$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0649910f-aaf9-33b8-8e79-0209f7111361.roa File: 0649910f-aaf9-33b8-8e79-0209f7111361.roa (raw, json) Hash identifier: 1bYR8eT4cLQsWAFrWtH8xUEmOXo0R0b0FLNKH28bpKI= Subject key identifier: BD:FF:9A:51:C4:8A:CC:6B:D2:D9:BD:95:77:A1:04:56:8F:B3:CD:5D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CFC67985A99D065E18D48 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0649910f-aaf9-33b8-8e79-0209f7111361.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 73.120.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:fc:67:98:5a:99:d0:65:e1:8d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=7b43118b-de7e-488a-a0ff-9e9345d77537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:92:d5:24:34:cc:d3:e8:d4:57:f0:df:fd:36: 9e:83:78:fe:96:0f:64:96:46:8f:09:18:d5:10:b7: 00:3d:6d:b8:d5:ef:10:bb:ec:a0:3c:40:20:6f:66: 58:47:72:4f:f2:ea:55:ed:51:62:b3:4e:09:46:91: 19:4b:d3:55:47:47:13:7a:2b:98:9c:a0:a5:52:78: f9:6a:d8:16:4d:45:1b:a2:3e:2a:8f:87:9a:0d:e6: ee:80:07:d9:db:8a:04:a5:64:1c:9a:ab:85:b7:28: 1f:70:68:fd:9e:7d:3a:60:c3:fb:16:e6:cd:7e:d5: 69:b8:d7:1d:2f:4a:5a:4c:a9:35:bd:6c:de:99:7d: 77:4c:fd:2b:75:0e:a7:36:ae:e5:c3:77:3f:56:2e: 95:32:25:81:c2:3b:91:e8:9a:49:14:fd:c0:fe:f4: 6b:81:dd:d7:52:4a:38:04:3b:b5:1c:40:f9:86:02: 44:9d:3e:e6:06:03:08:38:24:8b:6a:bc:70:3b:59: e3:d5:a5:f9:74:64:a9:61:73:02:09:e1:ec:04:18: cd:64:89:59:94:e8:6f:fa:ab:33:98:a8:b9:36:ba: 03:d3:a4:ac:51:34:4a:0b:b7:57:7a:87:fd:72:94: 6e:8a:41:1c:ad:d7:d3:e7:51:dd:cb:12:f0:51:64: ac:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FF:9A:51:C4:8A:CC:6B:D2:D9:BD:95:77:A1:04:56:8F:B3:CD:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0649910f-aaf9-33b8-8e79-0209f7111361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.120.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:3e:dc:70:e7:9f:07:5a:11:57:0c:d5:0b:b2:f0:e6:8f:90: cc:fe:1f:a7:05:77:71:8d:08:5e:d1:10:cc:ad:05:6e:d7:38: dc:cb:da:87:41:75:e0:6c:b7:79:20:fa:bf:f1:2b:4c:ec:a0: 12:62:c6:59:6b:d1:32:05:eb:14:4c:60:b3:85:f3:49:d7:48: 3b:39:a2:ca:ab:53:30:a2:89:c4:b1:61:60:d6:b9:33:3a:f7: 10:6c:23:d8:1f:3c:15:22:dc:c6:9b:ac:be:08:95:a8:9a:4f: 0e:05:32:ef:43:bf:7b:53:5e:1c:19:50:b5:58:93:03:c0:d0: 70:db:06:38:ba:4e:b9:58:62:27:77:01:5e:b2:33:07:b2:e2: 99:b4:d8:cc:25:33:17:79:53:01:f1:86:3d:2d:99:c2:3c:4c: 74:b1:c1:49:af:b7:10:32:25:c2:d3:2b:4a:d2:b0:7d:03:af: 0e:a5:b8:0e:c9:8f:a5:0d:a9:48:17:cc:47:cd:e9:fa:e6:d4: e8:49:40:4a:92:b1:e5:59:55:fa:62:85:90:04:37:ee:87:f9: 36:4b:53:0b:bf:96:51:da:fb:e9:f9:27:10:ce:0c:a4:46:d2: 83:86:5c:c0:28:ec:44:d4:c4:91:e9:46:9b:d4:66:e2:74:c7: 19:7a:6d:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebPxnmFqZ0GXhjUgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk N2I0MzExOGItZGU3ZS00ODhhLWEwZmYtOWU5MzQ1ZDc3NTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZLVJDTM0+jUV/Df/Taeg3j+lg9klkaPCRjV ELcAPW241e8Qu+ygPEAgb2ZYR3JP8upV7VFis04JRpEZS9NVR0cTeiuYnKClUnj5 atgWTUUboj4qj4eaDebugAfZ24oEpWQcmquFtygfcGj9nn06YMP7FubNftVpuNcd L0paTKk1vWzemX13TP0rdQ6nNq7lw3c/Vi6VMiWBwjuR6JpJFP3A/vRrgd3XUko4 BDu1HED5hgJEnT7mBgMIOCSLarxwO1nj1aX5dGSpYXMCCeHsBBjNZIlZlOhv+qsz mKi5NroD06SsUTRKC7dXeof9cpRuikEcrdfT51HdyxLwUWSs6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3/mlHEisxr0tm9lXehBFaPs81dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDY0OTkxMGYtYWFmOS0z M2I4LThlNzktMDIwOWY3MTExMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSXh8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs+3HDnnwdaEVcM1Quy8OaPkMz+H6cFd3GNCF7REMytBW7XONzL2odB deBst3kg+r/xK0zsoBJixllr0TIF6xRMYLOF80nXSDs5osqrUzCiicSxYWDWuTM6 9xBsI9gfPBUi3MabrL4IlaiaTw4FMu9Dv3tTXhwZULVYkwPA0HDbBji6TrlYYid3 AV6yMwey4pm02MwlMxd5UwHxhj0tmcI8THSxwUmvtxAyJcLTK0rSsH0Drw6luA7J j6UNqUgXzEfN6frm1OhJQEqSseVZVfpihZAEN+6H+TZLUwu/llHa++n5JxDODKRG 0oOGXMAo7ETUxJHpRpvUZuJ0xxl6bbs= -----END CERTIFICATE-----Generated at Mon Apr 7 06:21:43 2025 by rpki-client