:b7:56:57:83:f9:c3:c6:6c:e4: c9:f9:72:87:c2:e3:38:69:b2:76:83:a6:7d:9d:b5: 64:34:d5:80:ff:b4:2e:99:69:43:77:52:28:2f:2f: ee:a8:0d:25:23:85:e2:1c:72:3f:da:3a:24:8b:41: 56:74:84:8b:ce:54:cf:1c:3f:e3:b7:14:ee:e5:24: f3:ef:c3:83:91:23:ec:4d:6a:11:b0:93:24:5e:60: 68:31:2e:e3:06:7e:6d:5a:ca:23:d3:bd:aa:3a:47: f6:dd:a2:26:3d:5e:40:1d:e9:b1:7e:49:5c:2f:4a: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:16:8D:B8:1E:E8:A7:89:DD:2A:59:40:2A:B5:6F:72:EB:7C:9C:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6e8eca2-a59b-3da1-ac9a-f67a680e67d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.253.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:7f:59:41:8c:11:c9:b5:88:98:af:b1:90:8e:da:04:d8:94: b2:2b:2c:f4:93:08:d8:63:1a:3d:49:76:9b:d6:1a:6b:91:4f: 9a:91:d2:59:3e:be:52:21:be:1a:56:df:69:6c:ed:7f:3e:4f: f8:37:82:13:5d:ba:4c:99:dd:c4:ee:e1:46:54:57:51:e0:8a: 96:a2:e6:a2:98:88:ba:ac:4f:cb:6e:08:36:c4:d9:80:1f:d7: dc:0c:46:b8:d5:e9:ef:4e:81:14:3e:57:57:ef:92:f0:04:e5: 17:a3:a7:4c:99:65:a6:d1:f4:76:91:49:0e:1e:f4:6d:74:bc: 2a:0e:bd:4a:8c:6c:49:1a:08:66:6f:66:3f:ad:71:b0:30:ec: 58:d4:ae:2d:7b:36:c0:ed:46:79:79:7d:85:9c:4c:b9:7c:e3: 31:9e:92:a2:d8:47:3e:12:c5:19:dd:49:5d:40:22:9e:3b:34: 11:a2:a3:21:84:9d:8b:13:57:ac:ec:84:c0:c6:82:c2:02:d7: 67:0e:45:ca:e9:42:5b:38:4c:37:82:01:91:35:5c:42:69:7f: 53:dc:cf:07:b9:73:3f:cb:23:4c:b6:89:77:9e:63:02:bc:d3: 80:32:92:b2:ff:7a:17:a6:da:cc:7f:2c:62:69:70:57:ff:83: 19:c9:35:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj090gp+EZdmAw/eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MGQzNWUwZWYtNTZkYy00MTIzLTg0YWQtOGY4YzQ2ZDhmY2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2IsorREKFn/6ckPJVno8oBwPTyNWpfL9J0/ Ow2ADsi/mp9KKCbSxQQc4xCFWCcJHqWzbNmNcIFatzd13jpO10+CxQmb5JPziBva Eihg84M2kSh75tAc5GL3dYlYx9MZQAvUie6DtGNd/vkrZPOtH2C2KZuIultrW849 wDU7mt3caIzFBE0bkF2WmSK3VleD+cPGbOTJ+XKHwuM4abJ2g6Z9nbVkNNWA/7Qu mWlDd1IoLy/uqA0lI4XiHHI/2joki0FWdISLzlTPHD/jtxTu5STz78ODkSPsTWoR sJMkXmBoMS7jBn5tWsoj072qOkf23aImPV5AHemxfklcL0rjFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgWjbge6KeJ3SpZQCq1b3LrfJyrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDZlOGVjYTItYTU5Yi0z ZGExLWFjOWEtZjY3YTY4MGU2N2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSf1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN/WUGMEcm1iJivsZCO2gTYlLIrLPSTCNhjGj1JdpvWGmuRT5qR0lk+ vlIhvhpW32ls7X8+T/g3ghNdukyZ3cTu4UZUV1Hgipai5qKYiLqsT8tuCDbE2YAf 19wMRrjV6e9OgRQ+V1fvkvAE5Rejp0yZZabR9HaRSQ4e9G10vCoOvUqMbEkaCGZv Zj+tcbAw7FjUri17NsDtRnl5fYWcTLl84zGekqLYRz4SxRndSV1AIp47NBGioyGE nYsTV6zshMDGgsIC12cORcrpQls4TDeCAZE1XEJpf1Pczwe5cz/LI0y2iXeeYwK8 04AykrL/ehem2sx/LGJpcFf/gxnJNdk= -----END CERTIFICATE-----Generated at Sun Apr 6 11:34:26 2025 by rpki-client