$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa38e9c-91ed-3635-9e49-fe775dba2356.roa File: dfa38e9c-91ed-3635-9e49-fe775dba2356.roa (raw, json) Hash identifier: ah3aO0rOqVlaDxrRWht+rbksVu0HMh5VKnb/vECFozM= Subject key identifier: A2:02:C6:0A:97:47:30:0F:A1:08:0F:85:41:40:31:DF:3D:83:C2:C6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858484C1071DD41ED92EBAE5C2800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa38e9c-91ed-3635-9e49-fe775dba2356.roa Signing time: Mon 23 Dec 2024 02:00:40 +0000 ROA not before: Mon 23 Dec 2024 02:00:40 +0000 ROA not after: Sun 23 Mar 2025 01:00:40 +0000 asID: 33659 IP address blocks: 73.178.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:10:71:dd:41:ed:92:eb:ae:5c:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 23 02:00:40 2024 GMT Not After : Mar 23 01:00:40 2025 GMT Subject: CN=5a8f0850-aa1a-4451-a1df-b631f0f67748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d4:84:c4:ca:0d:99:78:53:64:e0:3b:89:55: ee:98:a4:bd:8a:6c:ef:f7:30:72:b5:76:53:cd:31: da:46:3f:68:24:e2:c4:fd:a8:51:c8:8b:53:22:37: 7c:a0:71:ef:01:71:e2:b4:22:dd:1f:f3:41:68:f7: 3e:c8:68:c9:74:6b:b7:7d:fa:d2:15:9b:74:13:d5: 9d:15:42:67:0a:a0:a5:2b:c6:a6:31:60:e4:4b:b6: 86:1f:6e:8c:5e:fa:16:db:f3:b9:70:75:ae:43:48: 6a:14:e6:e3:77:b5:d8:23:22:43:fa:26:6e:90:10: 18:d9:e4:3e:9c:46:a9:9e:08:85:53:58:eb:f5:65: 4a:3a:e0:29:76:6e:dc:56:09:e3:28:1f:38:bd:83: f3:89:c9:96:3d:bd:00:7d:d8:2b:d7:9a:10:ee:e8: 24:12:a9:07:79:f1:c3:a4:b3:f9:03:11:3a:4e:09: a9:69:24:00:65:37:50:82:e1:09:0e:b7:62:21:90: a8:78:06:c2:6a:bd:62:ca:3a:d3:4e:da:a3:12:e3: 37:e0:1f:f1:d7:b2:f2:12:3f:3f:b3:1f:98:a1:95: 1a:0c:22:f8:ea:58:fe:1e:68:fd:d0:cd:12:33:92: 76:3b:69:57:9c:da:4e:21:d1:d7:f2:f2:60:cf:d5: ed:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:02:C6:0A:97:47:30:0F:A1:08:0F:85:41:40:31:DF:3D:83:C2:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfa38e9c-91ed-3635-9e49-fe775dba2356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.178.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:35:7e:62:41:a8:db:19:ca:bd:2f:87:e9:0a:b2:03:89:85: 67:29:7a:27:43:8d:10:0d:d8:36:57:0f:bf:14:b7:31:32:9c: 43:1f:d6:31:b4:ba:d1:8c:34:0c:9b:41:f7:f7:19:39:29:b1: ba:e8:e8:21:f0:c4:94:37:b7:19:10:d5:df:12:d1:08:d6:f3: 82:7a:72:fc:fd:42:ff:67:40:27:cf:4b:bf:09:3c:e6:f0:26: f6:86:30:e1:42:91:63:fe:72:57:4d:e6:a5:77:ad:3b:11:55: a8:ba:cf:ce:89:3e:6e:80:ea:89:97:bb:9e:cb:ad:ea:0f:61: bf:c5:c8:bb:0b:54:95:30:6f:19:9d:aa:0c:f7:27:84:2e:64: 88:dc:4c:01:73:47:26:ed:9c:58:61:2b:2d:92:a4:23:e5:1f: 35:a8:8b:4a:d7:88:d8:62:e2:ad:d3:26:1a:01:ba:57:53:63: 25:a4:87:d2:6c:c2:37:21:a6:07:5e:fc:f9:55:17:a1:03:f9: ce:64:2c:41:c3:2d:7c:b0:96:db:3e:1b:cb:cf:b6:8e:ef:27: 0f:0a:b1:48:56:71:a4:81:a2:be:67:16:b1:a6:6a:88:e6:0b: ee:2d:7a:ed:56:1c:47:bd:92:12:d5:a6:cd:e8:12:34:7c:1f: 1a:45:7d:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEHHdQe2S665cKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk NWE4ZjA4NTAtYWExYS00NDUxLWExZGYtYjYzMWYwZjY3NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdSExMoNmXhTZOA7iVXumKS9imzv9zBytXZT zTHaRj9oJOLE/ahRyItTIjd8oHHvAXHitCLdH/NBaPc+yGjJdGu3ffrSFZt0E9Wd FUJnCqClK8amMWDkS7aGH26MXvoW2/O5cHWuQ0hqFObjd7XYIyJD+iZukBAY2eQ+ nEapngiFU1jr9WVKOuApdm7cVgnjKB84vYPzicmWPb0Afdgr15oQ7ugkEqkHefHD pLP5AxE6TgmpaSQAZTdQguEJDrdiIZCoeAbCar1iyjrTTtqjEuM34B/x17LyEj8/ sx+YoZUaDCL46lj+Hmj90M0SM5J2O2lXnNpOIdHX8vJgz9XtzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKICxgqXRzAPoQgPhUFAMd89g8LGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZhMzhlOWMtOTFlZC0z NjM1LTllNDktZmU3NzVkYmEyMzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSbLkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg1fmJBqNsZyr0vh+kKsgOJhWcpeidDjRAN2DZXD78UtzEynEMf1jG0 utGMNAybQff3GTkpsbro6CHwxJQ3txkQ1d8S0QjW84J6cvz9Qv9nQCfPS78JPObw JvaGMOFCkWP+cldN5qV3rTsRVai6z86JPm6A6omXu57LreoPYb/FyLsLVJUwbxmd qgz3J4QuZIjcTAFzRybtnFhhKy2SpCPlHzWoi0rXiNhi4q3TJhoBuldTYyWkh9Js wjchpgde/PlVF6ED+c5kLEHDLXywlts+G8vPto7vJw8KsUhWcaSBor5nFrGmaojm C+4teu1WHEe9khLVps3oEjR8HxpFfTA= -----END CERTIFICATE-----Generated at Sun Feb 16 20:38:05 2025 by rpki-client