$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bc3401c-0f43-3a01-a038-c9be249900a7.roa File: 1bc3401c-0f43-3a01-a038-c9be249900a7.roa (raw, json) Hash identifier: qEWDhJpRPKNj8EbZIU8SWAKqeX8ZKP9K7/xlSFHCUbU= Subject key identifier: 9A:45:9F:94:12:2D:D7:DB:9D:4F:32:32:A0:5E:FC:2F:66:BE:3E:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8F9CE817CB29DDE7BDB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bc3401c-0f43-3a01-a038-c9be249900a7.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 73.161.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:f9:ce:81:7c:b2:9d:de:7b:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=9eeb3d6b-492e-480d-8724-16edd48c8ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:03:a0:38:47:d7:d7:aa:ec:13:4a:f8:74:92: df:f4:ff:d4:9c:97:52:d8:72:91:29:79:08:2b:c5: 22:0b:a2:54:ba:0e:57:c9:28:47:65:23:bc:c6:10: db:d8:65:3d:9f:11:de:22:b6:21:60:9e:6d:d9:bb: a5:2d:9e:12:6a:fd:61:43:8f:d0:40:75:80:99:62: ff:20:a6:ec:de:d0:e0:14:d8:24:e3:dd:8c:f0:2f: 4f:14:99:45:48:6f:3d:8f:ea:6f:29:8b:20:00:d8: 12:a1:79:50:67:d2:55:55:29:4d:43:a0:a1:3c:4e: a9:62:75:8c:1c:e1:33:50:af:fa:d7:f4:5a:6c:71: 17:28:69:93:51:bd:c9:fe:c4:17:04:32:ba:bc:bb: 34:2a:93:d4:da:4a:b8:23:16:8b:cf:36:8c:f1:62: db:1e:e4:80:7c:c1:7b:41:ee:4f:1e:31:1b:88:8d: 06:ef:79:11:c9:6f:4e:75:dd:ec:d1:a2:9f:f2:5f: 23:68:30:3d:81:b3:8d:41:79:a4:20:e7:9f:29:92: e1:df:40:b7:a7:db:e3:dd:e8:af:ff:d8:60:90:25: 2e:af:28:ba:5c:ae:f6:8c:23:5b:95:9a:c1:25:6a: d7:22:a5:ce:29:20:18:ff:97:2d:d9:b9:17:a3:29: 06:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:45:9F:94:12:2D:D7:DB:9D:4F:32:32:A0:5E:FC:2F:66:BE:3E:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bc3401c-0f43-3a01-a038-c9be249900a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b1:97:f8:16:f2:fd:d3:fb:c4:1c:e2:84:4c:65:4e:4d:97: d7:50:d8:46:49:69:09:ad:0d:dc:7e:0e:d3:fa:d1:54:1b:d3: 4f:32:6d:e4:77:62:dc:6d:33:aa:98:12:66:7a:d2:25:a5:f9: 9c:f7:a2:e0:5d:65:b9:99:de:cc:df:6e:1c:21:27:ce:5c:ec: 7f:e8:ba:f5:70:d2:d0:e1:2e:04:9c:1c:d4:59:d9:ee:ce:2d: 8c:30:4a:2b:41:f5:f9:fb:d6:77:36:c5:2f:7a:d4:55:99:fa: c4:c5:01:7b:50:09:28:70:28:5c:65:b5:a3:28:88:3f:47:50: 03:35:08:1d:b7:83:e8:62:19:f3:a6:e8:8c:9a:28:cc:b8:fa: 7f:65:95:0b:96:1a:e1:f5:d9:b4:a0:9a:98:5f:2e:29:29:56: 99:25:78:31:a9:c8:91:ac:82:eb:ea:01:90:85:a9:52:b3:a5: 29:fa:0c:ca:95:fc:5f:c2:89:b1:50:27:88:14:4b:02:da:83: a8:3e:09:4f:ad:b1:d8:f3:18:9c:0d:8d:aa:a6:84:4d:07:5f: 08:40:6c:fd:3d:5a:8f:79:57:66:93:02:8c:10:ea:5c:d2:2c: bd:81:ab:38:f4:4f:cb:07:ab:8b:cd:f8:46:00:d0:8d:fc:66: dd:10:ae:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+PnOgXyynd5724AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OWVlYjNkNmItNDkyZS00ODBkLTg3MjQtMTZlZGQ0OGM4ZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQOgOEfX16rsE0r4dJLf9P/UnJdS2HKRKXkI K8UiC6JUug5XyShHZSO8xhDb2GU9nxHeIrYhYJ5t2bulLZ4Sav1hQ4/QQHWAmWL/ IKbs3tDgFNgk492M8C9PFJlFSG89j+pvKYsgANgSoXlQZ9JVVSlNQ6ChPE6pYnWM HOEzUK/61/RabHEXKGmTUb3J/sQXBDK6vLs0KpPU2kq4IxaLzzaM8WLbHuSAfMF7 Qe5PHjEbiI0G73kRyW9Odd3s0aKf8l8jaDA9gbONQXmkIOefKZLh30C3p9vj3eiv /9hgkCUuryi6XK72jCNblZrBJWrXIqXOKSAY/5ct2bkXoykGVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpFn5QSLdfbnU8yMqBe/C9mvj5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWJjMzQwMWMtMGY0My0z YTAxLWEwMzgtYzliZTI0OTkwMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESxl/gW8v3T+8Qc4oRMZU5Nl9dQ2EZJaQmtDdx+DtP60VQb008ybeR3 YtxtM6qYEmZ60iWl+Zz3ouBdZbmZ3szfbhwhJ85c7H/ouvVw0tDhLgScHNRZ2e7O LYwwSitB9fn71nc2xS961FWZ+sTFAXtQCShwKFxltaMoiD9HUAM1CB23g+hiGfOm 6IyaKMy4+n9llQuWGuH12bSgmphfLikpVpkleDGpyJGsguvqAZCFqVKzpSn6DMqV /F/CibFQJ4gUSwLag6g+CU+tsdjzGJwNjaqmhE0HXwhAbP09Wo95V2aTAowQ6lzS LL2Bqzj0T8sHq4vN+EYA0I38Zt0QrjQ= -----END CERTIFICATE-----Generated at Mon Apr 7 05:52:23 2025 by rpki-client