$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5e21453-aca1-3e03-8cda-3daab37f7461.roa File: e5e21453-aca1-3e03-8cda-3daab37f7461.roa (raw, json) Hash identifier: nItb+DH9dgaQeBqAjy7AIbDzTLMnHEu2aWc3RbJrWho= Subject key identifier: 67:59:A6:4E:88:EA:93:AD:3C:40:39:AF:BA:99:D9:7C:AC:D9:0B:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFFD54CFEB8BAF5A0C8FC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5e21453-aca1-3e03-8cda-3daab37f7461.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 73.202.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:fd:54:cf:eb:8b:af:5a:0c:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=20ac75b8-98af-4ed6-86c2-7fd7334f0b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:53:9c:2a:eb:2c:8e:e3:cc:7c:7f:43:56:17: db:cc:94:0b:f8:7b:53:6b:aa:37:58:b4:1f:86:db: 89:f0:7b:c9:17:f3:af:81:ab:f9:85:30:ec:88:41: 8b:c1:d3:33:75:98:37:df:5f:ec:32:4d:6b:43:cc: 79:c1:38:ce:87:97:fb:a0:58:bc:04:a5:54:04:a9: 4d:d9:26:5f:4f:aa:80:c6:76:ca:df:89:3c:07:83: 01:13:9a:ac:3c:a9:dd:84:c9:74:8e:32:e1:fb:b1: 13:a6:0a:64:97:52:b6:a4:e7:e7:60:ad:c0:9a:78: 21:99:1a:d5:f8:4d:b3:bb:ad:6e:47:7c:db:b3:55: b4:44:3f:77:77:dd:8e:2b:f1:57:58:79:67:cd:7b: db:8c:66:d4:c7:05:d1:6c:73:b8:81:e9:fb:e4:10: 21:2b:3b:26:6f:81:0a:e3:7f:ac:e1:01:df:c0:32: 35:5b:f8:ff:46:6c:6e:a0:f0:31:9f:71:ee:72:4a: 5c:d2:fa:d8:60:f5:d0:5f:0b:a9:e6:80:3a:2f:33: af:dd:d3:bc:62:f0:93:73:b7:5b:af:15:7d:33:d0: c1:3c:dc:f7:a1:b6:0b:4f:3c:bd:02:25:c6:b6:ba: cd:81:d7:c2:ed:6f:6b:9b:59:2c:bf:4e:5e:94:e4: d8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:59:A6:4E:88:EA:93:AD:3C:40:39:AF:BA:99:D9:7C:AC:D9:0B:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5e21453-aca1-3e03-8cda-3daab37f7461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.202.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:15:f7:44:6b:89:33:c5:57:a0:1d:e6:82:d9:41:71:5d:d3: 6b:90:a0:0e:9a:1a:12:45:9d:91:99:4e:3e:f4:0d:7b:0d:e2: fd:7a:2e:ca:42:e0:53:5f:15:af:a0:e9:64:00:55:58:d1:05: 5d:8a:6f:11:ae:14:a4:67:b9:97:95:e4:f7:0d:eb:4b:e1:15: 0d:ce:cc:32:c9:24:56:83:11:1b:b4:a4:83:fc:ad:9b:b5:ae: 3d:67:27:b0:3f:fa:93:d1:8b:a0:97:4e:c5:47:9f:29:73:f7: 44:99:ba:45:72:ac:d4:50:55:89:fc:67:f3:90:79:3d:18:38: 87:79:2e:7b:c1:39:15:01:00:d9:66:bf:e8:09:ac:81:cc:06: 45:5d:d2:63:58:26:c9:e7:a6:1b:f2:99:10:2f:c1:a2:19:15: 47:35:41:4a:a7:8e:38:f3:72:e7:ab:f1:e2:4c:d9:d6:cd:a0: f3:0e:7d:19:9c:07:b2:ab:b8:19:9e:aa:1e:12:75:7d:7f:52: ec:f6:b0:e5:00:c3:e5:17:67:24:c1:9b:a0:24:74:92:7a:6b: 1f:93:0c:fc:2e:03:da:d5:c8:18:3f:34:54:d5:87:0e:65:a2: bb:be:db:da:2e:3c:6d:40:62:a9:7f:ae:3d:d0:09:a7:42:3b: 99:a6:9c:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr/1Uz+uLr1oMj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MjBhYzc1YjgtOThhZi00ZWQ2LTg2YzItN2ZkNzMzNGYwYjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVOcKussjuPMfH9DVhfbzJQL+HtTa6o3WLQf htuJ8HvJF/Ovgav5hTDsiEGLwdMzdZg331/sMk1rQ8x5wTjOh5f7oFi8BKVUBKlN 2SZfT6qAxnbK34k8B4MBE5qsPKndhMl0jjLh+7ETpgpkl1K2pOfnYK3AmnghmRrV +E2zu61uR3zbs1W0RD93d92OK/FXWHlnzXvbjGbUxwXRbHO4gen75BAhKzsmb4EK 43+s4QHfwDI1W/j/RmxuoPAxn3Huckpc0vrYYPXQXwup5oA6LzOv3dO8YvCTc7db rxV9M9DBPNz3obYLTzy9AiXGtrrNgdfC7W9rm1ksv05elOTYNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdZpk6I6pOtPEA5r7qZ2Xys2QslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTVlMjE0NTMtYWNhMS0z ZTAzLThjZGEtM2RhYWIzN2Y3NDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScr+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoV90RriTPFV6Ad5oLZQXFd02uQoA6aGhJFnZGZTj70DXsN4v16LspC 4FNfFa+g6WQAVVjRBV2KbxGuFKRnuZeV5PcN60vhFQ3OzDLJJFaDERu0pIP8rZu1 rj1nJ7A/+pPRi6CXTsVHnylz90SZukVyrNRQVYn8Z/OQeT0YOId5LnvBORUBANlm v+gJrIHMBkVd0mNYJsnnphvymRAvwaIZFUc1QUqnjjjzcuer8eJM2dbNoPMOfRmc B7KruBmeqh4SdX1/Uuz2sOUAw+UXZyTBm6AkdJJ6ax+TDPwuA9rVyBg/NFTVhw5l oru+29ouPG1AYql/rj3QCadCO5mmnAI= -----END CERTIFICATE-----Generated at Mon Apr 7 05:57:51 2025 by rpki-client