$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/a5e2278d-6a8b-3dec-a41c-049e57eb0586.roa File: a5e2278d-6a8b-3dec-a41c-049e57eb0586.roa (raw, json) Hash identifier: N0k0JgGHpYnEfPqhwqBjKqSB8toTahn5ZucuxBiW704= Subject key identifier: 39:35:EF:9B:DB:56:84:01:D2:29:0A:87:4E:D6:98:65:76:BA:DE:8F Certificate issuer: /CN=e0d54f0d-8151-4500-80b5-008165b77555 Certificate serial: 010D0C9F4328584908816B0120E9878703ADF67C Authority key identifier: 6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/a5e2278d-6a8b-3dec-a41c-049e57eb0586.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 36068 IP address blocks: 173.241.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:6b:01:20:e9:87:87:03:ad:f6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0d54f0d-8151-4500-80b5-008165b77555 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=2c8d4274-27a4-45f6-8cd9-5691203064d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:fd:da:b3:00:d8:36:0a:ed:1a:4b:db:b1:79: e0:69:7e:47:49:47:c7:c6:de:eb:e6:18:5d:c6:38: b2:2a:06:31:cf:4c:88:d6:7f:6b:98:8e:8f:51:40: 8e:bd:da:a3:85:ae:f9:4f:2b:d8:e2:8f:f1:83:d9: 2e:47:8d:6b:2b:aa:9b:bc:89:04:52:ad:13:48:b0: 46:41:22:f0:b8:4b:e3:b1:81:f7:d5:ac:9b:7e:6a: 86:e9:8a:0c:d2:56:5c:c2:3f:b8:47:30:aa:cb:f6: 31:6b:8c:ed:70:56:a7:49:c5:63:e3:2d:f7:1a:46: 19:df:23:be:10:c7:84:42:fc:75:6d:d3:8b:55:55: 8b:58:d0:e2:a4:b7:d4:99:68:08:73:51:ea:e3:79: ca:6f:11:64:b0:96:fd:e8:7b:fb:83:34:49:78:09: 08:e5:50:44:61:09:90:e4:49:30:0b:94:8a:cd:44: 48:67:b4:2c:cd:1d:5d:4e:84:19:a7:fa:c2:b4:61: 86:28:cd:ca:2c:3f:44:0b:bb:f1:f3:09:ab:5e:83: 80:aa:76:89:6d:45:9e:7a:c7:0f:5a:b2:42:23:e6: 13:a4:ab:f8:d4:00:e6:07:b2:d5:f7:e7:1c:8d:e9: 00:aa:63:7d:df:65:40:dc:6a:6a:3f:c3:35:4d:92: 4b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:35:EF:9B:DB:56:84:01:D2:29:0A:87:4E:D6:98:65:76:BA:DE:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/a5e2278d-6a8b-3dec-a41c-049e57eb0586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl X509v3 Authority Key Identifier: keyid:6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer sbgp-ipAddrBlock: critical IPv4: 173.241.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:bc:07:24:c9:97:95:f7:5e:76:53:92:9f:26:3b:f5:83:31: 31:ca:3a:b2:b9:65:4f:f3:95:4a:9c:24:f0:67:b0:66:6c:00: ad:1d:aa:28:77:70:8f:69:f2:96:6a:0b:38:66:af:e5:16:56: 83:2f:ac:d3:da:66:f0:01:4f:cd:45:c4:d0:20:6b:78:f0:17: c8:a3:64:39:96:da:df:82:b8:b8:55:bc:e3:18:a0:2a:c3:02: 83:bc:f1:31:65:d6:e4:66:f1:ad:34:f6:0b:36:50:13:00:0b: 95:48:fd:af:51:6b:2a:15:3d:e9:9f:c9:1e:45:90:bc:74:b3: bc:2b:f0:2f:c3:a4:21:ac:9f:75:5b:26:d3:78:30:01:7f:d6: 35:41:ac:47:e4:92:a1:5e:b8:41:71:b2:5c:9c:f0:22:bc:19: 4a:38:03:7a:3a:6f:e0:1f:07:d9:75:11:85:b7:ba:4c:6a:90: c5:96:27:39:00:94:6a:8b:6a:d6:07:e6:8a:0d:ca:bf:31:bc: af:c8:32:5e:b0:a7:a3:da:73:97:69:af:de:0e:6e:18:0e:5d: 78:6e:e1:5e:87:c4:a4:f8:db:54:29:a4:fa:99:75:bd:99:8a: f5:cd:48:2d:7a:4b:1f:2d:41:11:31:30:9c:c0:ce:6a:77:2e: f6:aa:4d:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWsBIOmHhwOt9nwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTBkNTRmMGQtODE1MS00NTAwLTgwYjUtMDA4MTY1Yjc3 NTU1MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MmM4ZDQyNzQtMjdhNC00NWY2LThjZDktNTY5MTIwMzA2NGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+P3aswDYNgrtGkvbsXngaX5HSUfHxt7r5hhd xjiyKgYxz0yI1n9rmI6PUUCOvdqjha75TyvY4o/xg9kuR41rK6qbvIkEUq0TSLBG QSLwuEvjsYH31aybfmqG6YoM0lZcwj+4RzCqy/Yxa4ztcFanScVj4y33GkYZ3yO+ EMeEQvx1bdOLVVWLWNDipLfUmWgIc1Hq43nKbxFksJb96Hv7gzRJeAkI5VBEYQmQ 5EkwC5SKzURIZ7QszR1dToQZp/rCtGGGKM3KLD9EC7vx8wmrXoOAqnaJbUWeescP WrJCI+YTpKv41ADmB7LV9+ccjekAqmN932VA3GpqP8M1TZJLSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDk175vbVoQB0ikKh07WmGV2ut6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMGQ1 NGYwZC04MTUxLTQ1MDAtODBiNS0wMDgxNjViNzc1NTUvYTVlMjI3OGQtNmE4Yi0z ZGVjLWE0MWMtMDQ5ZTU3ZWIwNTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTBkNTRmMGQtODE1MS00NTAwLTgw YjUtMDA4MTY1Yjc3NTU1L2UwZDU0ZjBkLTgxNTEtNDUwMC04MGI1LTAwODE2NWI3 NzU1NS5jcmwwHwYDVR0jBBgwFoAUa7m912tofp5cuk1nda1orFOXENswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lMGQ1NGYwZC04MTUxLTQ1MDAtODBiNS0wMDgx NjViNzc1NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrfEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm8ByTJl5X3XnZTkp8mO/WDMTHKOrK5ZU/zlUqcJPBnsGZsAK0dqih3 cI9p8pZqCzhmr+UWVoMvrNPaZvABT81FxNAga3jwF8ijZDmW2t+CuLhVvOMYoCrD AoO88TFl1uRm8a009gs2UBMAC5VI/a9RayoVPemfyR5FkLx0s7wr8C/DpCGsn3Vb JtN4MAF/1jVBrEfkkqFeuEFxslyc8CK8GUo4A3o6b+AfB9l1EYW3ukxqkMWWJzkA lGqLatYH5ooNyr8xvK/IMl6wp6Pac5dpr94ObhgOXXhu4V6HxKT421QppPqZdb2Z ivXNSC16Sx8tQRExMJzAzmp3LvaqTQQ= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:41 2025 by rpki-client