$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f73eac61-2841-3d92-87d2-e35a81a6dbef.roa File: f73eac61-2841-3d92-87d2-e35a81a6dbef.roa (raw, json) Hash identifier: KDjkC3htFMaB/7pJDJJDMYufOMcnMJYeBsH0sMoJiTU= Subject key identifier: 78:6E:26:DC:30:3B:99:DD:92:A0:59:D7:64:97:43:0C:23:5C:50:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CAA1797C86217D47C1180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f73eac61-2841-3d92-87d2-e35a81a6dbef.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 75.150.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:aa:17:97:c8:62:17:d4:7c:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f6ad13f2-5a99-46a5-a6a6-3d39a0f7bc76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:eb:16:a5:59:c4:bf:10:a7:0e:7d:ca:93:4b: b3:62:1f:e4:ca:40:ef:6b:ef:75:fe:db:7c:f8:3d: b6:43:77:43:f1:0d:df:db:e5:1a:c1:ff:0a:03:5b: 64:8b:50:89:62:bd:72:ca:80:cf:b7:07:ae:6f:27: 75:a4:f9:d0:92:64:72:7c:c6:c3:9b:85:7c:58:17: cd:88:46:64:1b:a1:18:b6:be:8c:9e:6b:c6:3e:04: 43:f6:a0:de:f5:95:03:27:b6:24:2d:91:92:66:b2: 33:81:24:24:0f:b9:ad:96:52:04:a4:24:2a:4d:29: cc:11:cc:59:8a:c2:88:0b:17:62:61:40:4e:11:79: af:5d:0d:80:d2:e1:25:aa:5b:b2:e2:2c:74:05:bd: 19:c3:18:a0:62:b2:07:b8:e8:6f:e9:ff:3f:0c:35: 5d:27:83:be:5a:6c:87:c2:71:e5:c2:e4:66:a9:06: 04:25:ca:d3:d6:32:52:6c:84:52:15:53:e9:d7:5b: c6:29:bc:c1:60:9f:44:ca:49:c8:84:a3:cf:40:5a: 11:61:19:f1:ad:2b:4b:62:4b:53:55:ee:4a:af:f4: db:9c:d2:75:fe:35:72:28:51:b5:0d:19:31:03:ff: ff:47:d7:67:5f:9f:67:4b:f0:74:43:a1:5b:50:1b: bd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6E:26:DC:30:3B:99:DD:92:A0:59:D7:64:97:43:0C:23:5C:50:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f73eac61-2841-3d92-87d2-e35a81a6dbef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 75.150.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:9f:e7:5b:d4:af:ab:a7:8e:7a:f0:50:f4:1d:7e:72:d1:12: 87:06:53:17:12:41:4c:d6:16:1e:d2:62:00:34:54:4c:8d:1e: be:5c:d6:68:d1:eb:35:c0:08:60:5a:9e:78:58:a0:0b:ff:8f: 19:0b:9a:b0:8b:ef:23:46:7e:af:ce:ee:b3:c4:be:ec:8e:d8: 8d:d0:f8:61:19:37:4f:e6:ea:bd:21:d6:42:a0:7a:d4:96:c0: e1:b1:d6:8a:65:8f:dd:1b:72:78:63:d8:8b:44:b2:2f:f8:28: 57:e8:c3:02:aa:3e:b8:b5:13:eb:b5:ca:31:5b:a4:19:8b:12: ce:ee:2e:a3:cd:91:e7:ee:a3:5f:8b:cb:55:a9:ee:f3:95:3c: 9e:01:52:3b:ab:4d:31:4d:d0:0e:54:9d:53:97:a7:67:71:b1: 1b:7b:ef:1b:51:78:fe:6f:56:7b:cb:46:6d:e4:34:c6:e2:a4: 13:25:92:41:fe:11:96:ac:ef:f0:ee:ca:d5:59:62:ba:e0:bd: 6e:ce:8c:ca:fb:b5:20:00:c6:f4:64:13:22:b1:47:3c:43:dd: 32:94:41:9e:d9:01:d0:fc:f1:79:a1:84:c9:7c:20:d6:86:b7: d6:9c:66:32:05:d3:90:8d:d1:01:35:48:ce:09:a0:40:65:38: e2:68:49:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebKoXl8hiF9R8EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjZhZDEzZjItNWE5OS00NmE1LWE2YTYtM2QzOWEwZjdiYzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+sWpVnEvxCnDn3Kk0uzYh/kykDva+91/tt8 +D22Q3dD8Q3f2+Uawf8KA1tki1CJYr1yyoDPtweubyd1pPnQkmRyfMbDm4V8WBfN iEZkG6EYtr6MnmvGPgRD9qDe9ZUDJ7YkLZGSZrIzgSQkD7mtllIEpCQqTSnMEcxZ isKICxdiYUBOEXmvXQ2A0uElqluy4ix0Bb0ZwxigYrIHuOhv6f8/DDVdJ4O+WmyH wnHlwuRmqQYEJcrT1jJSbIRSFVPp11vGKbzBYJ9EyknIhKPPQFoRYRnxrStLYktT Ve5Kr/TbnNJ1/jVyKFG1DRkxA///R9dnX59nS/B0Q6FbUBu9cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhuJtwwO5ndkqBZ12SXQwwjXFAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjczZWFjNjEtMjg0MS0z ZDkyLTg3ZDItZTM1YTgxYTZkYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS5YcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOf51vUr6unjnrwUPQdfnLREocGUxcSQUzWFh7SYgA0VEyNHr5c1mjR 6zXACGBannhYoAv/jxkLmrCL7yNGfq/O7rPEvuyO2I3Q+GEZN0/m6r0h1kKgetSW wOGx1oplj90bcnhj2ItEsi/4KFfowwKqPri1E+u1yjFbpBmLEs7uLqPNkefuo1+L y1Wp7vOVPJ4BUjurTTFN0A5UnVOXp2dxsRt77xtReP5vVnvLRm3kNMbipBMlkkH+ EZas7/DuytVZYrrgvW7OjMr7tSAAxvRkEyKxRzxD3TKUQZ7ZAdD88XmhhMl8INaG t9acZjIF05CN0QE1SM4JoEBlOOJoSaw= -----END CERTIFICATE-----Generated at Mon Apr 7 06:31:27 2025 by rpki-client