$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f97cfd6e-3353-378f-8da5-d2a2d9eaf6b6.roa File: f97cfd6e-3353-378f-8da5-d2a2d9eaf6b6.roa (raw, json) Hash identifier: XgqAps2tkxicZINdukBlhVq8hsYyDzyoyIwu/lOud5E= Subject key identifier: 71:B6:27:B3:71:29:F7:4B:06:B1:DC:0B:37:20:39:D0:55:B1:CD:27 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8F755E094E631D19B8780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f97cfd6e-3353-378f-8da5-d2a2d9eaf6b6.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 73.161.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:f7:55:e0:94:e6:31:d1:9b:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=8d6d5be6-1176-4778-bade-f537e5ea40fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:c1:96:04:d3:a3:96:6a:eb:8a:59:de:3a: 30:d3:e8:f8:d7:23:41:20:dc:53:89:51:f7:4d:e4: f5:f2:ae:3b:48:9c:47:4b:18:ae:5e:4b:0f:46:f1: 4c:4a:c7:89:7d:fd:69:d6:06:fc:6e:d2:90:2e:47: 58:7c:21:fd:e4:a9:32:47:5a:bc:40:c5:39:bd:dc: e1:b7:b6:ee:81:7f:bf:74:08:6c:d0:4b:09:5b:9d: f4:91:5e:ec:5d:47:c5:6f:ec:c4:a1:b7:dc:00:7e: 2d:cc:29:95:d8:c2:60:16:22:c3:37:29:d1:db:f2: cb:26:64:c9:6a:e3:78:2f:ab:43:48:ec:27:4e:66: df:89:1e:56:72:ce:91:84:e3:40:0e:b8:a0:8d:0b: 8c:e3:61:58:cb:65:a5:56:23:93:16:46:be:c7:d6: c5:14:22:f6:25:73:ae:4d:5c:29:20:a4:e6:06:76: 5f:58:04:6a:c9:2f:ee:47:b2:be:f4:59:0d:8e:72: 94:35:5a:45:62:48:bf:18:df:44:65:5c:c1:7f:a0: ac:15:ea:35:79:de:a9:59:f6:85:72:9c:90:9d:06: b8:ad:a5:55:8e:2f:2a:aa:39:84:63:30:3c:b5:5e: 01:d4:46:6f:e2:f4:17:be:85:75:07:ea:5c:6d:16: d6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B6:27:B3:71:29:F7:4B:06:B1:DC:0B:37:20:39:D0:55:B1:CD:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f97cfd6e-3353-378f-8da5-d2a2d9eaf6b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:a4:67:a7:5f:fb:6f:a7:56:fd:53:8b:89:ef:60:b3:96:46: ae:94:9d:61:ec:e6:57:95:33:b6:65:c9:3e:b7:da:6a:7d:38: 01:d6:66:5d:d7:bf:7b:11:72:83:80:a0:4a:29:d6:da:55:a1: e9:bd:e2:9b:e9:72:9b:ff:b3:e2:25:8e:22:e6:74:ba:ee:3b: 55:2a:dd:f7:76:ce:cd:52:ac:c2:5a:a5:98:44:6e:63:6e:6e: d7:ce:73:94:ef:96:7a:18:e6:88:bf:15:20:56:54:f7:8e:93: cb:0d:06:77:fe:f0:29:3e:8f:2c:a3:04:19:25:28:1f:4e:9b: b9:bf:41:c0:a1:0e:97:32:9d:d5:38:a8:0f:6c:53:2d:b4:ba: d0:58:fc:e5:b4:b2:33:6b:90:9e:ed:ea:1d:ea:15:4c:25:44: 39:a2:00:15:50:29:34:bb:6d:ce:20:31:00:72:c8:3b:be:43: 0e:68:32:0d:df:d2:ad:f1:95:da:25:70:65:27:60:55:8f:dc: f8:2a:28:f5:78:af:45:40:e7:78:eb:1b:b2:b1:99:3e:9a:73: 4c:cf:16:7b:1a:cf:d9:2e:1a:cf:1e:71:ed:ac:86:50:4b:76: e9:7b:39:ab:70:e1:f4:84:5b:b9:1c:9e:95:3e:4d:6d:14:81: bd:6e:fc:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+PdV4JTmMdGbh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OGQ2ZDViZTYtMTE3Ni00Nzc4LWJhZGUtZjUzN2U1ZWE0MGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFzBlgTTo5Zq64pZ3jow0+j41yNBINxTiVH3 TeT18q47SJxHSxiuXksPRvFMSseJff1p1gb8btKQLkdYfCH95KkyR1q8QMU5vdzh t7bugX+/dAhs0EsJW530kV7sXUfFb+zEobfcAH4tzCmV2MJgFiLDNynR2/LLJmTJ auN4L6tDSOwnTmbfiR5Wcs6RhONADrigjQuM42FYy2WlViOTFka+x9bFFCL2JXOu TVwpIKTmBnZfWARqyS/uR7K+9FkNjnKUNVpFYki/GN9EZVzBf6CsFeo1ed6pWfaF cpyQnQa4raVVji8qqjmEYzA8tV4B1EZv4vQXvoV1B+pcbRbWfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHG2J7NxKfdLBrHcCzcgOdBVsc0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjk3Y2ZkNmUtMzM1My0z NzhmLThkYTUtZDJhMmQ5ZWFmNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANWkZ6df+2+nVv1Ti4nvYLOWRq6UnWHs5leVM7ZlyT632mp9OAHWZl3X v3sRcoOAoEop1tpVoem94pvpcpv/s+IljiLmdLruO1Uq3fd2zs1SrMJapZhEbmNu btfOc5TvlnoY5oi/FSBWVPeOk8sNBnf+8Ck+jyyjBBklKB9Om7m/QcChDpcyndU4 qA9sUy20utBY/OW0sjNrkJ7t6h3qFUwlRDmiABVQKTS7bc4gMQByyDu+Qw5oMg3f 0q3xldolcGUnYFWP3PgqKPV4r0VA53jrG7KxmT6ac0zPFnsaz9kuGs8ece2shlBL dul7Oatw4fSEW7kcnpU+TW0Ugb1u/KI= -----END CERTIFICATE-----Generated at Mon Apr 7 05:52:12 2025 by rpki-client