$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db7d6f1a-fa3b-3d38-a811-0116829390cb.roa File: db7d6f1a-fa3b-3d38-a811-0116829390cb.roa (raw, json) Hash identifier: uuh3bM2Lb57a0QP7CH2Mkigs4dMKruRU2K4cRVTpYL8= Subject key identifier: ED:7A:44:FC:01:6F:BB:89:20:4D:9A:12:3A:12:83:CC:6D:1A:A8:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0716105DBF68CF0E05720 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db7d6f1a-fa3b-3d38-a811-0116829390cb.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 73.215.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:71:61:05:db:f6:8c:f0:e0:57:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a55b27c9-ad8f-4b6d-a9c7-3ff3b3d5d2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:84:6c:2b:c1:29:37:f7:a8:0d:ea:49:26: f8:5f:67:98:04:0b:9a:1f:9c:76:9e:c0:06:22:e4: 14:e1:3e:51:77:00:44:17:2a:53:de:bd:4e:ed:34: 6c:c0:30:00:42:8e:d5:96:f5:8c:be:48:a5:64:b0: 8b:6d:ec:61:b3:3e:cc:1f:bb:3f:b4:9f:05:24:fe: 69:60:1f:3a:00:b9:3f:59:0e:84:3d:c4:33:7e:64: dd:5e:6a:c9:97:29:b2:23:f8:83:3c:fb:df:19:87: fb:f6:25:b4:5b:31:8b:7d:c3:a8:02:d0:0d:98:ee: 16:9c:02:c1:f0:f2:e2:95:51:ba:89:46:cf:0f:98: 0d:d0:e1:c7:98:a4:70:3e:23:b8:52:4f:49:5c:95: ac:fc:18:84:11:3f:a1:84:15:d2:83:95:d4:e2:ce: ef:17:aa:de:3f:89:03:a2:db:39:09:8b:83:20:bd: 9b:ba:9e:af:c3:5c:44:c4:26:e2:50:2b:cf:5c:28: 80:ea:be:40:f1:ea:06:57:a7:ca:d2:a0:6d:f1:de: b5:19:df:a0:fd:1f:ad:35:66:51:ac:1e:22:53:d5: 12:b5:39:a4:43:bd:ba:e3:30:a3:63:66:58:2f:0f: ac:4f:35:a0:74:cd:c4:40:f9:57:95:06:f1:22:32: f0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7A:44:FC:01:6F:BB:89:20:4D:9A:12:3A:12:83:CC:6D:1A:A8:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db7d6f1a-fa3b-3d38-a811-0116829390cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.215.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:63:5b:55:3d:3d:a4:84:bc:0b:f8:21:70:5b:fa:ab:6d:e3: c4:2a:e2:64:75:e3:43:6a:c7:af:01:e0:7b:91:a3:24:d9:f1: a5:ea:68:e4:3f:a2:7c:d4:c5:d5:3f:e4:87:9c:b5:14:c9:c3: b9:c8:1f:56:61:01:c6:d2:84:db:ae:a8:14:15:c9:9f:82:9e: e9:eb:95:2a:09:37:31:78:7e:38:38:a9:cc:5e:9e:9d:e2:f4: 83:93:08:5b:65:7b:43:1b:00:71:9e:42:45:42:f9:04:21:74: 4c:47:3e:3b:53:8b:60:57:56:a7:b7:b4:1f:d1:f6:5d:f7:56: 3d:58:09:2f:e1:0c:1f:07:8c:fc:65:cc:29:51:80:be:65:98: 19:0b:de:50:1d:ee:8c:89:98:9a:39:a5:f7:10:5a:9b:79:dd: 63:4f:35:5c:27:6b:a4:3c:e5:40:94:41:b3:c6:7c:16:87:13: 00:0b:8a:ff:0e:40:d3:bb:32:fb:92:76:21:05:ba:58:88:ca: 55:cd:6a:39:06:a6:63:9e:c6:35:ec:a8:a8:dc:ca:15:b3:e6: 95:e5:27:97:47:c3:29:08:64:9c:e1:74:f9:31:00:a0:07:1e: a5:25:44:ff:61:f4:7b:0d:57:aa:7a:ff:4c:44:cd:69:b7:a2: 93:2a:6b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssHFhBdv2jPDgVyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTU1YjI3YzktYWQ4Zi00YjZkLWE5YzctM2ZmM2IzZDVkMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R6EbCvBKTf3qA3qSSb4X2eYBAuaH5x2nsAG IuQU4T5RdwBEFypT3r1O7TRswDAAQo7VlvWMvkilZLCLbexhsz7MH7s/tJ8FJP5p YB86ALk/WQ6EPcQzfmTdXmrJlymyI/iDPPvfGYf79iW0WzGLfcOoAtANmO4WnALB 8PLilVG6iUbPD5gN0OHHmKRwPiO4Uk9JXJWs/BiEET+hhBXSg5XU4s7vF6reP4kD ots5CYuDIL2bup6vw1xExCbiUCvPXCiA6r5A8eoGV6fK0qBt8d61Gd+g/R+tNWZR rB4iU9UStTmkQ7264zCjY2ZYLw+sTzWgdM3EQPlXlQbxIjLwjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO16RPwBb7uJIE2aEjoSg8xtGqjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGI3ZDZmMWEtZmEzYi0z ZDM4LWE4MTEtMDExNjgyOTM5MGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASdfFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9jW1U9PaSEvAv4IXBb+qtt48Qq4mR140Nqx68B4HuRoyTZ8aXqaOQ/ onzUxdU/5IectRTJw7nIH1ZhAcbShNuuqBQVyZ+CnunrlSoJNzF4fjg4qcxenp3i 9IOTCFtle0MbAHGeQkVC+QQhdExHPjtTi2BXVqe3tB/R9l33Vj1YCS/hDB8HjPxl zClRgL5lmBkL3lAd7oyJmJo5pfcQWpt53WNPNVwna6Q85UCUQbPGfBaHEwALiv8O QNO7MvuSdiEFuliIylXNajkGpmOexjXsqKjcyhWz5pXlJ5dHwykIZJzhdPkxAKAH HqUlRP9h9HsNV6p6/0xEzWm3opMqa1I= -----END CERTIFICATE-----Generated at Sun Apr 6 22:50:41 2025 by rpki-client