$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/340ee675-6325-3375-a429-0c8e2d263f21.roa File: 340ee675-6325-3375-a429-0c8e2d263f21.roa (raw, json) Hash identifier: t7lJ5G1ybz+BI6iN0Vbjk+Jre9aRSuy+0UVIjSYY5Gc= Subject key identifier: 8C:78:91:3E:72:95:D2:33:C4:B6:F6:8D:D0:70:6E:2D:C0:DB:C9:15 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7BA4E4EF27252F3B47F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/340ee675-6325-3375-a429-0c8e2d263f21.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 73.18.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:ba:4e:4e:f2:72:52:f3:b4:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=da093599-7529-4d45-8671-0aaf4e3160bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c6:ac:42:78:e8:bd:48:39:10:d8:dc:61:fc: 43:1c:60:e3:75:3a:1d:0f:f1:7b:3c:7a:44:5b:2b: a8:d3:50:28:41:df:d9:20:28:fb:6f:67:aa:0a:9c: fe:15:c2:8d:bc:50:ad:95:ee:70:5a:68:fc:f6:79: 85:2b:19:25:13:7a:57:3b:03:41:8a:36:cb:59:53: 10:a0:23:1d:40:8f:fa:cb:bd:9f:63:cd:d0:dd:a4: 15:86:f3:2d:5d:35:14:ef:1a:b2:c6:24:3e:d6:54: 04:e2:04:35:5f:30:8e:ed:77:0c:8b:dc:93:c6:95: 4b:e9:fc:c1:67:1f:a2:d7:f6:db:cf:3e:25:ee:05: b2:f1:24:98:b6:d1:3a:91:20:d0:ed:71:e8:28:bf: 04:7b:93:0f:09:8f:f5:4c:97:2e:39:06:cb:eb:a5: 66:55:77:e7:ab:e0:4e:0f:31:dc:39:c8:4b:a6:6b: c6:79:6b:0a:e5:56:71:a8:6b:55:c9:97:31:78:1c: 88:09:b1:2d:8e:a4:62:c8:27:5c:fe:d5:d7:39:af: 6b:ff:6f:77:d5:f5:ec:9c:40:38:b0:c2:f8:d9:52: fe:c1:83:4f:d3:62:8a:75:b3:ca:b7:69:70:61:c2: 87:31:99:5e:70:c0:92:b6:31:8f:02:d5:13:a6:04: 0f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:78:91:3E:72:95:D2:33:C4:B6:F6:8D:D0:70:6E:2D:C0:DB:C9:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/340ee675-6325-3375-a429-0c8e2d263f21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.18.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:7d:63:5d:95:f2:57:68:69:f7:74:2a:6e:0a:b3:60:a8:de: d4:a6:9b:4d:aa:82:a9:10:20:82:cf:26:d7:32:30:d7:98:37: 33:7c:8e:42:76:96:f7:8c:b6:25:1d:6e:45:c1:a5:d6:09:e2: 58:7f:5e:9d:4c:d1:93:49:f6:8c:fb:3b:5e:b8:bf:bc:57:e9: 94:64:ea:99:e1:6e:29:a4:dc:c8:af:bc:03:7a:e5:20:8f:92: 9a:da:9f:32:9c:76:1d:44:e3:32:91:13:b3:c3:ed:c7:75:c5: c6:d8:c4:12:e5:2a:53:c4:c8:31:42:e3:19:09:a1:1b:3a:8f: 0a:5b:2c:41:67:0f:0b:4f:4e:79:98:8f:3d:3f:68:a1:b4:c2: 77:8b:1e:97:0a:5e:20:7e:f5:20:44:95:46:de:24:17:19:7d: e7:c2:92:cb:2e:cd:fa:80:cf:27:fc:e8:69:1d:7b:6f:4f:0e: 81:ad:dc:b4:3b:ae:0d:85:2d:c5:ce:1a:26:f7:ca:07:42:54: af:31:5d:db:3f:a3:fa:12:90:a8:0d:8f:37:5f:a2:a0:95:4d: 5a:94:65:57:f8:61:b4:b1:96:8b:6b:3a:73:57:cd:3b:62:20: 79:19:1d:88:20:29:51:82:56:5a:60:2e:f1:d3:11:96:12:e3: a1:89:72:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj097pOTvJyUvO0fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZGEwOTM1OTktNzUyOS00ZDQ1LTg2NzEtMGFhZjRlMzE2MGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8asQnjovUg5ENjcYfxDHGDjdTodD/F7PHpE Wyuo01AoQd/ZICj7b2eqCpz+FcKNvFCtle5wWmj89nmFKxklE3pXOwNBijbLWVMQ oCMdQI/6y72fY83Q3aQVhvMtXTUU7xqyxiQ+1lQE4gQ1XzCO7XcMi9yTxpVL6fzB Zx+i1/bbzz4l7gWy8SSYttE6kSDQ7XHoKL8Ee5MPCY/1TJcuOQbL66VmVXfnq+BO DzHcOchLpmvGeWsK5VZxqGtVyZcxeByICbEtjqRiyCdc/tXXOa9r/2931fXsnEA4 sML42VL+wYNP02KKdbPKt2lwYcKHMZlecMCStjGPAtUTpgQPqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx4kT5yldIzxLb2jdBwbi3A28kVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQwZWU2NzUtNjMyNS0z Mzc1LWE0MjktMGM4ZTJkMjYzZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASRKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd9Y12V8ldoafd0Km4Ks2Co3tSmm02qgqkQIILPJtcyMNeYNzN8jkJ2 lveMtiUdbkXBpdYJ4lh/Xp1M0ZNJ9oz7O164v7xX6ZRk6pnhbimk3MivvAN65SCP kpranzKcdh1E4zKRE7PD7cd1xcbYxBLlKlPEyDFC4xkJoRs6jwpbLEFnDwtPTnmY jz0/aKG0wneLHpcKXiB+9SBElUbeJBcZfefCkssuzfqAzyf86Gkde29PDoGt3LQ7 rg2FLcXOGib3ygdCVK8xXds/o/oSkKgNjzdfoqCVTVqUZVf4YbSxlotrOnNXzTti IHkZHYggKVGCVlpgLvHTEZYS46GJco0= -----END CERTIFICATE-----Generated at Mon Apr 7 13:30:44 2025 by rpki-client