$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d91220c-551c-3dbc-95c8-e69c42302f53.roa File: 3d91220c-551c-3dbc-95c8-e69c42302f53.roa (raw, json) Hash identifier: 8HgbD63/Cln3Wo450wMU0eW94L0GVXoX9Y6Ew6s2BQI= Subject key identifier: AF:97:4C:4B:5D:F5:88:64:0B:2E:44:4B:BD:AF:B8:5D:0F:FF:AF:DA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF75E50A1FF5E8439AE40E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d91220c-551c-3dbc-95c8-e69c42302f53.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 33659 IP address blocks: 73.198.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:e5:0a:1f:f5:e8:43:9a:e4:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=c990cb75-e26b-4a7a-975c-5978756e94ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:65:4e:ad:4a:b5:7a:16:26:bf:24:1b:78:88: d2:ff:80:03:16:bf:e7:84:26:f9:5c:10:ff:94:fd: e8:d5:f1:85:e4:ea:eb:10:c6:70:23:34:68:39:26: 05:1d:4b:e8:d6:b7:84:60:31:a0:e5:22:4c:09:df: 61:d6:ff:28:cf:6f:19:4f:56:7a:e5:65:09:02:18: 45:43:ef:70:6a:12:2c:d9:f3:9d:c4:a9:a7:4e:e7: e1:30:0a:69:63:63:c5:13:ea:f1:79:3a:66:7b:0b: 02:e7:89:17:b5:82:29:0a:5a:29:6c:03:43:cf:a4: 7f:0d:c0:66:ae:80:be:76:5f:d2:68:a5:f6:20:9b: 64:4f:c3:b1:ff:2a:00:2f:5e:9f:ea:c3:a8:d2:d0: 2d:d0:f3:5f:e6:f5:de:34:d9:86:91:7e:ea:a6:be: a2:bd:33:bb:64:f8:ad:cf:62:80:33:c3:6b:47:94: 19:cd:e5:b8:1e:22:41:a0:e0:48:78:07:2c:8f:87: 67:37:7b:ea:00:fc:14:0d:29:85:54:83:1a:06:ed: c4:d9:11:7a:d0:8f:eb:88:1e:64:f4:ac:83:14:14: 85:c5:7d:6b:5f:87:e1:bb:fe:e6:fe:53:79:11:89: de:ff:f5:cc:25:f3:be:79:0f:0b:0b:64:06:5a:c0: be:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:97:4C:4B:5D:F5:88:64:0B:2E:44:4B:BD:AF:B8:5D:0F:FF:AF:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d91220c-551c-3dbc-95c8-e69c42302f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.198.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a7:55:86:ce:74:32:11:1b:8f:ae:eb:d7:61:5c:95:f4:6e: f3:9e:9a:9a:76:47:36:c5:7b:08:3d:70:e6:f1:e5:03:76:56: d3:77:78:e3:da:32:45:83:e8:bb:32:89:52:21:65:69:96:da: 5c:c5:7e:81:ed:d9:e0:80:b3:18:94:ba:29:1c:dd:6d:6f:df: f3:53:d3:65:94:e5:26:03:34:1a:d0:c7:66:d7:e6:ab:33:58: eb:c3:c0:88:f4:97:f5:1e:ab:70:b0:9d:6a:56:c4:ab:39:80: 2a:d7:37:63:e1:82:08:a3:03:09:ce:3e:1c:ea:53:51:1d:c3: 95:61:4b:43:f6:1b:e5:12:6f:46:78:f9:5b:54:9f:3f:68:11: 79:f2:88:6d:24:92:d8:53:93:73:e0:7b:f9:cf:d1:3f:bb:52: 34:2a:f0:fb:b5:35:ca:a4:db:6a:b2:17:eb:a1:08:10:3f:c2: 7c:ed:df:a5:10:b2:e2:b6:09:d1:a7:64:16:9a:f0:5f:47:5c: a5:83:b9:b9:df:8f:ea:c3:fd:98:ae:d8:a8:00:8e:b4:a6:82: fb:a0:ee:84:9a:1d:de:e2:d4:bf:e6:08:ba:bb:cc:09:9b:89: 64:ce:a0:ec:ac:a3:c4:bf:08:39:59:da:2d:e9:dc:c4:0c:1d: 98:28:25:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/deUKH/XoQ5rkDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk Yzk5MGNiNzUtZTI2Yi00YTdhLTk3NWMtNTk3ODc1NmU5NGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGVOrUq1ehYmvyQbeIjS/4ADFr/nhCb5XBD/ lP3o1fGF5OrrEMZwIzRoOSYFHUvo1reEYDGg5SJMCd9h1v8oz28ZT1Z65WUJAhhF Q+9wahIs2fOdxKmnTufhMAppY2PFE+rxeTpmewsC54kXtYIpClopbANDz6R/DcBm roC+dl/SaKX2IJtkT8Ox/yoAL16f6sOo0tAt0PNf5vXeNNmGkX7qpr6ivTO7ZPit z2KAM8NrR5QZzeW4HiJBoOBIeAcsj4dnN3vqAPwUDSmFVIMaBu3E2RF60I/riB5k 9KyDFBSFxX1rX4fhu/7m/lN5EYne//XMJfO+eQ8LC2QGWsC+gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+XTEtd9YhkCy5ES72vuF0P/6/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Q5MTIyMGMtNTUxYy0z ZGJjLTk1YzgtZTY5YzQyMzAyZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScbCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAenVYbOdDIRG4+u69dhXJX0bvOempp2RzbFewg9cObx5QN2VtN3eOPa MkWD6LsyiVIhZWmW2lzFfoHt2eCAsxiUuikc3W1v3/NT02WU5SYDNBrQx2bX5qsz WOvDwIj0l/Ueq3CwnWpWxKs5gCrXN2PhggijAwnOPhzqU1Edw5VhS0P2G+USb0Z4 +VtUnz9oEXnyiG0kkthTk3Pge/nP0T+7UjQq8Pu1Ncqk22qyF+uhCBA/wnzt36UQ suK2CdGnZBaa8F9HXKWDubnfj+rD/Ziu2KgAjrSmgvug7oSaHd7i1L/mCLq7zAmb iWTOoOyso8S/CDlZ2i3p3MQMHZgoJWQ= -----END CERTIFICATE-----Generated at Tue Jun 3 04:57:54 2025 by rpki-client