$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0443f4db-db09-3703-81c0-7157f2d5c5f7.roa File: 0443f4db-db09-3703-81c0-7157f2d5c5f7.roa (raw, json) Hash identifier: mSK3WgTsaQ+Ash/a6OyxAOHA15LA2+dSN0vZlP/vrAg= Subject key identifier: CA:D0:42:23:D9:B5:7D:D8:7E:3C:D9:DE:DC:29:90:FF:B8:BB:06:A2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0F18C4008F13E9FE5C080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0443f4db-db09-3703-81c0-7157f2d5c5f7.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 73.168.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:f1:8c:40:08:f1:3e:9f:e5:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=89892142-e8cf-4b15-8d1f-6ef59371fd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:6d:fa:f2:78:ef:00:bc:2e:d8:77:79:d3: 4a:d5:b3:c3:9c:a6:fb:37:d5:94:7b:90:e5:7d:55: 8e:c7:27:12:1a:a7:f1:42:f8:2f:d0:7e:30:6b:b9: 02:f1:0b:c2:c6:16:e1:dd:b2:ca:35:fe:e6:65:cf: 34:69:39:98:b6:a4:d9:45:da:17:50:70:49:45:0e: 83:66:03:d8:c8:41:66:62:7b:9d:96:75:67:50:94: 6e:ad:34:f3:63:c8:35:42:72:e9:4c:b0:d0:3e:be: 37:de:99:d8:e3:84:16:8a:13:90:2e:a4:2e:bc:5e: e1:3e:c4:8e:0f:e7:62:64:59:13:08:01:c5:d0:a9: 1f:03:14:87:94:d5:b4:d5:8a:0d:aa:36:4c:c5:f5: fe:3d:4b:aa:4b:75:de:1e:a3:f1:db:8b:43:bf:d0: ec:e7:7b:12:7e:de:ef:d4:38:fe:50:88:19:4a:1e: 13:20:ee:42:0d:f8:9c:3d:55:46:2f:df:43:05:41: 1c:fe:57:1d:ec:50:4b:3d:b8:ed:8d:3a:6d:ad:60: 20:d4:48:63:20:a6:b1:e7:13:11:ab:8d:31:98:cd: e9:8d:a4:08:df:0a:9c:90:24:93:c3:f0:b7:1b:a0: c6:d3:65:d4:ec:c0:fa:01:fb:e4:33:10:1c:c0:62: de:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D0:42:23:D9:B5:7D:D8:7E:3C:D9:DE:DC:29:90:FF:B8:BB:06:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0443f4db-db09-3703-81c0-7157f2d5c5f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.168.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:0e:dd:12:f7:4e:77:1a:20:fd:28:36:f6:d9:31:ce:84:dd: 8b:1d:c9:13:bf:de:44:c8:c8:e3:e8:32:30:a9:cf:49:a0:c6: 65:ac:17:94:43:e6:7d:bd:24:a3:4a:12:af:d3:c4:1f:0d:15: 75:20:92:01:f5:87:1d:3d:0f:14:e0:2f:f8:f6:d2:65:e6:83: fb:ae:d1:63:c8:04:b5:1d:5d:37:32:c1:ff:f2:73:33:c9:f9: b9:b5:32:1b:db:b9:2f:df:d6:c3:6c:3d:28:e8:61:9c:14:52: c3:e9:d0:9b:bd:6d:43:0e:b7:91:35:f9:d4:d3:6c:3d:9d:14: 17:bb:1b:7d:17:76:04:33:9b:29:87:20:ea:23:2e:e6:7f:f3: ea:22:ca:0d:82:56:26:f4:b1:a3:d8:6d:64:d4:76:ad:0f:9f: d3:7a:fc:79:1b:e2:bf:84:54:87:c1:f4:17:94:17:70:f7:28: a1:34:9f:df:9c:29:18:a9:1a:cd:6d:86:15:53:f1:9d:ee:a5: 57:e3:1e:be:3b:15:e6:b7:91:fc:50:2d:27:7c:50:07:26:1f: be:a6:de:07:b0:da:b4:e6:f2:64:96:db:29:16:7a:77:8f:11: 5e:c4:1d:a3:3a:12:d8:14:3a:63:30:b8:e2:36:57:51:00:8a: ea:cb:ca:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssPGMQAjxPp/lwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODk4OTIxNDItZThjZi00YjE1LThkMWYtNmVmNTkzNzFmZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArght+vJ47wC8Lth3edNK1bPDnKb7N9WUe5Dl fVWOxycSGqfxQvgv0H4wa7kC8QvCxhbh3bLKNf7mZc80aTmYtqTZRdoXUHBJRQ6D ZgPYyEFmYnudlnVnUJRurTTzY8g1QnLpTLDQPr433pnY44QWihOQLqQuvF7hPsSO D+diZFkTCAHF0KkfAxSHlNW01YoNqjZMxfX+PUuqS3XeHqPx24tDv9Ds53sSft7v 1Dj+UIgZSh4TIO5CDficPVVGL99DBUEc/lcd7FBLPbjtjTptrWAg1EhjIKax5xMR q40xmM3pjaQI3wqckCSTw/C3G6DG02XU7MD6AfvkMxAcwGLeMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrQQiPZtX3YfjzZ3twpkP+4uwaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDQ0M2Y0ZGItZGIwOS0z NzAzLTgxYzAtNzE1N2YyZDVjNWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSahyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALYO3RL3TncaIP0oNvbZMc6E3YsdyRO/3kTIyOPoMjCpz0mgxmWsF5RD 5n29JKNKEq/TxB8NFXUgkgH1hx09DxTgL/j20mXmg/uu0WPIBLUdXTcywf/yczPJ +bm1MhvbuS/f1sNsPSjoYZwUUsPp0Ju9bUMOt5E1+dTTbD2dFBe7G30XdgQzmymH IOojLuZ/8+oiyg2CVib0saPYbWTUdq0Pn9N6/Hkb4r+EVIfB9BeUF3D3KKE0n9+c KRipGs1thhVT8Z3upVfjHr47Fea3kfxQLSd8UAcmH76m3gew2rTm8mSW2ykWeneP EV7EHaM6EtgUOmMwuOI2V1EAiurLyjA= -----END CERTIFICATE-----Generated at Mon Apr 7 05:46:48 2025 by rpki-client