$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a99d472-4851-3a99-b48e-fb5165530a24.roa File: 7a99d472-4851-3a99-b48e-fb5165530a24.roa (raw, json) Hash identifier: Hm7zmkth9lGgm60euNcm5Ds/Io7GdLuSmB4kLfSyIdY= Subject key identifier: E7:AD:B4:47:53:F8:86:12:5E:3A:56:CA:EA:61:D9:01:97:06:B6:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF19D5CEA7FB8DD3316880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a99d472-4851-3a99-b48e-fb5165530a24.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 73.233.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:19:d5:ce:a7:fb:8d:d3:31:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=fa7559a0-1840-4d46-9c8d-64d2da182e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ef:9e:fd:00:fa:86:92:01:24:35:6e:b8:78: de:cc:48:13:f1:47:2a:8c:8f:09:9c:12:60:fa:cf: 44:4b:32:26:4f:38:de:12:c3:dd:71:79:44:21:04: ee:b9:f3:f1:e7:2e:43:67:e4:53:1b:62:bf:c8:af: c9:40:8b:40:32:4e:9b:cb:19:72:e3:44:4a:d6:93: 3b:14:11:30:7b:07:60:73:09:85:26:f2:0b:9d:2b: 7a:d4:96:f4:d0:64:70:70:47:c7:9c:9c:4c:33:0b: dd:26:a5:06:41:13:52:d3:0b:22:01:b9:e8:6e:80: c9:bd:fd:b4:74:1f:52:59:f8:46:37:d2:14:9b:63: 61:ef:f8:21:b2:23:8a:72:5d:3c:a8:82:a2:89:b9: b6:44:8f:47:95:79:52:1a:98:c7:71:37:47:b1:fd: 91:9b:d3:d4:c7:9a:e8:aa:6f:a6:88:1f:f7:44:36: 93:ca:be:90:59:d8:44:a6:8c:58:19:0c:ae:b3:7a: 33:cd:c8:81:38:9e:0c:ed:c3:3f:df:ac:0a:a0:24: 51:30:40:ee:91:a2:40:40:f7:0f:22:6f:ec:df:ff: 68:a7:a1:ba:05:9c:41:ca:ad:f8:4e:04:49:f3:46: 15:84:31:69:e2:c8:d6:5b:00:c9:6d:5a:8d:c9:51: 6d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AD:B4:47:53:F8:86:12:5E:3A:56:CA:EA:61:D9:01:97:06:B6:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a99d472-4851-3a99-b48e-fb5165530a24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.233.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ef:fb:48:6b:2d:b4:a2:fb:a0:4a:9d:05:9d:e6:0b:8d:bc: 13:47:8e:89:ab:e3:09:fc:e4:71:6f:78:ee:90:f4:ff:e3:43: 8d:f2:b5:a2:4e:7d:46:5b:8f:74:24:cf:ea:59:63:5b:ac:d4: 9d:b9:c4:ed:2f:dc:7a:eb:45:72:37:18:fd:08:55:81:08:04: 2e:b5:db:21:c6:92:a0:38:45:43:17:58:42:97:55:0b:f2:19: e3:1a:c6:82:7e:64:8b:8e:67:bd:7a:4c:31:12:6f:3b:17:95: c4:8b:26:f7:23:8d:be:f2:d7:40:7f:70:03:b5:92:5d:f0:08: 76:b2:14:37:48:05:7f:63:d5:43:4a:3b:40:74:64:45:96:a6: dc:d5:ca:c1:63:47:ee:52:98:4d:96:46:70:76:d3:67:04:09: 24:25:11:eb:a9:ab:f2:e3:06:ab:e8:b1:1d:56:54:8c:f5:e9: 04:c1:4b:97:6d:bc:e1:91:ea:02:aa:00:6e:c2:41:e9:15:8a: c1:9c:c4:07:9a:74:7a:99:6d:6b:be:8b:be:f1:cd:6e:5b:29: a4:55:39:e1:e2:5e:0c:02:b8:65:80:4d:a6:7f:56:a3:45:49: 04:1c:15:4e:b9:34:bd:92:39:a2:f5:6b:bc:d5:87:4a:16:28: 8a:cb:8f:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrxnVzqf7jdMxaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZmE3NTU5YTAtMTg0MC00ZDQ2LTljOGQtNjRkMmRhMTgyZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO+e/QD6hpIBJDVuuHjezEgT8UcqjI8JnBJg +s9ESzImTzjeEsPdcXlEIQTuufPx5y5DZ+RTG2K/yK/JQItAMk6byxly40RK1pM7 FBEwewdgcwmFJvILnSt61Jb00GRwcEfHnJxMMwvdJqUGQRNS0wsiAbnoboDJvf20 dB9SWfhGN9IUm2Nh7/ghsiOKcl08qIKiibm2RI9HlXlSGpjHcTdHsf2Rm9PUx5ro qm+miB/3RDaTyr6QWdhEpoxYGQyus3ozzciBOJ4M7cM/36wKoCRRMEDukaJAQPcP Im/s3/9op6G6BZxByq34TgRJ80YVhDFp4sjWWwDJbVqNyVFtvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOettEdT+IYSXjpWyuph2QGXBrY4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2E5OWQ0NzItNDg1MS0z YTk5LWI0OGUtZmI1MTY1NTMwYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSel4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3v+0hrLbSi+6BKnQWd5guNvBNHjomr4wn85HFveO6Q9P/jQ43ytaJO fUZbj3Qkz+pZY1us1J25xO0v3HrrRXI3GP0IVYEIBC612yHGkqA4RUMXWEKXVQvy GeMaxoJ+ZIuOZ716TDESbzsXlcSLJvcjjb7y10B/cAO1kl3wCHayFDdIBX9j1UNK O0B0ZEWWptzVysFjR+5SmE2WRnB202cECSQlEeupq/LjBqvosR1WVIz16QTBS5dt vOGR6gKqAG7CQekVisGcxAeadHqZbWu+i77xzW5bKaRVOeHiXgwCuGWATaZ/VqNF SQQcFU65NL2SOaL1a7zVh0oWKIrLj+k= -----END CERTIFICATE-----Generated at Sun Apr 6 17:11:23 2025 by rpki-client