$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fa3c0e1-2e6c-3ce1-a1a0-608b03d1cd0d.roa File: 3fa3c0e1-2e6c-3ce1-a1a0-608b03d1cd0d.roa (raw, json) Hash identifier: 9zKu7cAyqf0lcLmIJJE3nBxiTUJsCRKBtG1KaqOYPMg= Subject key identifier: 59:9C:27:89:31:5A:D9:FE:73:53:C7:48:B8:97:49:3F:05:19:65:CC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0F6FE01441529F6DA1900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fa3c0e1-2e6c-3ce1-a1a0-608b03d1cd0d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 73.208.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:f6:fe:01:44:15:29:f6:da:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a355b469-1984-4647-b729-4f26d8ed1063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:22:fd:f1:40:27:08:59:92:65:34:52:f1: 2e:52:ed:a3:12:77:08:8a:91:fc:df:c3:13:39:12: 53:d2:f3:69:e4:2f:39:b4:c0:72:18:7a:d8:d8:f2: 26:d9:3f:09:ef:4d:ab:5f:9d:8b:fd:e0:f4:57:c0: d7:58:ca:94:95:a1:24:41:d3:48:7f:17:f6:7c:6e: 89:e7:1d:3b:21:43:48:3a:5a:a4:41:dd:ea:ea:00: bc:fe:c3:81:be:3d:b4:70:b9:9d:0b:33:49:85:14: 29:9f:90:c9:70:79:73:f4:43:b6:ee:33:c0:be:db: 9e:a3:26:63:11:27:48:d0:b6:0c:d8:0c:a4:cc:61: ab:8a:60:1b:d7:71:82:34:52:84:45:e6:75:6c:7a: 7b:1b:81:b5:c4:0c:a2:6f:bf:a7:13:7b:ab:fd:e8: 60:5b:89:a8:8c:0f:cf:cc:9f:57:4c:ba:73:a2:82: 3d:94:e4:4d:f0:11:14:e8:08:7f:19:bd:11:25:fd: e5:f2:56:22:6d:7e:f9:be:d1:2b:e3:dc:f3:3c:9c: 6f:a0:1d:8f:b6:75:0a:1f:8e:88:8d:94:1c:7f:6a: 80:bc:ee:44:1a:22:32:ce:ae:17:ba:02:5c:5f:31: 8d:42:32:1f:ee:a7:89:fd:ab:20:79:46:dc:80:ac: ce:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9C:27:89:31:5A:D9:FE:73:53:C7:48:B8:97:49:3F:05:19:65:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fa3c0e1-2e6c-3ce1-a1a0-608b03d1cd0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.208.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:1a:ef:14:e9:3a:ce:48:cc:6d:11:5b:69:b7:33:8f:c0:27: 73:4f:eb:70:85:2d:68:e7:b3:90:48:13:0c:26:e7:ee:bf:0b: 16:5c:61:3c:50:9c:34:2f:15:04:64:1a:9a:9d:22:13:de:67: 5f:b3:d6:2e:88:42:4b:62:3b:05:41:11:2f:c0:ef:fd:55:5f: 00:36:83:15:78:ea:0a:a4:e9:05:56:96:37:71:a9:c9:6b:d7: 2e:9a:72:54:47:4d:b4:94:a1:5e:c3:96:be:58:0d:3a:c1:cc: 6a:7b:ba:70:8e:5a:5e:d1:0a:11:c0:c4:41:18:4c:f0:d5:37: 1e:25:00:32:79:fe:77:90:4d:91:ad:66:2b:bc:56:95:6e:56: ed:1a:0a:70:da:56:56:f6:b8:0d:a3:ef:4c:0d:34:42:40:85: 9b:7e:60:70:9e:60:d8:ce:77:b3:01:ea:e4:6e:24:e2:09:1d: 1f:c9:82:3e:94:27:cb:e8:46:85:67:f6:da:ae:48:91:d4:21: b5:da:53:0f:66:e7:86:01:12:55:2f:2e:4a:7a:4c:ec:f5:b7: 09:0c:f1:58:fb:68:da:fc:a9:23:cb:d0:d0:ae:a6:f0:ec:db: 5c:59:d5:7d:ce:e8:cc:bf:af:56:dd:2d:9f:ab:37:b1:0c:37: 36:49:46:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssPb+AUQVKfbaGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTM1NWI0NjktMTk4NC00NjQ3LWI3MjktNGYyNmQ4ZWQxMDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IIi/fFAJwhZkmU0UvEuUu2jEncIipH838MT ORJT0vNp5C85tMByGHrY2PIm2T8J702rX52L/eD0V8DXWMqUlaEkQdNIfxf2fG6J 5x07IUNIOlqkQd3q6gC8/sOBvj20cLmdCzNJhRQpn5DJcHlz9EO27jPAvtueoyZj ESdI0LYM2AykzGGrimAb13GCNFKEReZ1bHp7G4G1xAyib7+nE3ur/ehgW4mojA/P zJ9XTLpzooI9lORN8BEU6Ah/Gb0RJf3l8lYibX75vtEr49zzPJxvoB2PtnUKH46I jZQcf2qAvO5EGiIyzq4XugJcXzGNQjIf7qeJ/asgeUbcgKzOdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmcJ4kxWtn+c1PHSLiXST8FGWXMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2ZhM2MwZTEtMmU2Yy0z Y2UxLWExYTAtNjA4YjAzZDFjZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASdCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMsa7xTpOs5IzG0RW2m3M4/AJ3NP63CFLWjns5BIEwwm5+6/CxZcYTxQ nDQvFQRkGpqdIhPeZ1+z1i6IQktiOwVBES/A7/1VXwA2gxV46gqk6QVWljdxqclr 1y6aclRHTbSUoV7Dlr5YDTrBzGp7unCOWl7RChHAxEEYTPDVNx4lADJ5/neQTZGt Ziu8VpVuVu0aCnDaVlb2uA2j70wNNEJAhZt+YHCeYNjOd7MB6uRuJOIJHR/Jgj6U J8voRoVn9tquSJHUIbXaUw9m54YBElUvLkp6TOz1twkM8Vj7aNr8qSPL0NCupvDs 21xZ1X3O6My/r1bdLZ+rN7EMNzZJRgE= -----END CERTIFICATE-----Generated at Mon Apr 7 05:54:32 2025 by rpki-client