$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/0bf33f96-c9d1-3bca-a50a-1ca953c15a5e.roa File: 0bf33f96-c9d1-3bca-a50a-1ca953c15a5e.roa (raw, json) Hash identifier: Z09LKxxCYiSkSxSUoVkyfjCZ3qvGU3CvJrvmB59gS6s= Subject key identifier: E4:68:FA:73:40:F4:B1:C9:11:08:03:9D:EE:3B:52:4F:EF:F5:AC:5C Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F43285848EF6152C8B96C60EEDC4F7200 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/0bf33f96-c9d1-3bca-a50a-1ca953c15a5e.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 166.73.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:52:c8:b9:6c:60:ee:dc:4f:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=1f35e6b5-80f8-466b-a49d-b296863b230d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2e:a1:42:48:b6:a5:aa:cf:8e:8c:97:c3:d5: c0:ab:37:3a:a3:c0:97:e5:37:bc:c3:2f:ce:62:49: 83:81:3a:eb:52:61:e8:96:40:8a:1a:03:64:21:70: 70:6f:20:3b:09:b3:c3:7a:c2:fd:c5:15:ea:83:34: 53:87:ed:fa:65:c6:52:e8:35:63:e4:56:35:1c:10: 7e:79:c7:01:dd:11:03:99:0b:ad:df:d1:a8:64:cc: 74:93:33:da:83:14:79:17:44:78:c8:b1:a1:43:07: 59:3f:c1:34:55:77:7a:c7:e4:56:e3:50:d3:37:49: 32:f6:9c:da:2b:b7:17:4f:e6:50:23:6c:3f:bf:89: e2:78:85:f5:32:26:f3:fe:7d:61:5f:cd:f4:5f:f0: f2:32:80:2e:ad:6c:67:bb:bc:79:72:06:fd:70:d8: 71:2f:08:85:dc:61:4a:73:7d:d8:f1:a7:5f:64:eb: 4e:a7:e5:29:d8:19:ef:24:f5:40:37:2d:15:a6:c9: 05:dd:af:15:62:b1:f5:6e:06:64:bf:43:eb:7c:98: 40:5a:17:05:fe:55:22:75:79:06:64:4a:b7:f3:38: 1f:58:fc:0c:50:c3:71:14:54:60:10:39:73:6f:2e: 02:c2:c1:be:39:9b:55:c7:95:e2:93:a2:49:d2:bd: b0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:68:FA:73:40:F4:B1:C9:11:08:03:9D:EE:3B:52:4F:EF:F5:AC:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/0bf33f96-c9d1-3bca-a50a-1ca953c15a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 166.73.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:6a:36:9b:4e:f8:57:44:25:43:67:ec:f2:16:19:59:de:5c: c6:b0:8a:7d:ab:08:6e:53:74:39:28:f8:0b:b5:bb:d1:ca:6e: e7:48:48:18:eb:09:58:bd:ca:58:27:1e:ec:c5:16:2b:f1:cf: b3:e7:41:63:20:46:88:d9:a6:8a:c4:f6:07:9a:7b:15:dc:f7: 69:1b:9f:cc:61:f3:4f:5b:97:7d:23:30:da:04:bf:c9:26:da: e4:00:3a:6d:41:34:6d:83:f4:18:79:82:63:8f:ea:04:13:23: 44:d6:d4:0f:a9:61:56:59:f0:ae:61:76:9a:31:ee:21:35:56: 3a:98:57:44:11:c3:8b:7e:4c:08:d8:72:30:70:ce:6c:5a:80: d4:a0:1d:31:7e:8c:6a:b4:6d:d7:6d:c4:cf:7e:3f:8b:1b:8c: ab:a5:6a:cc:1a:22:ab:90:73:c6:b5:67:e6:2e:92:69:67:3a: 84:a9:ed:cb:2f:00:57:4d:d6:c5:01:ea:0d:c1:38:0c:d3:d7: b4:85:db:9b:9b:b2:71:93:f5:7e:19:b5:ed:7c:1d:75:09:71: 5c:e7:17:a0:71:ee:26:26:40:c0:9b:90:4a:22:88:4b:30:0a: 6f:7d:e1:b2:3c:a9:3b:08:5e:f5:a8:d1:be:fe:d0:7a:04:83: 5c:6d:f3:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVLIuWxg7txPcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MWYzNWU2YjUtODBmOC00NjZiLWE0OWQtYjI5Njg2M2IyMzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S6hQki2parPjoyXw9XAqzc6o8CX5Te8wy/O YkmDgTrrUmHolkCKGgNkIXBwbyA7CbPDesL9xRXqgzRTh+36ZcZS6DVj5FY1HBB+ eccB3REDmQut39GoZMx0kzPagxR5F0R4yLGhQwdZP8E0VXd6x+RW41DTN0ky9pza K7cXT+ZQI2w/v4nieIX1Mibz/n1hX830X/DyMoAurWxnu7x5cgb9cNhxLwiF3GFK c33Y8adfZOtOp+Up2BnvJPVANy0VpskF3a8VYrH1bgZkv0PrfJhAWhcF/lUidXkG ZEq38zgfWPwMUMNxFFRgEDlzby4CwsG+OZtVx5Xik6JJ0r2wKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORo+nNA9LHJEQgDne47Uk/v9axcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvMGJmMzNmOTYtYzlkMS0z YmNhLWE1MGEtMWNhOTUzYzE1YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpkkEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9qNptO+FdEJUNn7PIWGVneXMawin2rCG5TdDko+Au1u9HKbudISBjr CVi9ylgnHuzFFivxz7PnQWMgRojZporE9geaexXc92kbn8xh809bl30jMNoEv8km 2uQAOm1BNG2D9Bh5gmOP6gQTI0TW1A+pYVZZ8K5hdpox7iE1VjqYV0QRw4t+TAjY cjBwzmxagNSgHTF+jGq0bddtxM9+P4sbjKulaswaIquQc8a1Z+YukmlnOoSp7csv AFdN1sUB6g3BOAzT17SF25ubsnGT9X4Zte18HXUJcVznF6Bx7iYmQMCbkEoiiEsw Cm994bI8qTsIXvWo0b7+0HoEg1xt87g= -----END CERTIFICATE-----Generated at Fri Apr 4 20:59:57 2025 by rpki-client