$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f74a0d33-b08e-3e2f-a514-c8cf4e52aee9.roa File: f74a0d33-b08e-3e2f-a514-c8cf4e52aee9.roa (raw, json) Hash identifier: QhZkxMICt9YFlL3wkrImBIXZ5GGB+xeqDJEm+cxaT2s= Subject key identifier: CA:F2:41:64:F8:94:C7:E0:25:68:F4:0D:A3:4D:F1:8A:41:09:9B:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0A7CF38A37D827019DF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f74a0d33-b08e-3e2f-a514-c8cf4e52aee9.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 73.188.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:a7:cf:38:a3:7d:82:70:19:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=bf304c9d-860c-4d4a-be6d-1f620234a325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:2e:7e:0d:25:15:a8:43:a0:0e:e5:74:6c: 16:bc:6d:00:a3:82:c6:00:fc:43:18:82:28:c8:d3: 20:3e:41:83:94:36:d1:c7:50:ad:46:9e:11:76:33: 22:79:76:a8:24:90:8a:21:b4:b8:d8:be:16:ac:5b: e1:16:c6:76:62:c8:d2:72:1b:41:6b:ab:ec:59:93: f8:2e:27:24:73:e6:6b:f0:7a:d6:70:08:0b:bf:e1: d0:db:f5:07:ad:5f:38:be:f6:76:0a:ac:fb:22:57: 0b:cf:df:26:53:b0:ea:33:6d:7a:c7:c1:ef:c7:3a: e2:11:81:f4:48:8e:ba:12:03:91:d8:bd:73:51:c9: b4:b7:2a:37:c0:2b:cb:57:e6:02:15:82:56:5c:25: 62:90:b5:77:46:13:61:1d:1d:5e:7c:a7:4a:6a:95: af:db:e9:91:3f:0b:81:00:b1:60:a3:89:3a:e5:f3: ae:30:11:c7:5b:0a:f1:ff:0a:c2:c5:7d:04:83:e2: a7:ec:32:b0:ba:f1:36:8a:ab:46:61:63:fe:a7:2a: b8:ac:7c:c4:37:38:af:30:a9:ab:b1:83:0a:5a:61: e7:d0:72:c2:ef:a2:44:97:25:54:0d:2d:0c:c8:09: 2d:51:29:66:39:ec:00:88:9b:b5:a1:63:38:8c:a0: 6e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F2:41:64:F8:94:C7:E0:25:68:F4:0D:A3:4D:F1:8A:41:09:9B:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f74a0d33-b08e-3e2f-a514-c8cf4e52aee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.188.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f7:6d:5f:5b:f3:3d:44:7d:d4:87:78:58:7d:e6:91:8e:61: 91:a1:2c:4e:ac:9f:7c:f2:26:db:7b:6f:ec:a1:5d:2e:0d:d6: 7a:5f:bc:41:17:75:dc:08:b7:05:0b:6d:3b:db:6b:fe:ee:ab: 48:d4:c9:8e:9e:62:67:c5:04:f5:d4:9e:70:c4:45:56:c8:52: fd:f4:60:15:cb:e4:c6:dd:e7:f2:67:b5:6d:cd:ce:e3:d5:88: 48:20:5c:73:de:18:81:7a:83:8a:9c:9e:5b:9d:21:c3:0e:60: a6:41:ad:c9:f2:24:4f:fd:fe:13:b7:25:1e:83:a6:b8:da:ae: 15:23:c8:4a:e8:e4:c1:b5:3a:7b:02:01:6d:42:05:59:af:fd: 4d:50:bb:38:64:3d:77:e7:8b:64:c8:06:17:fd:2d:e5:cd:1f: 13:13:fd:9e:57:05:22:9c:ca:27:b0:ab:84:e3:9c:67:3f:9c: 65:71:d3:31:ed:ca:46:bc:82:4c:87:ae:3c:96:cf:9f:af:d1: 4a:05:ba:44:94:8d:30:9f:66:44:b0:09:22:62:ba:0a:c9:4b: 81:f0:34:66:5f:36:2f:10:da:45:b4:b2:ef:61:2c:37:b5:54: 4d:c8:99:ed:a8:b5:71:e2:e8:74:26:3b:a2:fd:f8:3d:ac:6d: 09:b0:71:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssKfPOKN9gnAZ34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YmYzMDRjOWQtODYwYy00ZDRhLWJlNmQtMWY2MjAyMzRhMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf4ufg0lFahDoA7ldGwWvG0Ao4LGAPxDGIIo yNMgPkGDlDbRx1CtRp4RdjMieXaoJJCKIbS42L4WrFvhFsZ2YsjSchtBa6vsWZP4 Lickc+Zr8HrWcAgLv+HQ2/UHrV84vvZ2Cqz7IlcLz98mU7DqM216x8HvxzriEYH0 SI66EgOR2L1zUcm0tyo3wCvLV+YCFYJWXCVikLV3RhNhHR1efKdKapWv2+mRPwuB ALFgo4k65fOuMBHHWwrx/wrCxX0Eg+Kn7DKwuvE2iqtGYWP+pyq4rHzENzivMKmr sYMKWmHn0HLC76JElyVUDS0MyAktUSlmOewAiJu1oWM4jKBuOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMryQWT4lMfgJWj0DaNN8YpBCZsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjc0YTBkMzMtYjA4ZS0z ZTJmLWE1MTQtYzhjZjRlNTJhZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSbzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP3bV9b8z1EfdSHeFh95pGOYZGhLE6sn3zyJtt7b+yhXS4N1npfvEEX ddwItwULbTvba/7uq0jUyY6eYmfFBPXUnnDERVbIUv30YBXL5Mbd5/JntW3NzuPV iEggXHPeGIF6g4qcnludIcMOYKZBrcnyJE/9/hO3JR6DprjarhUjyEro5MG1OnsC AW1CBVmv/U1QuzhkPXfni2TIBhf9LeXNHxMT/Z5XBSKcyiewq4TjnGc/nGVx0zHt yka8gkyHrjyWz5+v0UoFukSUjTCfZkSwCSJiugrJS4HwNGZfNi8Q2kW0su9hLDe1 VE3Ime2otXHi6HQmO6L9+D2sbQmwcTA= -----END CERTIFICATE-----Generated at Sun Apr 6 20:12:18 2025 by rpki-client