$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e4f509d-3a79-3b50-8a15-e5c8eec1fb01.roa File: 3e4f509d-3a79-3b50-8a15-e5c8eec1fb01.roa (raw, json) Hash identifier: 8CrBaHjJK9B0gj8Wi15p+YcLaW8yPrpTg3nEF16znHE= Subject key identifier: 8E:56:EF:B3:69:00:8E:79:8D:6A:15:BC:B2:F9:60:AE:AD:13:50:4D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D1656C72457877A5F42FFC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e4f509d-3a79-3b50-8a15-e5c8eec1fb01.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 22258 IP address blocks: 73.59.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:6c:72:45:78:77:a5:f4:2f:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=0d99301f-a9aa-41fa-94cf-c02fdf7dc777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0a:cb:f0:5c:e6:84:b4:c0:7c:d4:f1:33:b0: d3:44:69:20:6e:8f:57:80:1d:85:d9:e1:ef:71:41: 5b:d4:6f:9f:31:4a:ed:7b:96:9a:a3:d4:52:bf:d6: 59:09:15:09:cb:02:05:91:79:ab:db:12:63:ca:fd: ab:87:4a:31:f2:a6:c6:9d:f7:e7:06:4d:4f:b9:71: f3:88:74:6f:88:af:b3:5c:64:b9:d5:6f:4e:6b:40: 43:59:9d:60:3d:d7:25:00:c1:47:90:8b:e3:3d:12: d4:6d:ba:ff:9d:dc:f9:20:23:b9:c5:79:94:a6:b0: 44:05:69:c1:4c:8c:0b:5e:f5:fd:e6:02:52:8e:22: 5f:be:fb:7f:be:32:fa:d2:cf:b9:ad:69:38:af:db: e3:4d:d7:da:64:eb:c1:a4:16:d5:a2:46:90:70:80: 18:97:28:8c:09:4a:cc:3f:06:a6:56:aa:f0:70:e5: e9:75:41:97:69:10:72:96:64:44:e5:c3:16:8a:10: 77:43:b9:32:4b:6a:d0:92:56:3e:e6:57:05:8d:7f: 8e:a5:93:5d:22:83:5b:b4:e9:1c:6a:7b:da:75:96: 97:b9:d7:21:28:f1:78:79:f5:66:98:ac:c5:d4:67: d6:3c:5d:9a:a2:9b:14:5c:5f:07:c3:d1:93:45:ab: 71:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:56:EF:B3:69:00:8E:79:8D:6A:15:BC:B2:F9:60:AE:AD:13:50:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e4f509d-3a79-3b50-8a15-e5c8eec1fb01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.59.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:4a:7a:3b:8f:5f:50:6e:b9:97:45:c4:32:93:8d:d9:d9:71: 07:1c:66:2c:52:d0:d7:ad:17:ef:a6:42:26:48:ba:d2:0d:30: 92:e1:66:fa:64:85:aa:68:14:c0:a5:cc:65:21:36:79:c9:ca: c1:2c:c2:19:28:aa:4d:46:d6:3b:f5:48:59:30:83:b5:fb:81: 58:28:c6:98:4b:24:dd:31:05:59:cd:3f:ae:a6:59:f2:d8:75: 1d:28:f4:3e:90:59:97:19:37:85:b8:b2:58:0d:ea:88:b4:d6: ca:4f:e5:1a:d3:da:cc:09:c0:b1:cd:6e:af:4d:82:3d:59:e5: 9b:4c:26:f6:45:b2:89:f4:31:87:83:10:8a:ff:a5:14:4c:e5: 42:1e:a9:87:91:dc:a7:56:3a:ba:a1:f5:fb:06:37:7c:47:24: bf:6b:0c:7d:08:6b:0c:6c:6d:f9:ad:01:36:0d:4d:a4:5c:b9: 20:44:32:5e:39:6b:d1:0d:95:95:e0:c3:fe:68:5b:11:d8:ad: 06:55:45:6a:eb:59:2d:4e:7c:7d:d0:66:54:69:23:e9:f7:87: e5:fa:b9:ac:a1:d1:86:a7:de:fe:ba:88:23:b2:bb:38:71:69: 21:a6:b6:b7:79:89:04:6f:fa:7a:45:0b:88:96:03:ff:eb:f4: 6b:7a:69:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZWxyRXh3pfQv/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MGQ5OTMwMWYtYTlhYS00MWZhLTk0Y2YtYzAyZmRmN2RjNzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoArL8FzmhLTAfNTxM7DTRGkgbo9XgB2F2eHv cUFb1G+fMUrte5aao9RSv9ZZCRUJywIFkXmr2xJjyv2rh0ox8qbGnffnBk1PuXHz iHRviK+zXGS51W9Oa0BDWZ1gPdclAMFHkIvjPRLUbbr/ndz5ICO5xXmUprBEBWnB TIwLXvX95gJSjiJfvvt/vjL60s+5rWk4r9vjTdfaZOvBpBbVokaQcIAYlyiMCUrM PwamVqrwcOXpdUGXaRBylmRE5cMWihB3Q7kyS2rQklY+5lcFjX+OpZNdIoNbtOkc anvadZaXudchKPF4efVmmKzF1GfWPF2aopsUXF8Hw9GTRatxrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5W77NpAI55jWoVvLL5YK6tE1BNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2U0ZjUwOWQtM2E3OS0z YjUwLThhMTUtZTVjOGVlYzFmYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSTuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJKejuPX1BuuZdFxDKTjdnZcQccZixS0NetF++mQiZIutINMJLhZvpk hapoFMClzGUhNnnJysEswhkoqk1G1jv1SFkwg7X7gVgoxphLJN0xBVnNP66mWfLY dR0o9D6QWZcZN4W4slgN6oi01spP5RrT2swJwLHNbq9Ngj1Z5ZtMJvZFson0MYeD EIr/pRRM5UIeqYeR3KdWOrqh9fsGN3xHJL9rDH0IawxsbfmtATYNTaRcuSBEMl45 a9ENlZXgw/5oWxHYrQZVRWrrWS1OfH3QZlRpI+n3h+X6uayh0Yan3v66iCOyuzhx aSGmtrd5iQRv+npFC4iWA//r9Gt6aZg= -----END CERTIFICATE-----Generated at Tue Jun 3 05:01:38 2025 by rpki-client