$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cc43977-d37d-3b68-91f2-c56a9a07c35a.roa File: 4cc43977-d37d-3b68-91f2-c56a9a07c35a.roa (raw, json) Hash identifier: H7EtM+YuT7qxLYJehK2VTggRzKjIi7hCcN4C2wPxd4g= Subject key identifier: 0E:F7:25:0A:0F:B7:CD:A3:2F:46:ED:C3:31:DD:53:6C:8A:B3:8F:7D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0FBA0A8FF0627B8069B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cc43977-d37d-3b68-91f2-c56a9a07c35a.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 73.209.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:fb:a0:a8:ff:06:27:b8:06:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=6edb7d86-a7d3-4158-af0d-591773ceb4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c0:49:24:ac:8d:43:2c:0e:9d:15:d7:1a:04: 38:b7:de:43:a0:cf:0a:f3:b2:c0:3c:48:17:25:12: bc:f2:fe:ff:9a:a7:1c:c5:7e:97:c7:aa:84:a5:5a: 56:7c:32:b2:7e:e3:01:2d:3f:55:81:30:66:3a:0d: 17:9e:1d:00:f8:22:6e:d7:61:f3:97:9b:45:de:2e: 2c:65:da:a1:20:6e:f6:25:9a:d6:06:36:ee:3d:8e: b6:a6:d3:13:4e:ca:37:0b:2a:4c:aa:57:a4:b5:f3: 7c:70:b9:1a:f4:f3:4c:73:44:b3:51:9f:0b:35:e6: 9c:10:e6:c5:d8:56:da:21:0c:96:78:f2:2c:00:10: 36:f7:82:b3:f8:5f:c2:89:13:0d:91:22:9f:9d:8b: 51:19:8e:29:d4:e0:fb:09:d0:83:51:e0:b9:c4:08: b3:a9:20:a7:fb:2b:d1:80:3a:0e:6d:b5:9b:43:15: cf:95:8f:75:6c:dd:24:ea:f4:9d:c9:d5:01:09:51: 30:3a:a7:5b:29:84:70:6b:45:23:75:d0:3d:18:87: 15:c4:23:30:12:de:0c:d9:ab:a1:2a:2a:4e:06:1c: 0a:1c:5c:71:3a:3d:84:b1:cd:b0:1a:25:fe:22:7b: bd:40:50:fe:47:a7:26:9d:b5:56:ef:5d:c5:85:d6: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F7:25:0A:0F:B7:CD:A3:2F:46:ED:C3:31:DD:53:6C:8A:B3:8F:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cc43977-d37d-3b68-91f2-c56a9a07c35a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.209.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:fc:7f:63:21:80:0f:4a:43:88:f2:42:1d:7a:0d:fd:93:39: da:43:a9:c4:82:6b:35:5f:7c:a5:71:68:bb:ff:42:7f:42:ad: ad:15:4d:02:2e:1c:51:f4:b0:35:ac:b9:d2:f8:01:a1:59:20: f2:6b:a1:74:03:35:80:a0:67:e9:89:3e:57:f3:40:b3:57:ae: 2b:0c:1c:59:ce:15:6a:59:3f:52:4c:5c:30:00:64:40:02:d1: bc:d1:10:43:b0:f5:d5:36:04:9b:f4:1d:25:88:0e:7c:83:d9: c1:79:34:75:bd:f5:f4:c3:42:be:1d:26:59:ab:e0:47:aa:0a: c3:05:17:1d:eb:8a:70:f8:47:46:96:92:70:f9:58:79:a2:04: 2d:d7:c6:93:3d:a3:2e:d7:e9:10:ee:d7:55:0c:64:81:fa:cf: b1:94:06:67:1e:1a:8b:9a:98:67:e7:22:c9:ab:53:8d:51:8a: 1a:70:5f:11:33:a1:ad:e2:ae:c4:23:40:e5:3e:04:3d:49:4e: e2:8c:5e:55:54:89:af:0f:31:d6:1b:16:3e:cb:39:be:20:bd: bd:87:60:6b:30:50:df:57:a0:50:3b:ae:d0:a4:af:0e:e3:a2: 3f:65:fa:c3:59:38:ee:4b:d2:9a:97:2f:62:d2:81:2c:6a:9d: b0:19:34:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssPugqP8GJ7gGm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NmVkYjdkODYtYTdkMy00MTU4LWFmMGQtNTkxNzczY2ViNGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcBJJKyNQywOnRXXGgQ4t95DoM8K87LAPEgX JRK88v7/mqccxX6Xx6qEpVpWfDKyfuMBLT9VgTBmOg0Xnh0A+CJu12Hzl5tF3i4s ZdqhIG72JZrWBjbuPY62ptMTTso3CypMqlektfN8cLka9PNMc0SzUZ8LNeacEObF 2FbaIQyWePIsABA294Kz+F/CiRMNkSKfnYtRGY4p1OD7CdCDUeC5xAizqSCn+yvR gDoObbWbQxXPlY91bN0k6vSdydUBCVEwOqdbKYRwa0UjddA9GIcVxCMwEt4M2auh KipOBhwKHFxxOj2Esc2wGiX+Inu9QFD+R6cmnbVW713FhdZrCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA73JQoPt82jL0btwzHdU2yKs499MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGNjNDM5NzctZDM3ZC0z YjY4LTkxZjItYzU2YTlhMDdjMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj8f2MhgA9KQ4jyQh16Df2TOdpDqcSCazVffKVxaLv/Qn9Cra0VTQIu HFH0sDWsudL4AaFZIPJroXQDNYCgZ+mJPlfzQLNXrisMHFnOFWpZP1JMXDAAZEAC 0bzREEOw9dU2BJv0HSWIDnyD2cF5NHW99fTDQr4dJlmr4EeqCsMFFx3rinD4R0aW knD5WHmiBC3XxpM9oy7X6RDu11UMZIH6z7GUBmceGouamGfnIsmrU41RihpwXxEz oa3irsQjQOU+BD1JTuKMXlVUia8PMdYbFj7LOb4gvb2HYGswUN9XoFA7rtCkrw7j oj9l+sNZOO5L0pqXL2LSgSxqnbAZNGg= -----END CERTIFICATE-----Generated at Mon Apr 7 05:55:57 2025 by rpki-client