$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8731e885-f290-3d64-82ae-df38b3b0f7c7.roa File: 8731e885-f290-3d64-82ae-df38b3b0f7c7.roa (raw, json) Hash identifier: cwADRLLcJseTv01jAobzFPrF6/zpP24wNf/tVfNnYSw= Subject key identifier: E1:3D:F9:1C:80:4C:74:D7:5E:65:BB:D5:EF:C1:85:87:AB:E8:CC:BA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C5190234977F433FEBA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8731e885-f290-3d64-82ae-df38b3b0f7c7.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 73.43.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:51:90:23:49:77:f4:33:fe:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=0f2f414d-a0e1-465f-bdb4-9fbe2fdc2358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:67:21:62:b9:e8:e2:21:82:27:9d:9c:15:57: d8:d5:84:f4:1e:b8:7a:fd:b5:c7:c2:24:60:d1:1d: c8:b3:fb:ae:d3:09:2d:ca:82:c1:bc:3c:d6:bb:89: f4:6e:2c:5f:93:1f:04:6e:06:80:76:99:99:d5:80: 7e:c3:88:90:bd:b6:97:ad:38:6b:10:cb:f2:39:55: 11:76:37:4f:65:b2:e0:d6:81:41:30:e2:d9:ab:f6: 9e:a3:bb:ca:b7:75:67:40:b5:c4:8e:45:70:68:11: 22:11:ee:e7:0b:e4:95:ee:bf:5a:91:6c:34:37:49: a3:f2:16:36:ea:3c:f2:07:52:7e:61:31:b1:09:49: 3b:c0:10:b0:f5:6e:f3:80:65:df:8d:dc:a1:68:00: 87:7b:ec:4b:1c:bf:b7:6a:18:e4:f6:2b:07:4e:45: cf:e3:a3:3f:a4:9d:fc:45:a4:00:7c:4f:20:74:bf: bd:61:70:ad:49:40:a8:bd:0d:b2:b6:31:29:3b:8e: ae:0b:80:c7:5f:32:0c:fc:d1:f9:6a:ab:1d:00:98: ea:56:14:7b:ec:36:a8:06:ac:f2:4b:c0:df:62:6b: 62:98:49:2d:67:93:e7:b2:71:1a:c5:77:4a:a8:96: 64:21:79:bd:a6:1e:80:21:5e:72:67:e0:37:98:e2: 6c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3D:F9:1C:80:4C:74:D7:5E:65:BB:D5:EF:C1:85:87:AB:E8:CC:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8731e885-f290-3d64-82ae-df38b3b0f7c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.43.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:4c:1e:62:1f:31:d4:e1:cf:1f:22:80:b5:e9:32:8a:64:7c: 54:82:65:21:ab:2c:22:8e:b2:b1:7f:6c:5e:94:a1:ef:02:00: ce:95:61:3b:78:de:93:3c:9d:4a:a3:6b:43:29:49:4d:d3:e5: a0:ae:31:a9:c0:76:3e:3b:99:bf:3f:6b:d4:64:ab:c0:16:0c: a9:9f:28:6c:c3:a8:9f:66:5d:11:70:7f:18:47:39:50:b1:21: c4:14:ab:de:9e:24:fe:c6:d8:99:ae:be:3c:25:e9:1f:f2:76: 06:41:f0:e2:8a:1a:04:3c:7e:20:ea:c0:95:12:76:94:dd:64: 6b:b6:62:ed:68:7c:47:1c:24:c1:1e:51:87:08:2a:3b:a0:41: 2c:d4:dd:5e:08:74:dd:c6:43:c3:35:8f:7d:8a:2c:1e:91:c7: 09:ab:77:e5:9e:49:46:ad:71:63:5f:8c:25:b0:ca:38:9a:89: a2:49:ab:b5:a8:6c:51:4f:d3:a1:ac:52:75:6d:af:a6:4b:9b: 8c:ec:f4:f5:76:83:7b:a9:d1:7e:2e:5f:f3:65:03:98:91:32: 56:d0:f1:7f:34:2f:2b:af:78:50:61:31:ee:57:91:5c:86:6a: d2:b9:f8:8e:34:00:5b:69:88:8e:aa:28:5c:5b:11:63:87:33: fe:d1:5b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPFGQI0l39DP+ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk MGYyZjQxNGQtYTBlMS00NjVmLWJkYjQtOWZiZTJmZGMyMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGchYrno4iGCJ52cFVfY1YT0Hrh6/bXHwiRg 0R3Is/uu0wktyoLBvDzWu4n0bixfkx8EbgaAdpmZ1YB+w4iQvbaXrThrEMvyOVUR djdPZbLg1oFBMOLZq/aeo7vKt3VnQLXEjkVwaBEiEe7nC+SV7r9akWw0N0mj8hY2 6jzyB1J+YTGxCUk7wBCw9W7zgGXfjdyhaACHe+xLHL+3ahjk9isHTkXP46M/pJ38 RaQAfE8gdL+9YXCtSUCovQ2ytjEpO46uC4DHXzIM/NH5aqsdAJjqVhR77DaoBqzy S8DfYmtimEktZ5PnsnEaxXdKqJZkIXm9ph6AIV5yZ+A3mOJsCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE9+RyATHTXXmW71e/BhYer6My6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODczMWU4ODUtZjI5MC0z ZDY0LTgyYWUtZGYzOGIzYjBmN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASSvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlMHmIfMdThzx8igLXpMopkfFSCZSGrLCKOsrF/bF6Uoe8CAM6VYTt4 3pM8nUqja0MpSU3T5aCuManAdj47mb8/a9Rkq8AWDKmfKGzDqJ9mXRFwfxhHOVCx IcQUq96eJP7G2Jmuvjwl6R/ydgZB8OKKGgQ8fiDqwJUSdpTdZGu2Yu1ofEccJMEe UYcIKjugQSzU3V4IdN3GQ8M1j32KLB6Rxwmrd+WeSUatcWNfjCWwyjiaiaJJq7Wo bFFP06GsUnVtr6ZLm4zs9PV2g3up0X4uX/NlA5iRMlbQ8X80LyuveFBhMe5XkVyG atK5+I40AFtpiI6qKFxbEWOHM/7RW1Q= -----END CERTIFICATE-----Generated at Mon Apr 7 06:05:25 2025 by rpki-client