$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20e6815a-9c32-3f36-92df-5dfd8bce4a7d.roa File: 20e6815a-9c32-3f36-92df-5dfd8bce4a7d.roa (raw, json) Hash identifier: +WrOrU1ArR6E0Oit1KkSOV9WWUzIEvFYY1zsAswBIsY= Subject key identifier: 14:EE:C5:8A:20:15:EF:A3:14:CA:5F:97:47:21:A1:07:C5:DC:8D:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F22C3AD7A7E67B9FD9BD6480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20e6815a-9c32-3f36-92df-5dfd8bce4a7d.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 22258 IP address blocks: 73.203.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:3a:d7:a7:e6:7b:9f:d9:bd:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=f50158f2-e67d-4875-a94e-f7712f864345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cd:c2:36:40:9e:1b:45:18:57:8e:72:c6:c8: b5:08:02:48:b2:45:e1:1e:d1:3d:b5:05:4f:76:32: 22:73:b6:15:b6:b0:fa:c6:c7:86:3f:4c:e9:d6:56: 8c:53:03:db:3c:d6:a0:55:23:fd:11:54:a6:f3:30: 6d:bd:61:df:8f:f0:89:72:76:20:bb:f8:42:1d:43: 58:c0:74:6c:00:e5:dc:8b:e9:e4:ac:25:ab:ae:f4: 03:d3:cd:10:9b:0d:94:1f:b6:c6:fb:38:30:91:ba: 70:f4:e3:15:b3:ea:b5:bb:17:6c:f5:11:f9:e7:ff: 57:95:4e:88:33:97:01:69:74:cd:24:a5:6a:d7:38: 92:5b:ea:1c:02:f5:f1:25:4e:66:a3:56:c5:03:d4: 46:c8:04:0c:c1:3e:61:2f:5d:3c:86:7e:24:37:72: 80:b6:a3:dd:75:27:98:4b:bb:d7:7e:c4:69:da:14: 1a:1b:7a:ee:9f:0e:9e:d3:e2:f7:13:45:da:3c:75: 8f:60:b2:7f:c9:d9:0a:99:28:c0:09:99:70:81:99: 16:63:cc:de:3d:66:67:42:56:3e:a9:be:50:de:50: d1:bf:a9:77:cb:84:d5:ed:1e:5f:f1:5c:c1:62:a6: 46:b5:87:20:63:c4:7f:32:34:20:5c:5a:dd:f6:47: a1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EE:C5:8A:20:15:EF:A3:14:CA:5F:97:47:21:A1:07:C5:DC:8D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20e6815a-9c32-3f36-92df-5dfd8bce4a7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.203.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:5e:bb:d5:fd:db:78:32:77:0a:3a:ac:e6:c2:db:8d:02:c3: 85:04:96:b6:bd:f4:41:c0:03:8a:cd:1d:9e:9e:ed:01:1a:26: 1a:be:e8:17:2a:78:1b:04:46:44:cb:99:16:2b:42:d6:9f:43: af:31:cf:eb:cf:b5:ae:ee:62:49:5c:60:32:78:0b:4c:7a:51: e3:83:e0:84:4f:fb:79:aa:cb:54:ef:ed:f7:33:2e:8a:8b:d4: d1:fd:22:5b:91:26:6d:c1:2a:3e:24:2a:48:6d:9c:47:97:a1: 60:1a:54:cb:fe:86:2d:4a:ee:46:26:6a:bf:04:87:51:0e:46: 94:d7:73:2d:ca:01:3e:44:08:b7:dc:b4:d8:f0:b4:6f:18:e1: 59:a4:8f:f4:c1:5e:bc:95:5a:08:31:b5:61:a1:d1:6d:04:f2: 58:db:f9:41:de:2d:b8:86:33:7b:8a:78:0e:c7:19:89:94:88: 0d:40:a2:af:9c:f1:13:c9:9f:a0:7f:c9:3e:ff:4d:ca:f5:92: 06:2d:83:a5:bf:b5:3f:62:b1:f3:eb:aa:49:d7:4a:93:0e:a3: 3e:d5:53:71:9b:52:3a:00:8e:da:e2:fd:73:0f:e8:24:05:a5: e6:86:a8:0a:d5:c9:ba:83:82:de:ff:b0:46:45:ab:64:6e:ef: a3:0d:48:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLDrXp+Z7n9m9ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjUwMTU4ZjItZTY3ZC00ODc1LWE5NGUtZjc3MTJmODY0MzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc3CNkCeG0UYV45yxsi1CAJIskXhHtE9tQVP djIic7YVtrD6xseGP0zp1laMUwPbPNagVSP9EVSm8zBtvWHfj/CJcnYgu/hCHUNY wHRsAOXci+nkrCWrrvQD080Qmw2UH7bG+zgwkbpw9OMVs+q1uxds9RH55/9XlU6I M5cBaXTNJKVq1ziSW+ocAvXxJU5mo1bFA9RGyAQMwT5hL108hn4kN3KAtqPddSeY S7vXfsRp2hQaG3runw6e0+L3E0XaPHWPYLJ/ydkKmSjACZlwgZkWY8zePWZnQlY+ qb5Q3lDRv6l3y4TV7R5f8VzBYqZGtYcgY8R/MjQgXFrd9keh6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTuxYogFe+jFMpfl0choQfF3I1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBlNjgxNWEtOWMzMi0z ZjM2LTkyZGYtNWRmZDhiY2U0YTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAScvJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNeu9X923gydwo6rObC240Cw4UElra99EHAA4rNHZ6e7QEaJhq+6Bcq eBsERkTLmRYrQtafQ68xz+vPta7uYklcYDJ4C0x6UeOD4IRP+3mqy1Tv7fczLoqL 1NH9IluRJm3BKj4kKkhtnEeXoWAaVMv+hi1K7kYmar8Eh1EORpTXcy3KAT5ECLfc tNjwtG8Y4Vmkj/TBXryVWggxtWGh0W0E8ljb+UHeLbiGM3uKeA7HGYmUiA1Aoq+c 8RPJn6B/yT7/Tcr1kgYtg6W/tT9isfPrqknXSpMOoz7VU3GbUjoAjtri/XMP6CQF peaGqArVybqDgt7/sEZFq2Ru76MNSKc= -----END CERTIFICATE-----Generated at Mon Apr 7 06:05:30 2025 by rpki-client