$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8c29729-b4ca-3cf8-8321-29715f6835ec.roa File: f8c29729-b4ca-3cf8-8321-29715f6835ec.roa (raw, json) Hash identifier: 5eEFx2EmZLA/9XmolY1C9pLD21ggiFCSYSC5QW92Qfk= Subject key identifier: 1C:BE:A0:E6:E0:0E:DA:74:EC:2C:FA:C7:89:A2:F0:0D:61:4C:82:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F87FEF7A1C9B970BE56100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8c29729-b4ca-3cf8-8321-29715f6835ec.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 73.159.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:7f:ef:7a:1c:9b:97:0b:e5:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=b38b6c50-a46c-472c-8b1e-520bbac14a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:f8:4e:b6:b1:27:c4:e5:34:fd:eb:9f:ed: 41:be:ea:94:48:c2:3b:b7:40:06:70:0c:c3:ac:db: 52:1f:ec:e4:9f:82:0c:3f:29:31:c0:d8:79:d2:fe: d4:ca:10:6b:fc:02:17:d0:03:9f:8b:43:e9:1b:d8: 50:54:c9:e8:d1:21:8e:77:f0:e6:2b:64:fa:46:2b: c6:b4:e3:c6:a7:91:7c:df:56:91:12:06:10:a0:70: 87:28:87:69:59:ab:0f:9e:cd:43:ce:71:12:9e:89: a9:52:6c:ff:ce:eb:dc:71:6c:80:07:ba:33:48:e2: ad:2e:c8:2f:d6:c7:ea:81:f4:61:0b:bc:21:c1:24: f2:aa:7d:6b:81:e7:22:a5:80:e9:92:06:25:92:45: e3:58:bd:a0:eb:db:71:6a:47:85:e2:67:84:0a:87: 01:31:81:2c:c4:ae:8c:99:37:74:56:50:de:6d:f4: b0:66:87:4e:7f:b9:4d:96:cc:e9:6c:af:c1:ce:bf: 91:7f:29:fe:1e:1c:a7:28:8e:77:c3:79:26:f7:2d: 25:bf:2a:ba:10:6b:d4:e7:e9:09:b5:cc:9f:5c:48: 0a:fd:c5:96:20:c0:95:64:74:83:97:ca:dd:7c:03: 5e:c1:fc:34:aa:2e:3f:6c:0d:b3:9e:ad:5e:f5:27: a9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BE:A0:E6:E0:0E:DA:74:EC:2C:FA:C7:89:A2:F0:0D:61:4C:82:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8c29729-b4ca-3cf8-8321-29715f6835ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.159.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:38:e0:fd:b6:25:bd:8d:3b:b3:c3:36:81:0a:53:10:1c:fe: 79:77:0e:62:85:9c:41:7e:d0:a1:23:73:cb:35:c2:64:aa:50: c4:d4:e0:f7:3c:8d:b9:10:d8:d8:29:23:df:a4:3e:fd:09:9f: 12:8b:fb:bd:ea:24:21:27:5b:28:bc:a2:7f:5a:a5:e8:0d:52: 22:ee:69:d2:ec:5e:1c:33:9b:14:cb:12:e2:b3:2f:93:61:8a: 35:64:23:b0:06:f4:c3:be:58:fa:94:14:02:f5:59:97:be:ce: 22:04:0e:cb:a6:39:56:99:f1:78:a2:bb:dd:3b:f4:5f:0f:24: 59:c3:40:7e:93:e8:29:49:9c:15:9b:72:29:01:b2:79:28:e5: 72:bd:32:08:08:c3:84:0f:79:81:3e:98:f4:df:d8:60:19:d8: 07:1e:e1:86:bd:e8:5c:bc:b1:c3:cd:01:1f:67:5c:02:e0:ae: 87:d6:a6:41:67:e5:3c:04:3e:70:0e:0e:37:45:81:a8:20:d2: 93:75:c4:8c:13:c1:99:69:22:2f:e7:6c:de:06:5c:fc:f5:2a: 1c:c0:7f:47:c3:d3:f0:2f:3c:4c:ac:3b:8e:3d:5f:df:10:4b: 06:74:c0:81:6d:fd:1d:9b:7c:bd:e9:4e:5e:6a:8c:8b:96:ba: 37:f5:f9:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+H/vehyblwvlYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YjM4YjZjNTAtYTQ2Yy00NzJjLThiMWUtNTIwYmJhYzE0YTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc74TraxJ8TlNP3rn+1BvuqUSMI7t0AGcAzD rNtSH+zkn4IMPykxwNh50v7UyhBr/AIX0AOfi0PpG9hQVMno0SGOd/DmK2T6RivG tOPGp5F831aREgYQoHCHKIdpWasPns1DznESnompUmz/zuvccWyAB7ozSOKtLsgv 1sfqgfRhC7whwSTyqn1rgecipYDpkgYlkkXjWL2g69txakeF4meECocBMYEsxK6M mTd0VlDebfSwZodOf7lNlszpbK/Bzr+Rfyn+HhynKI53w3km9y0lvyq6EGvU5+kJ tcyfXEgK/cWWIMCVZHSDl8rdfANewfw0qi4/bA2znq1e9SepOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBy+oObgDtp07Cz6x4mi8A1hTILpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjhjMjk3MjktYjRjYS0z Y2Y4LTgzMjEtMjk3MTVmNjgzNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJk44P22Jb2NO7PDNoEKUxAc/nl3DmKFnEF+0KEjc8s1wmSqUMTU4Pc8 jbkQ2NgpI9+kPv0JnxKL+73qJCEnWyi8on9apegNUiLuadLsXhwzmxTLEuKzL5Nh ijVkI7AG9MO+WPqUFAL1WZe+ziIEDsumOVaZ8Xiiu9079F8PJFnDQH6T6ClJnBWb cikBsnko5XK9MggIw4QPeYE+mPTf2GAZ2Ace4Ya96Fy8scPNAR9nXALgrofWpkFn 5TwEPnAODjdFgagg0pN1xIwTwZlpIi/nbN4GXPz1KhzAf0fD0/AvPEysO449X98Q SwZ0wIFt/R2bfL3pTl5qjIuWujf1+ZU= -----END CERTIFICATE-----Generated at Sun Apr 6 13:57:04 2025 by rpki-client