$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8740af31-3f86-3570-a843-db827e3c22c0.roa File: 8740af31-3f86-3570-a843-db827e3c22c0.roa (raw, json) Hash identifier: dmjUdvoNyr9yatDGM8EVsCpAk8bZ8heLY11gF/v9mb8= Subject key identifier: D3:89:89:10:C8:06:1E:EF:24:00:70:9E:EC:26:26:AB:6A:3D:66:93 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFFAFB13A3750769DA1640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8740af31-3f86-3570-a843-db827e3c22c0.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 73.189.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:fa:fb:13:a3:75:07:69:da:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=d0b53a2e-5269-4bb9-a95a-06c4fcb97fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:1e:47:6f:a7:6b:e5:11:e0:4d:6e:aa:ed: ec:8e:29:d2:60:de:f5:3a:37:ee:4d:74:e3:58:d0: e4:0e:32:65:3a:d9:bf:5e:40:5a:da:11:f1:1d:72: 36:93:8a:75:c8:d0:00:1f:d0:63:98:c0:62:17:71: 1f:1a:64:64:ff:f3:cb:f9:ce:e4:28:13:59:24:d2: da:d8:db:29:21:69:86:25:90:50:00:1b:d5:74:ad: c8:7b:83:1d:07:c5:63:fe:9a:1f:b8:f5:86:8e:fb: 42:9b:b2:d1:39:05:e6:a5:a8:79:8d:a2:26:e9:b0: 0d:89:4e:82:3d:21:ca:9e:93:88:67:17:d1:7a:97: a9:59:3c:45:59:b5:1f:0b:ab:e1:43:69:94:2b:2e: cc:ed:0e:73:c2:d1:49:c2:f8:12:40:e9:97:c4:ca: 45:2f:d7:79:3e:07:ae:99:12:be:76:ba:8c:4e:ae: 21:e3:52:e9:24:0a:83:60:0d:45:f6:e5:45:9e:2e: 49:6d:2d:0b:dd:01:87:80:21:ba:06:73:a7:23:00: 1c:ff:9f:29:4e:bb:8c:9a:69:91:56:b2:8a:af:d8: b4:3c:25:5c:39:60:8a:79:75:8b:22:8c:5d:4d:02: f0:01:d1:6a:9c:5b:e2:2a:fc:af:f1:cd:e6:ec:89: 04:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:89:89:10:C8:06:1E:EF:24:00:70:9E:EC:26:26:AB:6A:3D:66:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8740af31-3f86-3570-a843-db827e3c22c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.189.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:28:94:a1:95:09:db:28:8e:aa:d1:c1:32:d8:58:9d:f7:7e: 0c:49:3d:cc:32:de:cd:fa:f4:89:a5:17:90:40:05:d2:d4:35: d5:9a:0a:c4:e3:3a:d6:24:69:51:32:d1:42:06:97:97:d7:b9: f0:ad:05:13:81:23:01:b3:42:ed:9b:f3:37:67:25:a7:de:01: 9f:36:c3:0b:1e:0b:48:70:c0:9f:6b:4f:78:91:b4:bc:89:d0: 48:c6:2a:c6:55:ac:4c:b1:8a:ba:59:89:3c:a8:7b:ee:95:25: 93:dd:86:29:d5:3f:4b:b8:3b:c8:35:7f:76:69:00:fc:c6:57: 95:31:70:4a:a4:e3:9b:bc:76:da:14:cb:2b:a3:d0:8a:a3:f3: 82:d0:22:9a:f3:6e:cd:8d:ea:1a:eb:44:40:51:13:32:60:d9: 17:7d:06:63:d2:d2:0d:3f:a1:51:be:ba:7e:a9:31:7d:9f:c6: ac:5c:0d:43:85:b5:39:ce:bd:41:47:2d:7e:04:cc:09:86:95: cb:38:3f:70:e4:c0:ef:39:80:b0:26:97:69:a6:b1:6d:52:b0: 58:69:2e:3c:ca:0a:38:f4:3a:97:7a:c1:95:6b:a7:42:29:3b: 89:72:ba:1c:0e:4a:7f:cf:6f:cc:08:c8:2e:29:47:df:11:36: ee:56:c2:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr/r7E6N1B2naFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDBiNTNhMmUtNTI2OS00YmI5LWE5NWEtMDZjNGZjYjk3ZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDAeR2+na+UR4E1uqu3sjinSYN71OjfuTXTj WNDkDjJlOtm/XkBa2hHxHXI2k4p1yNAAH9BjmMBiF3EfGmRk//PL+c7kKBNZJNLa 2NspIWmGJZBQABvVdK3Ie4MdB8Vj/pofuPWGjvtCm7LROQXmpah5jaIm6bANiU6C PSHKnpOIZxfRepepWTxFWbUfC6vhQ2mUKy7M7Q5zwtFJwvgSQOmXxMpFL9d5Pgeu mRK+drqMTq4h41LpJAqDYA1F9uVFni5JbS0L3QGHgCG6BnOnIwAc/58pTruMmmmR VrKKr9i0PCVcOWCKeXWLIoxdTQLwAdFqnFviKvyv8c3m7IkEuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOJiRDIBh7vJABwnuwmJqtqPWaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODc0MGFmMzEtM2Y4Ni0z NTcwLWE4NDMtZGI4MjdlM2MyMmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSb3UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0olKGVCdsojqrRwTLYWJ33fgxJPcwy3s369ImlF5BABdLUNdWaCsTj OtYkaVEy0UIGl5fXufCtBROBIwGzQu2b8zdnJafeAZ82wwseC0hwwJ9rT3iRtLyJ 0EjGKsZVrEyxirpZiTyoe+6VJZPdhinVP0u4O8g1f3ZpAPzGV5UxcEqk45u8dtoU yyuj0Iqj84LQIprzbs2N6hrrREBREzJg2Rd9BmPS0g0/oVG+un6pMX2fxqxcDUOF tTnOvUFHLX4EzAmGlcs4P3DkwO85gLAml2mmsW1SsFhpLjzKCjj0Opd6wZVrp0Ip O4lyuhwOSn/Pb8wIyC4pR98RNu5Wwic= -----END CERTIFICATE-----Generated at Mon Apr 7 05:53:28 2025 by rpki-client