$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8971b714-4fc9-30db-b222-494a4f7238ee.roa File: 8971b714-4fc9-30db-b222-494a4f7238ee.roa (raw, json) Hash identifier: S7k1aaYWJOXzP2Y0oslBsDq/FtqPtkqeoYaM1Nn/YTE= Subject key identifier: 78:07:7C:5D:BE:3D:CE:57:32:B0:42:FD:CE:01:BA:13:71:8A:4D:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F88709B1198B357B260B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8971b714-4fc9-30db-b222-494a4f7238ee.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 73.16.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:87:09:b1:19:8b:35:7b:26:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=59d193fe-88b6-44d7-a489-16c9790f88c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a9:e3:41:f9:d1:5b:10:84:3d:b5:01:db:ed: 3e:8f:b3:3a:1b:09:b1:d7:35:20:8e:5e:86:32:99: 84:9d:a6:dd:df:fe:2e:a6:28:f0:d3:1f:c0:32:21: 8b:f1:ae:39:2a:99:17:42:36:56:c2:d1:72:1b:00: b5:21:cd:29:d3:7b:31:28:8a:da:c5:dd:18:4a:83: aa:29:34:eb:a7:eb:ea:51:7f:c5:c4:dc:ac:c1:18: 5d:94:d2:f3:6b:88:6c:5f:a0:21:d9:6c:a7:a3:9e: a4:cc:3c:26:99:c6:0e:bb:76:e5:a0:f1:b4:2a:2f: 90:e1:29:29:35:bb:68:7a:71:80:ca:eb:58:57:44: 1d:8c:ae:20:37:d7:d6:4c:05:0c:28:ad:73:f1:94: 17:3b:37:d3:99:b5:17:d3:72:c2:d7:c3:b8:12:08: 29:07:52:03:84:bb:01:b5:24:56:43:4d:6a:01:be: 1a:07:cf:31:87:62:09:ff:c9:ed:e2:46:c3:44:4a: f1:3d:9f:a9:ec:c0:3c:96:bc:98:34:b0:68:f1:1c: 1c:ba:7b:f0:b3:d8:c5:cd:bb:6e:f1:32:21:06:14: 82:cd:1a:9c:10:0e:d0:b1:7b:aa:39:dc:57:fc:76: 77:a9:75:ba:7e:05:09:c4:e5:1a:0e:84:7f:90:8c: 79:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:07:7C:5D:BE:3D:CE:57:32:B0:42:FD:CE:01:BA:13:71:8A:4D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8971b714-4fc9-30db-b222-494a4f7238ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.16.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:e6:6e:50:97:8c:5a:96:3f:86:52:19:5b:d4:24:55:ff:b1: 9d:2d:69:ae:bd:09:5d:21:77:03:51:16:67:52:81:1e:10:c7: a6:e0:a0:d7:f9:76:85:01:54:9f:15:75:e0:32:77:10:e2:10: e2:69:bd:7d:ad:ba:b7:7f:4e:13:65:ff:76:aa:79:ea:31:d1: 1f:d0:4d:f6:13:21:85:00:8f:4c:b8:82:28:b1:18:1a:70:4a: ee:5f:f9:d6:44:b9:26:20:18:6b:0b:d0:71:16:ca:67:cf:5d: 52:46:8f:0f:2d:17:18:dc:90:c2:a3:11:32:8f:46:cb:f2:d2: b7:25:f5:d6:92:1a:5c:3f:8d:ac:d2:c6:36:48:fb:8a:9d:d8: 94:6e:6a:e9:50:fc:62:0b:3e:f2:23:21:d1:81:21:f8:c3:ee: 24:87:31:02:6c:c2:49:5e:ff:39:f1:7c:f2:6f:ed:b4:55:dc: c8:77:45:cb:09:57:6a:96:df:9f:72:de:74:11:84:11:fc:e4: 15:68:f9:03:7c:67:9a:f0:50:c3:03:19:89:8b:e6:aa:23:fb: 16:27:10:a8:00:3c:15:b4:85:2b:78:15:0f:5a:a3:13:7c:25: e8:14:dc:bc:c9:c0:ba:42:d5:d0:24:04:93:64:79:68:85:bd: dd:c4:25:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+IcJsRmLNXsmC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NTlkMTkzZmUtODhiNi00NGQ3LWE0ODktMTZjOTc5MGY4OGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqnjQfnRWxCEPbUB2+0+j7M6Gwmx1zUgjl6G MpmEnabd3/4upijw0x/AMiGL8a45KpkXQjZWwtFyGwC1Ic0p03sxKIraxd0YSoOq KTTrp+vqUX/FxNyswRhdlNLza4hsX6Ah2Wyno56kzDwmmcYOu3bloPG0Ki+Q4Skp NbtoenGAyutYV0QdjK4gN9fWTAUMKK1z8ZQXOzfTmbUX03LC18O4EggpB1IDhLsB tSRWQ01qAb4aB88xh2IJ/8nt4kbDRErxPZ+p7MA8lryYNLBo8Rwcunvws9jFzbtu 8TIhBhSCzRqcEA7QsXuqOdxX/HZ3qXW6fgUJxOUaDoR/kIx5BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgHfF2+Pc5XMrBC/c4BuhNxik1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODk3MWI3MTQtNGZjOS0z MGRiLWIyMjItNDk0YTRmNzIzOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSRBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMfmblCXjFqWP4ZSGVvUJFX/sZ0taa69CV0hdwNRFmdSgR4Qx6bgoNf5 doUBVJ8VdeAydxDiEOJpvX2turd/ThNl/3aqeeox0R/QTfYTIYUAj0y4giixGBpw Su5f+dZEuSYgGGsL0HEWymfPXVJGjw8tFxjckMKjETKPRsvy0rcl9daSGlw/jazS xjZI+4qd2JRuaulQ/GILPvIjIdGBIfjD7iSHMQJswkle/znxfPJv7bRV3Mh3RcsJ V2qW359y3nQRhBH85BVo+QN8Z5rwUMMDGYmL5qoj+xYnEKgAPBW0hSt4FQ9aoxN8 JegU3LzJwLpC1dAkBJNkeWiFvd3EJVI= -----END CERTIFICATE-----Generated at Sun Apr 6 11:51:46 2025 by rpki-client