$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8032e4e3-d53e-31a3-9bc7-181786d01c0d.roa File: 8032e4e3-d53e-31a3-9bc7-181786d01c0d.roa (raw, json) Hash identifier: lVXr3HS8aVUIODDbfSK1naQVDVbl9qVGXWrbdyh4W+I= Subject key identifier: 0C:8D:4D:30:CA:C6:78:90:F1:0D:7F:42:A7:01:BC:84:56:6C:0E:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB18AD9AAE601AE67C72600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8032e4e3-d53e-31a3-9bc7-181786d01c0d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 73.170.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:8a:d9:aa:e6:01:ae:67:c7:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=b220b1a8-17b8-4e0d-ac76-ef3b50c3f419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a7:23:d9:54:67:12:26:6a:40:ae:61:36:1b: ef:d2:40:bc:01:45:e1:b6:40:d4:30:c2:28:ee:c7: c7:52:7c:b4:a8:4c:61:c1:e6:43:57:26:50:d0:54: 59:e3:d8:d1:00:df:75:f1:56:c8:1f:fc:fd:ce:3c: 5f:86:0b:b3:21:ae:12:88:9a:97:41:0c:db:bb:d0: 56:7f:c6:95:86:af:94:86:94:35:7c:57:bb:63:d0: ff:87:f0:2c:dd:fe:7a:fd:d1:c8:b4:63:3f:a1:78: 63:d5:d6:4d:b0:84:e3:91:a3:13:90:ff:e0:ab:5a: c5:9a:6e:d2:2e:0e:3e:d9:c3:ad:e3:8c:c9:b7:2e: ba:6b:8a:a0:15:36:2d:9a:0e:65:31:42:d7:df:9c: 0c:7f:df:b5:98:58:67:71:b5:a9:e9:34:7b:68:df: 04:d1:02:3b:ec:5b:bc:97:c8:62:85:f1:e3:9a:af: 09:70:4c:de:1b:36:76:9e:da:cb:6a:87:d2:9c:46: 52:ce:94:b8:2a:12:70:dd:d4:56:d1:c5:4c:aa:67: 6f:28:bd:2a:8a:ee:99:8f:1c:64:31:4a:4c:17:84: b7:d7:81:e5:a9:c3:cc:c0:fd:e3:68:63:78:28:f1: ae:c2:1f:8e:7d:44:cf:c6:d2:3b:f2:db:83:00:11: 7b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8D:4D:30:CA:C6:78:90:F1:0D:7F:42:A7:01:BC:84:56:6C:0E:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8032e4e3-d53e-31a3-9bc7-181786d01c0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.170.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:4f:3c:df:a7:9a:72:c9:97:67:8e:c8:4b:60:ea:57:8d:eb: 3c:1e:e0:98:8c:21:a4:b8:85:65:16:cc:c4:e9:a2:92:97:55: e1:49:43:ba:83:ab:1c:d8:cb:b9:b0:fb:2f:26:9a:e7:f5:00: 53:a4:55:36:c8:16:a9:ba:e2:42:1b:b5:35:ab:1a:72:78:7a: d9:24:32:b4:18:91:df:aa:6c:5b:0e:31:ce:64:78:30:5f:90: af:22:53:5f:5e:26:ee:da:5c:87:e8:c5:04:d6:95:28:11:ae: 52:14:64:fb:82:f1:fe:32:78:6c:88:40:05:1b:bd:fd:32:0e: a5:1f:6f:10:fa:58:f1:f1:4e:02:af:82:89:4a:42:06:53:79: 59:ce:ce:04:98:95:45:ce:62:bf:e8:c1:d7:84:8f:b5:be:52: 95:91:ca:15:df:15:03:79:83:c6:06:b8:d9:ed:14:29:2f:71: ed:4a:c2:d6:d8:46:d9:94:41:bc:f1:30:e0:fc:2c:7c:6b:8a: 36:d4:c4:87:b1:73:f1:fc:fe:cb:4a:38:51:84:77:7c:03:84: 44:a5:1e:ec:68:7d:dc:27:9a:ed:c9:bb:84:b5:5d:e3:63:1d: 01:08:67:02:00:51:60:8a:8c:a6:f3:30:f8:43:50:4e:cb:fd: 74:95:b1:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssYrZquYBrmfHJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjIyMGIxYTgtMTdiOC00ZTBkLWFjNzYtZWYzYjUwYzNmNDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKcj2VRnEiZqQK5hNhvv0kC8AUXhtkDUMMIo 7sfHUny0qExhweZDVyZQ0FRZ49jRAN918VbIH/z9zjxfhguzIa4SiJqXQQzbu9BW f8aVhq+UhpQ1fFe7Y9D/h/As3f56/dHItGM/oXhj1dZNsITjkaMTkP/gq1rFmm7S Lg4+2cOt44zJty66a4qgFTYtmg5lMULX35wMf9+1mFhncbWp6TR7aN8E0QI77Fu8 l8hihfHjmq8JcEzeGzZ2ntrLaofSnEZSzpS4KhJw3dRW0cVMqmdvKL0qiu6Zjxxk MUpMF4S314HlqcPMwP3jaGN4KPGuwh+OfUTPxtI78tuDABF7KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyNTTDKxniQ8Q1/QqcBvIRWbA4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODAzMmU0ZTMtZDUzZS0z MWEzLTliYzctMTgxNzg2ZDAxYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASap6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRPPN+nmnLJl2eOyEtg6leN6zwe4JiMIaS4hWUWzMTpopKXVeFJQ7qD qxzYy7mw+y8mmuf1AFOkVTbIFqm64kIbtTWrGnJ4etkkMrQYkd+qbFsOMc5keDBf kK8iU19eJu7aXIfoxQTWlSgRrlIUZPuC8f4yeGyIQAUbvf0yDqUfbxD6WPHxTgKv golKQgZTeVnOzgSYlUXOYr/owdeEj7W+UpWRyhXfFQN5g8YGuNntFCkvce1KwtbY RtmUQbzxMOD8LHxrijbUxIexc/H8/stKOFGEd3wDhESlHuxofdwnmu3Ju4S1XeNj HQEIZwIAUWCKjKbzMPhDUE7L/XSVsbQ= -----END CERTIFICATE-----Generated at Sun Apr 27 12:50:00 2025 by rpki-client