$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb4cf1eb-b728-3637-a8ab-f268024c216f.roa File: cb4cf1eb-b728-3637-a8ab-f268024c216f.roa (raw, json) Hash identifier: gguuXHl/jNlWUvo1ktJ6BHhbAFPtONxbdx5k1lbMako= Subject key identifier: A5:B5:31:4A:F4:56:26:70:A5:AD:F2:2C:AA:5F:22:5D:68:E0:18:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F898417FA4CC023A51BBF0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb4cf1eb-b728-3637-a8ab-f268024c216f.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 73.234.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:98:41:7f:a4:cc:02:3a:51:bb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d71a5d49-8c64-4553-9adc-5b53e7819c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:73:fd:58:82:66:7e:6e:66:70:7d:df:d2: 2f:46:ca:c9:2a:04:e8:30:37:b9:99:73:ce:4d:28: 34:d8:58:8b:ef:6a:0f:9b:7f:31:4c:07:4f:14:96: 81:1b:8f:40:ef:4d:3c:a2:bc:01:23:d0:e3:7a:90: 7d:cb:b6:f2:52:ff:ec:31:0c:3e:8c:49:e0:95:d8: aa:bc:e5:b0:b2:6f:65:cc:3f:cd:7f:f8:51:f7:a9: ee:30:c7:bd:17:85:ac:52:a8:d4:42:b3:49:31:bb: 92:9b:eb:06:c8:8a:b9:1c:0d:96:74:1c:cf:0a:d2: 12:59:19:1a:db:3b:86:e3:18:fc:c1:e5:30:1c:78: ab:b5:8a:0f:6e:ed:b7:96:f1:b0:02:16:af:96:6e: bf:20:3e:57:e2:33:fb:4a:9f:1a:ee:6d:8b:77:01: 2a:8d:ae:40:98:a4:15:f4:f5:14:80:de:0c:11:66: 4c:35:71:ec:18:f3:03:00:7f:85:78:f1:68:61:b7: d1:d2:63:bb:23:68:f0:42:2a:86:db:ab:a0:c4:56: 0f:1d:78:f0:6b:f0:ad:98:95:5b:f4:95:3f:d7:11: 57:34:43:11:e1:e6:78:83:52:50:56:39:95:3d:70: e0:9a:03:8f:72:69:0e:38:7f:12:7a:dd:a9:29:8b: dc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B5:31:4A:F4:56:26:70:A5:AD:F2:2C:AA:5F:22:5D:68:E0:18:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb4cf1eb-b728-3637-a8ab-f268024c216f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.234.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a6:6a:4d:6a:61:e4:e1:29:52:37:94:3a:73:cc:f7:d9:b9: ee:4c:f7:8c:f5:e9:75:3c:3e:ae:2d:d7:19:24:f9:f2:8c:5d: 63:d3:12:51:b9:68:a8:90:03:28:db:17:6c:9e:68:0c:6f:39: 15:0b:5e:a5:ec:59:a8:7c:a5:89:a4:56:bd:78:7c:91:23:88: bc:fe:b9:12:38:66:73:ce:06:06:52:8e:46:0d:ac:e8:60:75: a6:7f:46:f0:68:cc:c1:35:f3:f5:94:3a:a8:c5:f4:96:f9:05: 42:22:27:92:cd:b2:0e:80:e4:a8:6e:50:ff:53:9b:b2:be:2d: 4d:64:9d:0a:de:53:0a:25:84:91:c5:ef:13:0e:78:a2:05:ec: 77:ab:96:97:ea:a0:a5:d4:99:3a:bb:00:9e:f5:b0:e7:af:74: f3:ec:14:60:a1:57:44:b9:53:f4:2e:67:18:34:15:e2:35:31: 52:61:94:fe:8b:bd:1a:c9:73:ee:d1:96:b7:ae:1c:47:21:67: 20:73:0d:57:f3:41:12:03:47:49:97:dc:ff:e9:a3:a0:2f:bc: 7d:15:64:c1:73:e4:43:a7:c7:8a:56:40:b6:07:05:a6:df:f2: 58:0a:a2:bb:69:7b:11:b4:3f:ec:ce:da:45:ab:56:e2:53:39: ae:60:cb:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+JhBf6TMAjpRu/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDcxYTVkNDktOGM2NC00NTUzLTlhZGMtNWI1M2U3ODE5YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYVz/ViCZn5uZnB939IvRsrJKgToMDe5mXPO TSg02FiL72oPm38xTAdPFJaBG49A7008orwBI9DjepB9y7byUv/sMQw+jEngldiq vOWwsm9lzD/Nf/hR96nuMMe9F4WsUqjUQrNJMbuSm+sGyIq5HA2WdBzPCtISWRka 2zuG4xj8weUwHHirtYoPbu23lvGwAhavlm6/ID5X4jP7Sp8a7m2LdwEqja5AmKQV 9PUUgN4MEWZMNXHsGPMDAH+FePFoYbfR0mO7I2jwQiqG26ugxFYPHXjwa/CtmJVb 9JU/1xFXNEMR4eZ4g1JQVjmVPXDgmgOPcmkOOH8Set2pKYvcwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKW1MUr0ViZwpa3yLKpfIl1o4Bj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I0Y2YxZWItYjcyOC0z NjM3LWE4YWItZjI2ODAyNGMyMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSep4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmmak1qYeThKVI3lDpzzPfZue5M94z16XU8Pq4t1xkk+fKMXWPTElG5 aKiQAyjbF2yeaAxvORULXqXsWah8pYmkVr14fJEjiLz+uRI4ZnPOBgZSjkYNrOhg daZ/RvBozME18/WUOqjF9Jb5BUIiJ5LNsg6A5KhuUP9Tm7K+LU1knQreUwolhJHF 7xMOeKIF7HerlpfqoKXUmTq7AJ71sOevdPPsFGChV0S5U/QuZxg0FeI1MVJhlP6L vRrJc+7RlreuHEchZyBzDVfzQRIDR0mX3P/po6AvvH0VZMFz5EOnx4pWQLYHBabf 8lgKortpexG0P+zO2kWrVuJTOa5gy0c= -----END CERTIFICATE-----Generated at Sat May 10 10:02:33 2025 by rpki-client