$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfc04428-126f-3006-a988-f806f1bc8206.roa File: bfc04428-126f-3006-a988-f806f1bc8206.roa (raw, json) Hash identifier: n+wPxhZHBRlok6Oyx/hweeqlmI6NQ8RPdU6SwLACeVQ= Subject key identifier: 1D:4D:20:93:E4:A9:E8:AC:95:38:C0:3B:23:64:84:CB:A2:DB:4A:5C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203CACC35B7BC5911C349480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfc04428-126f-3006-a988-f806f1bc8206.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 73.43.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:ac:c3:5b:7b:c5:91:1c:34:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=0396a6a0-c92e-41de-9678-ba6c02d8fc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:71:a2:0b:d7:8c:00:92:c2:b8:16:d4:1e:0c: 81:18:ee:2e:26:05:a2:c5:39:1a:d7:fc:5b:87:13: 26:a9:06:37:85:fc:3f:af:59:3e:9c:4a:89:85:7f: 4a:28:17:7d:87:d4:bb:59:b5:c5:3e:c9:87:3c:f9: 6b:24:0a:a2:4a:1e:e9:4f:53:5e:24:0c:d8:e6:dc: 03:36:ab:f1:05:f8:fe:8a:ee:a3:ea:88:aa:d7:2b: 22:61:5d:49:f6:3f:04:1d:37:5a:cc:3f:b7:61:53: 90:a9:f6:eb:12:9c:2f:9f:21:5a:f4:a2:ae:c4:f5: 21:be:34:18:93:d4:b5:48:23:8a:b9:85:ef:10:9a: 85:10:8d:0d:85:4b:a7:08:c2:b5:72:81:e7:b1:80: 51:77:9f:b2:95:df:a7:63:ae:17:64:89:0d:fd:bd: 3b:2a:0a:1b:40:f4:35:be:b9:2f:23:84:5c:86:4c: b2:fe:2a:08:ae:1e:07:17:4a:c0:a0:e3:59:0a:e9: 11:de:e8:ca:0e:cf:86:b7:02:f0:e5:55:61:ef:36: 3c:06:40:69:ad:5e:18:f8:2f:65:23:9b:54:02:64: 8e:45:62:35:84:bc:76:21:02:56:3f:51:58:d6:74: ba:65:30:9a:b6:4c:96:04:e5:50:da:54:36:1b:bc: ec:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4D:20:93:E4:A9:E8:AC:95:38:C0:3B:23:64:84:CB:A2:DB:4A:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfc04428-126f-3006-a988-f806f1bc8206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.43.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:07:11:18:4f:20:6d:10:ac:71:62:56:3b:94:0a:51:e7:67: dd:85:22:4d:85:55:e2:cc:43:7c:9c:40:86:fe:31:35:35:19: f9:e1:0e:9c:ce:0a:54:59:f6:c0:04:c1:01:38:d1:be:1b:1e: f8:d6:fa:0a:03:53:7c:22:31:1f:46:59:53:02:22:42:5d:a4: a8:2e:70:0e:5c:b7:3d:02:a4:37:86:ef:f7:a1:c4:4f:c8:b2: 56:be:d0:73:04:5e:59:10:b9:1b:93:9b:64:f7:51:f7:e8:2d: 56:72:05:ce:9e:3a:1a:30:42:41:1c:d1:e6:75:dc:8a:01:9f: cf:bc:a2:b5:a8:91:e1:b1:80:4e:f8:6d:6b:6b:45:31:64:f3: 3e:f1:fd:10:f0:07:b7:c5:83:41:01:1d:9f:27:c6:20:a0:c8: 3e:d5:d1:27:85:89:35:27:9c:42:a9:a5:42:78:40:ba:a3:d1: 1c:86:3e:2d:67:b6:be:53:ec:34:a6:9c:bc:2c:95:ce:1d:e9: fd:6c:50:37:2e:b8:75:21:46:9b:18:7b:33:e5:d8:21:20:82: 43:11:ae:8d:b7:05:ef:dc:2c:5a:67:f2:5d:11:f1:05:a3:d7: 67:ae:97:8d:07:51:54:3e:f2:df:26:f5:76:83:88:2c:89:a2: f1:53:0f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPKzDW3vFkRw0lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk MDM5NmE2YTAtYzkyZS00MWRlLTk2NzgtYmE2YzAyZDhmYzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHGiC9eMAJLCuBbUHgyBGO4uJgWixTka1/xb hxMmqQY3hfw/r1k+nEqJhX9KKBd9h9S7WbXFPsmHPPlrJAqiSh7pT1NeJAzY5twD NqvxBfj+iu6j6oiq1ysiYV1J9j8EHTdazD+3YVOQqfbrEpwvnyFa9KKuxPUhvjQY k9S1SCOKuYXvEJqFEI0NhUunCMK1coHnsYBRd5+yld+nY64XZIkN/b07KgobQPQ1 vrkvI4Rchkyy/ioIrh4HF0rAoONZCukR3ujKDs+GtwLw5VVh7zY8BkBprV4Y+C9l I5tUAmSORWI1hLx2IQJWP1FY1nS6ZTCatkyWBOVQ2lQ2G7zsfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1NIJPkqeislTjAOyNkhMui20pcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZjMDQ0MjgtMTI2Zi0z MDA2LWE5ODgtZjgwNmYxYmM4MjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASSv5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoHERhPIG0QrHFiVjuUClHnZ92FIk2FVeLMQ3ycQIb+MTU1GfnhDpzO ClRZ9sAEwQE40b4bHvjW+goDU3wiMR9GWVMCIkJdpKgucA5ctz0CpDeG7/ehxE/I sla+0HMEXlkQuRuTm2T3UffoLVZyBc6eOhowQkEc0eZ13IoBn8+8orWokeGxgE74 bWtrRTFk8z7x/RDwB7fFg0EBHZ8nxiCgyD7V0SeFiTUnnEKppUJ4QLqj0RyGPi1n tr5T7DSmnLwslc4d6f1sUDcuuHUhRpsYezPl2CEggkMRro23Be/cLFpn8l0R8QWj 12eul40HUVQ+8t8m9XaDiCyJovFTD70= -----END CERTIFICATE-----Generated at Mon Apr 7 10:09:50 2025 by rpki-client