$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8997b0a9-58da-310f-afec-ce3105ef97a9.roa File: 8997b0a9-58da-310f-afec-ce3105ef97a9.roa (raw, json) Hash identifier: 9ClPrfnOdNlDRhJ9ThpXbfLn4+dDu1grkK2S3X3uYA8= Subject key identifier: 44:1D:DA:A3:2C:5C:5B:89:3B:3D:DC:30:5C:F0:45:0D:1C:50:00:6F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C99B1B9DD844F38D7A200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8997b0a9-58da-310f-afec-ce3105ef97a9.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 71.204.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:99:b1:b9:dd:84:4f:38:d7:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=c9ec4b9a-5c3f-4501-b21f-b54400e27424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0c:b4:fc:41:c3:86:91:c3:9f:73:b4:83:83: 57:04:40:c6:63:5b:ee:b5:97:e6:cf:49:7d:41:f7: d2:26:00:39:c9:ca:04:9e:cc:f4:a8:f0:5f:2f:e4: 82:76:37:cb:a2:d6:65:71:b5:4c:f2:d5:78:74:6e: a1:c1:01:a4:51:7c:86:a1:d2:42:92:71:cb:94:94: 7b:9f:ae:f0:22:b5:85:80:9b:34:58:92:66:69:ad: 9b:cb:bf:ce:1e:a2:f4:7b:9c:f5:ed:28:35:b5:5d: f0:d4:d8:c6:d7:c5:83:69:e1:fd:3e:d1:25:90:cf: 24:21:d2:b4:aa:f4:27:e6:c2:32:19:d5:92:a2:78: 4a:27:64:d2:b4:d2:44:93:b9:55:88:6c:be:da:7a: 26:7c:dc:aa:85:07:a9:8e:e0:ef:da:16:df:ce:b8: 56:71:e3:0e:c3:85:d5:46:a3:75:a6:67:6b:8c:a8: 14:81:33:a1:2e:e7:6f:1e:c3:56:e2:bd:ae:27:bc: d5:07:f8:ce:bf:cb:64:30:16:eb:e8:e8:1b:ce:dc: 64:2b:9f:c6:6c:de:c8:70:0e:84:e2:e7:c1:25:3f: 81:ee:50:0e:06:78:24:1b:d1:0e:37:70:60:d0:15: a2:0b:64:64:ec:c5:2a:9c:17:a1:f5:34:ec:ab:b8: 0e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1D:DA:A3:2C:5C:5B:89:3B:3D:DC:30:5C:F0:45:0D:1C:50:00:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8997b0a9-58da-310f-afec-ce3105ef97a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:36:e3:b9:35:32:d5:b6:7b:48:4d:76:09:2f:0d:57:a6:6c: f1:0e:56:40:29:3b:4c:6d:00:26:16:8c:a9:98:fa:31:8c:09: a6:87:5c:97:46:40:3e:43:4b:87:9d:21:9c:fe:84:54:03:08: 56:95:6e:19:0c:35:d7:a1:01:26:c4:c3:30:dc:14:50:b4:8f: 12:9a:71:43:d3:ed:d3:fb:01:b5:5d:d9:d3:58:1f:b4:12:67: 46:07:d8:d4:af:b7:d2:9e:87:70:61:0d:a5:aa:c9:55:00:ef: f8:ab:fe:1c:c5:e5:2c:01:6e:a8:31:52:c5:e9:cd:56:47:b4: 8b:19:f0:dd:e0:0b:41:b3:c6:76:ac:08:06:29:c6:59:16:3e: df:d6:65:5e:00:ab:8c:3d:2e:c6:d5:23:1f:1c:62:6c:a0:99: ab:af:fc:b2:65:2b:bb:c1:86:56:ac:94:dc:e7:eb:18:40:05: aa:0d:ab:c0:94:b8:b7:23:03:9f:16:54:73:06:15:96:3a:e7: 3b:f2:1e:fb:3d:fe:a3:d0:be:6a:d9:bd:ef:04:9b:6a:64:a5: ee:c0:14:54:6b:30:4a:61:a9:91:ed:c0:71:fc:e0:31:c5:b5: f2:9d:ea:95:10:65:ab:18:ec:47:12:f1:a0:3e:a0:ef:bb:22: 94:c3:06:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPJmxud2ETzjXogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk YzllYzRiOWEtNWMzZi00NTAxLWIyMWYtYjU0NDAwZTI3NDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAy0/EHDhpHDn3O0g4NXBEDGY1vutZfmz0l9 QffSJgA5ycoEnsz0qPBfL+SCdjfLotZlcbVM8tV4dG6hwQGkUXyGodJCknHLlJR7 n67wIrWFgJs0WJJmaa2by7/OHqL0e5z17Sg1tV3w1NjG18WDaeH9PtElkM8kIdK0 qvQn5sIyGdWSonhKJ2TStNJEk7lViGy+2nomfNyqhQepjuDv2hbfzrhWceMOw4XV RqN1pmdrjKgUgTOhLudvHsNW4r2uJ7zVB/jOv8tkMBbr6OgbztxkK5/GbN7IcA6E 4ufBJT+B7lAOBngkG9EON3Bg0BWiC2Rk7MUqnBeh9TTsq7gO0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQd2qMsXFuJOz3cMFzwRQ0cUABvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODk5N2IwYTktNThkYS0z MTBmLWFmZWMtY2UzMTA1ZWY5N2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8xsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANs247k1MtW2e0hNdgkvDVembPEOVkApO0xtACYWjKmY+jGMCaaHXJdG QD5DS4edIZz+hFQDCFaVbhkMNdehASbEwzDcFFC0jxKacUPT7dP7AbVd2dNYH7QS Z0YH2NSvt9Keh3BhDaWqyVUA7/ir/hzF5SwBbqgxUsXpzVZHtIsZ8N3gC0Gzxnas CAYpxlkWPt/WZV4Aq4w9LsbVIx8cYmygmauv/LJlK7vBhlaslNzn6xhABaoNq8CU uLcjA58WVHMGFZY65zvyHvs9/qPQvmrZve8Em2pkpe7AFFRrMEphqZHtwHH84DHF tfKd6pUQZasY7EcS8aA+oO+7IpTDBgE= -----END CERTIFICATE-----Generated at Mon Apr 7 09:35:43 2025 by rpki-client