$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42e83b04-77a7-3889-a6ce-ced3de657c19.roa File: 42e83b04-77a7-3889-a6ce-ced3de657c19.roa (raw, json) Hash identifier: 7NUt8NSmUj918syQZ+rcMjeKlPg0upe9G6H06T2g64I= Subject key identifier: A5:EC:30:70:D4:D2:09:7D:EB:25:A9:1C:55:52:74:9A:D0:DB:05:6E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB066BA40BA4A401F52DBA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42e83b04-77a7-3889-a6ce-ced3de657c19.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 73.195.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:66:ba:40:ba:4a:40:1f:52:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=0f8ff334-9f79-4b0d-a666-6c4de5a8e5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3a:2a:26:36:b1:1d:57:9d:f5:39:4f:1e:b9: 42:c3:90:ff:41:1a:ae:c3:1e:cf:08:57:1c:5f:1c: 8c:3c:4d:41:18:86:87:96:df:48:4e:d7:79:3f:13: 6e:b9:cb:7b:72:4e:5c:14:64:64:bf:b9:91:02:17: 37:db:ed:49:97:55:17:9c:b5:91:80:19:21:de:01: e8:65:0c:31:81:2d:86:49:cb:86:f6:39:0b:f0:5d: d0:57:ec:07:41:49:af:b2:e8:92:36:74:0f:2c:53: 38:4d:cb:83:e5:e9:d1:c5:c5:fc:03:2a:37:dd:aa: b6:d4:4d:69:23:db:ac:14:e6:4a:af:d6:c8:07:c1: 6c:b9:3b:fc:55:07:c8:b1:5c:8f:c0:90:b4:36:e9: 5d:cd:2c:c7:ab:bd:49:0a:8c:1e:d0:c8:8c:af:0e: 3e:8c:47:08:9e:42:fe:61:a5:9e:b3:2d:d5:4c:ac: dd:97:88:61:07:7c:e2:65:28:d5:5f:21:a1:b6:18: ed:32:65:63:59:fa:15:f9:e9:6f:c4:81:e6:68:28: 2e:10:d6:3f:f7:f8:bc:64:b5:32:40:c4:f8:26:8c: b2:7d:93:e7:94:83:26:e6:99:9a:ff:a4:94:bb:d9: 51:9a:47:d8:94:bf:ff:de:f3:d6:3e:62:30:34:ce: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EC:30:70:D4:D2:09:7D:EB:25:A9:1C:55:52:74:9A:D0:DB:05:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42e83b04-77a7-3889-a6ce-ced3de657c19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.195.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:74:fd:83:cb:86:d9:2f:fb:65:f1:49:f1:c4:8e:5c:2b:c1: 9d:d4:44:35:68:a6:c1:9d:81:9d:42:91:64:81:16:17:5f:42: 78:17:af:d3:f1:9b:eb:4f:fc:d2:42:5b:64:33:66:7b:1d:a2: ef:63:66:35:f9:ee:8c:77:02:98:c8:36:80:d5:f7:4b:a7:ad: 49:23:9b:b3:c2:c5:95:e0:d5:69:f7:9d:7c:6b:d9:49:dc:96: 76:ba:0a:1b:7c:1c:52:53:55:54:f8:34:50:58:37:d7:b1:b1: da:e8:28:34:93:f1:32:ce:3e:e1:7d:7e:5e:6a:af:de:4c:ef: 87:96:2e:1a:13:4c:97:b5:72:0d:51:cb:4a:1a:61:4a:fa:60: 49:ff:6c:a5:d4:17:7d:ea:b8:ca:ef:2f:ca:ad:d5:4c:7b:b2: f8:75:8a:ca:af:bc:15:7b:ff:9d:5d:7f:46:e6:4a:f6:b7:a3: 04:a5:3e:f4:db:b3:77:0e:41:91:ba:b5:43:c5:7f:46:53:02: 98:3c:b7:79:a5:dd:19:ae:3c:82:82:90:0c:c9:4f:29:7c:2f: 4f:0f:03:ba:3d:c3:2c:ca:a0:86:68:4c:be:8f:46:ed:02:ff: 32:51:9c:b0:66:05:68:d8:0c:cd:d3:a5:49:6f:c4:9d:9e:40: 30:2f:16:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssGa6QLpKQB9S26AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MGY4ZmYzMzQtOWY3OS00YjBkLWE2NjYtNmM0ZGU1YThlNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjoqJjaxHVed9TlPHrlCw5D/QRquwx7PCFcc XxyMPE1BGIaHlt9ITtd5PxNuuct7ck5cFGRkv7mRAhc32+1Jl1UXnLWRgBkh3gHo ZQwxgS2GScuG9jkL8F3QV+wHQUmvsuiSNnQPLFM4TcuD5enRxcX8Ayo33aq21E1p I9usFOZKr9bIB8FsuTv8VQfIsVyPwJC0NuldzSzHq71JCowe0MiMrw4+jEcInkL+ YaWesy3VTKzdl4hhB3ziZSjVXyGhthjtMmVjWfoV+elvxIHmaCguENY/9/i8ZLUy QMT4JoyyfZPnlIMm5pma/6SUu9lRmkfYlL//3vPWPmIwNM5oJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXsMHDU0gl96yWpHFVSdJrQ2wVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDJlODNiMDQtNzdhNy0z ODg5LWE2Y2UtY2VkM2RlNjU3YzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB10/YPLhtkv+2XxSfHEjlwrwZ3URDVopsGdgZ1CkWSBFhdfQngXr9Px m+tP/NJCW2QzZnsdou9jZjX57ox3ApjINoDV90unrUkjm7PCxZXg1Wn3nXxr2Unc lna6Cht8HFJTVVT4NFBYN9exsdroKDST8TLOPuF9fl5qr95M74eWLhoTTJe1cg1R y0oaYUr6YEn/bKXUF33quMrvL8qt1Ux7svh1isqvvBV7/51df0bmSva3owSlPvTb s3cOQZG6tUPFf0ZTApg8t3ml3RmuPIKCkAzJTyl8L08PA7o9wyzKoIZoTL6PRu0C /zJRnLBmBWjYDM3TpUlvxJ2eQDAvFnU= -----END CERTIFICATE-----Generated at Sun Apr 6 17:06:15 2025 by rpki-client