$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20baf9e9-e4a0-3521-abaa-b69f0a15addd.roa File: 20baf9e9-e4a0-3521-abaa-b69f0a15addd.roa (raw, json) Hash identifier: kRHC+gzm9gfXN/zU12A5RkcMaXvKhZLuDOp0ffU8FJc= Subject key identifier: E2:B8:3F:E7:3C:FD:0B:C7:73:D2:2E:7D:90:AB:AA:39:83:30:22:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF18756E6DEE6C81AEAC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20baf9e9-e4a0-3521-abaa-b69f0a15addd.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 73.194.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:18:75:6e:6d:ee:6c:81:ae:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=2045e3af-b719-42b1-b916-20d3c09f25fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:90:23:c5:78:99:53:79:5b:7a:08:18:c0:f1: c4:02:87:a7:98:41:4b:ad:55:29:15:7e:98:dd:c4: 5f:fa:b1:80:16:64:6f:81:8c:29:42:b8:6b:01:6a: 46:55:9b:69:44:15:2c:73:c6:90:9d:cd:2c:0d:69: ea:ac:ce:a1:38:da:02:1a:f4:12:cc:e1:5f:6e:1d: 31:a2:14:7c:be:49:2d:01:08:1b:15:2a:4e:91:f3: a5:28:ef:32:3e:26:83:e7:c2:f3:a9:46:52:0f:cb: 41:da:ee:4f:3a:26:4e:6f:6b:5c:b3:b1:d4:d1:95: 83:2e:de:11:89:d2:96:82:4a:15:b0:3e:0a:51:a8: ef:3c:0f:ce:e2:54:69:bc:f7:26:c8:6b:f5:f7:b5: e9:e5:e7:36:63:a6:a9:d0:71:bc:c7:a3:db:8d:84: f2:b3:7f:ec:be:d7:18:c7:a2:f1:d7:fd:3a:6b:87: 9f:c9:91:31:a6:a4:74:00:99:a8:25:1a:e2:c3:31: 0b:0d:be:e6:53:b5:41:18:16:7b:70:0c:3c:8f:98: 80:e9:df:79:9e:97:82:dc:3a:df:40:eb:e7:5b:f7: e3:4d:f8:2d:99:98:91:14:4c:9d:66:32:b9:fa:d4: 6d:52:db:a6:d4:ce:62:4d:7d:1a:2b:ee:c9:42:00: 6a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B8:3F:E7:3C:FD:0B:C7:73:D2:2E:7D:90:AB:AA:39:83:30:22:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20baf9e9-e4a0-3521-abaa-b69f0a15addd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.194.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:27:0f:86:cb:ee:51:76:3d:15:59:37:fd:59:fe:c1:8b:4c: 4a:d7:cf:2e:1e:b6:d6:76:00:0f:da:47:fa:d4:1d:db:f6:ec: 47:f5:99:d3:ad:d5:bc:d4:7f:60:49:83:ce:5b:76:7b:c3:c9: a8:18:99:c4:5a:3f:6a:77:98:fa:91:1a:4d:eb:8c:73:82:7f: d8:81:70:5f:64:af:a9:b6:a2:9c:ec:a6:e4:76:9e:33:e0:ba: 11:5d:99:f2:c3:22:27:ce:6d:8f:f9:6f:d8:ab:c3:0a:87:77: 3a:d3:f3:43:d2:42:e8:43:02:e7:c9:c6:72:d9:41:7c:ed:12: 54:ba:3c:43:1a:88:e8:40:0d:90:78:61:62:b4:2d:be:bc:85: 83:8d:cd:2a:53:eb:a6:69:62:e8:5f:f5:0c:fd:af:ac:38:78: e2:c5:c4:f3:cd:4e:e6:41:8e:fa:c2:50:c0:e7:88:59:e2:1d: 32:4d:c7:8e:e8:f7:82:ea:52:59:a6:9b:5b:95:46:43:0b:95: f1:21:ac:a3:f3:8f:ca:ae:c6:4a:e2:e1:18:cd:51:50:25:7e: 9b:cd:0e:d9:6f:a7:b4:ba:59:4e:bf:09:71:4c:c2:8e:80:05: 24:0e:c6:b0:f7:71:6e:5f:21:b8:89:65:1d:4c:39:cb:d6:a8: ee:e4:fe:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrxh1bm3ubIGurAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MjA0NWUzYWYtYjcxOS00MmIxLWI5MTYtMjBkM2MwOWYyNWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JAjxXiZU3lbeggYwPHEAoenmEFLrVUpFX6Y 3cRf+rGAFmRvgYwpQrhrAWpGVZtpRBUsc8aQnc0sDWnqrM6hONoCGvQSzOFfbh0x ohR8vkktAQgbFSpOkfOlKO8yPiaD58LzqUZSD8tB2u5POiZOb2tcs7HU0ZWDLt4R idKWgkoVsD4KUajvPA/O4lRpvPcmyGv197Xp5ec2Y6ap0HG8x6PbjYTys3/svtcY x6Lx1/06a4efyZExpqR0AJmoJRriwzELDb7mU7VBGBZ7cAw8j5iA6d95npeC3Drf QOvnW/fjTfgtmZiRFEydZjK5+tRtUtum1M5iTX0aK+7JQgBqkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOK4P+c8/QvHc9IufZCrqjmDMCL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBiYWY5ZTktZTRhMC0z NTIxLWFiYWEtYjY5ZjBhMTVhZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScKOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcnD4bL7lF2PRVZN/1Z/sGLTErXzy4ettZ2AA/aR/rUHdv27Ef1mdOt 1bzUf2BJg85bdnvDyagYmcRaP2p3mPqRGk3rjHOCf9iBcF9kr6m2opzspuR2njPg uhFdmfLDIifObY/5b9irwwqHdzrT80PSQuhDAufJxnLZQXztElS6PEMaiOhADZB4 YWK0Lb68hYONzSpT66ZpYuhf9Qz9r6w4eOLFxPPNTuZBjvrCUMDniFniHTJNx47o 94LqUlmmm1uVRkMLlfEhrKPzj8quxkri4RjNUVAlfpvNDtlvp7S6WU6/CXFMwo6A BSQOxrD3cW5fIbiJZR1MOcvWqO7k/p4= -----END CERTIFICATE-----Generated at Sat Apr 12 18:41:59 2025 by rpki-client