$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9f3b785-792e-3cab-9185-b2f47e170e5e.roa File: d9f3b785-792e-3cab-9185-b2f47e170e5e.roa (raw, json) Hash identifier: 2ot4WdKgn83gxSYh9qGYhpVXaFdPZw5dWntApMdqGOk= Subject key identifier: 8F:6C:CC:BB:8F:48:EC:43:E8:BA:45:B2:8F:CD:D6:EA:77:EE:96:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F9295C7C4745531DF81000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9f3b785-792e-3cab-9185-b2f47e170e5e.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 73.206.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:29:5c:7c:47:45:53:1d:f8:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=38144764-0616-460e-b67f-38c9d09e63b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:f3:c2:f0:47:60:cf:03:d6:ec:0b:60:90: ba:24:41:6e:44:43:25:6d:dd:e5:35:b9:8f:73:68: 7e:48:e8:fe:ab:5b:aa:6e:50:f8:b8:93:95:53:e7: 05:f1:40:68:83:2e:30:5b:db:d4:05:a3:5d:57:73: 4d:1f:d2:b8:32:cb:0a:71:15:e3:c1:2e:27:82:44: 61:a3:62:3e:3d:01:44:eb:7c:b6:cc:ce:58:16:ad: 53:90:12:1c:54:8e:22:0b:81:df:3f:03:5c:b4:b9: bb:c5:1f:d4:6c:a7:fa:19:02:63:44:22:7e:99:8e: 09:e0:90:2b:a9:ad:f3:a7:b0:f3:ee:ca:67:2c:38: fd:d8:0c:78:25:6c:bc:10:fb:7c:f3:c6:63:9f:0c: b6:76:8e:36:1f:e6:6b:7c:ea:e6:e7:3f:c1:8e:cb: b3:ec:c4:8c:0f:47:9b:1e:6c:ba:70:5d:5b:63:5a: 98:df:a4:e6:0f:7d:29:91:15:f9:20:54:f1:80:45: b4:a4:11:b4:1f:7b:3c:66:74:4e:83:d6:51:f1:e1: eb:c3:bc:56:c4:4e:1d:23:e1:1b:ed:04:66:be:6f: 03:9b:a5:32:51:79:51:fb:98:26:1c:1c:2f:c5:cd: ad:86:25:ca:ae:f8:39:10:bd:6f:6e:a7:37:90:cd: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6C:CC:BB:8F:48:EC:43:E8:BA:45:B2:8F:CD:D6:EA:77:EE:96:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9f3b785-792e-3cab-9185-b2f47e170e5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.206.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:04:51:3f:9a:b6:69:2a:f8:2f:cd:dc:83:3a:8f:d8:fb:e0: 1b:61:10:60:b4:73:9e:e4:6e:f5:9c:91:2c:0c:40:e5:c6:6d: 60:ca:ef:05:7b:b3:f2:4a:6c:ac:57:df:63:54:40:f1:4e:ed: eb:fa:f9:94:6f:ec:7e:99:4a:a2:b4:36:f5:42:08:46:87:17: 7f:a4:42:fd:61:69:b5:77:26:36:e2:08:e6:f5:80:4c:8f:61: 33:f7:37:81:c6:08:e6:0d:2b:5f:5a:b5:71:dc:75:5c:16:fc: fe:ce:dd:e5:31:5b:26:45:45:5c:a2:75:a6:a6:f3:e9:07:0b: 71:de:bb:6f:8b:af:89:d5:9b:f6:67:09:69:0b:de:37:a7:00: 9d:92:10:03:0d:c6:7e:2a:a3:3a:d3:a0:92:80:61:e2:95:78: 4f:73:7c:cf:29:56:76:14:0f:98:18:cf:42:0e:bd:9a:6e:ee: f2:d1:07:8e:6a:99:c8:66:91:3a:bd:15:0e:ee:2b:e1:5e:32: b8:11:fa:43:26:ad:65:8f:e0:e0:14:ae:0d:44:23:5d:bd:0a: 3d:40:54:e1:0a:30:34:e0:83:80:29:33:02:f1:b8:93:60:1e: 2e:e3:ef:7c:f4:0d:37:73:fd:37:9c:4a:b2:f8:5d:66:03:4e: 9a:d4:ef:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+SlcfEdFUx34EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MzgxNDQ3NjQtMDYxNi00NjBlLWI2N2YtMzhjOWQwOWU2M2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqTzwvBHYM8D1uwLYJC6JEFuREMlbd3lNbmP c2h+SOj+q1uqblD4uJOVU+cF8UBogy4wW9vUBaNdV3NNH9K4MssKcRXjwS4ngkRh o2I+PQFE63y2zM5YFq1TkBIcVI4iC4HfPwNctLm7xR/UbKf6GQJjRCJ+mY4J4JAr qa3zp7Dz7spnLDj92Ax4JWy8EPt888Zjnwy2do42H+ZrfOrm5z/Bjsuz7MSMD0eb Hmy6cF1bY1qY36TmD30pkRX5IFTxgEW0pBG0H3s8ZnROg9ZR8eHrw7xWxE4dI+Eb 7QRmvm8Dm6UyUXlR+5gmHBwvxc2thiXKrvg5EL1vbqc3kM3AlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9szLuPSOxD6LpFso/N1up37pbNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDlmM2I3ODUtNzkyZS0z Y2FiLTkxODUtYjJmNDdlMTcwZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSc5WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4EUT+atmkq+C/N3IM6j9j74BthEGC0c57kbvWckSwMQOXGbWDK7wV7 s/JKbKxX32NUQPFO7ev6+ZRv7H6ZSqK0NvVCCEaHF3+kQv1habV3JjbiCOb1gEyP YTP3N4HGCOYNK19atXHcdVwW/P7O3eUxWyZFRVyidaam8+kHC3Heu2+Lr4nVm/Zn CWkL3jenAJ2SEAMNxn4qozrToJKAYeKVeE9zfM8pVnYUD5gYz0IOvZpu7vLRB45q mchmkTq9FQ7uK+FeMrgR+kMmrWWP4OAUrg1EI129Cj1AVOEKMDTgg4ApMwLxuJNg Hi7j73z0DTdz/TecSrL4XWYDTprU73Q= -----END CERTIFICATE-----Generated at Mon Apr 7 06:15:55 2025 by rpki-client