$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7e7736-d1d3-3674-b13a-3457a8467a2a.roa File: 8a7e7736-d1d3-3674-b13a-3457a8467a2a.roa (raw, json) Hash identifier: +iUb8pzFJ4WmQ4+ZFJlk0TtmV5AoQ5mvgifj/MioZmg= Subject key identifier: 60:78:6F:98:F1:AD:67:4D:51:E9:AF:19:F1:D4:3F:B0:D9:A8:3D:13 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F716AEAD2E071C45A17140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7e7736-d1d3-3674-b13a-3457a8467a2a.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 73.123.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:16:ae:ad:2e:07:1c:45:a1:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=3570b680-0e15-4378-8d1b-f92a737b9075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:f6:6a:93:02:f9:4e:85:32:c7:6f:85:27: 90:c4:c6:05:b2:95:ba:f4:7f:54:99:52:3e:77:60: 53:fe:fc:64:ff:45:c3:9f:3f:43:dc:26:2c:62:fa: 5b:59:0b:0e:d8:86:f3:13:f5:30:7e:88:84:59:e0: a0:51:da:ab:8a:1f:e5:23:c3:d1:18:35:80:aa:2f: d2:36:09:fe:31:77:9c:b1:5f:c0:4d:7a:97:e3:86: 9d:05:9e:f5:c7:92:a5:be:42:f7:eb:34:42:bc:a6: 1f:62:c0:32:d0:f7:27:ae:48:5a:3e:35:58:ef:c2: 5a:4a:d5:05:fe:6b:df:a4:9e:d1:ce:ae:01:ac:53: 8e:9f:f7:03:af:6e:30:cc:9d:72:1e:7f:05:ff:63: 77:59:6b:a9:72:d2:9b:4b:bc:b9:1b:ac:f6:13:78: f1:8a:c1:e1:3c:3e:5d:ba:1f:49:19:6b:13:91:9a: 39:76:dc:f4:36:e4:90:42:b9:ce:d1:92:98:a6:98: 78:f1:ba:b8:90:99:77:57:d7:58:3c:34:da:13:d1: 17:63:16:76:14:a7:34:82:4a:ad:3a:5b:5d:4a:f7: 58:42:af:88:a3:81:8e:2f:6a:9d:31:ec:4a:6c:7e: 8e:94:32:28:3f:ef:4b:55:44:91:de:ea:b4:55:2f: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:78:6F:98:F1:AD:67:4D:51:E9:AF:19:F1:D4:3F:B0:D9:A8:3D:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7e7736-d1d3-3674-b13a-3457a8467a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.123.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:43:05:0e:3d:b6:4a:95:74:8d:9a:5e:45:76:b9:0d:f4:4e: 2b:ab:c6:66:57:25:74:5d:ae:c0:93:64:84:3c:da:73:55:f2: dc:1a:fc:94:2c:90:2c:56:b9:eb:54:8c:27:8c:8e:14:ad:6e: c6:df:82:24:0e:b5:a2:d1:94:1d:14:bb:68:ef:45:f2:e5:9f: 1a:b2:5b:fe:1e:51:54:2a:b4:51:ee:81:a8:d7:43:ad:33:17: 6d:11:d0:5e:15:89:48:d8:d0:99:4e:4f:f8:89:bc:ec:fb:88: 0d:aa:02:50:9d:43:31:d3:40:3e:37:61:75:10:16:93:f7:cd: 7e:6a:7b:b0:00:17:52:1d:19:bd:52:56:09:57:84:f8:ba:37: 06:17:f6:3e:48:b0:a4:c5:c4:c4:40:22:f8:22:2f:4f:1f:0d: ee:b5:f1:2c:86:22:0f:dc:f8:4b:6e:01:74:97:d1:45:ed:4d: b9:bb:ae:ad:1d:f6:d3:e1:0f:6b:e4:51:78:39:14:c5:0b:e4: f2:7f:d0:da:0d:4f:af:54:bb:be:59:18:49:fc:a5:5f:03:a6: 2a:7c:82:92:a6:34:b6:7c:57:9a:98:ad:1e:b1:a6:35:e5:51: 3e:64:5f:cb:71:37:63:a8:36:cb:ea:a9:67:b1:81:ce:c8:d8: df:7c:25:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09xaurS4HHEWhcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MzU3MGI2ODAtMGUxNS00Mzc4LThkMWItZjkyYTczN2I5MDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymv2apMC+U6FMsdvhSeQxMYFspW69H9UmVI+ d2BT/vxk/0XDnz9D3CYsYvpbWQsO2IbzE/UwfoiEWeCgUdqrih/lI8PRGDWAqi/S Ngn+MXecsV/ATXqX44adBZ71x5KlvkL36zRCvKYfYsAy0PcnrkhaPjVY78JaStUF /mvfpJ7Rzq4BrFOOn/cDr24wzJ1yHn8F/2N3WWupctKbS7y5G6z2E3jxisHhPD5d uh9JGWsTkZo5dtz0NuSQQrnO0ZKYpph48bq4kJl3V9dYPDTaE9EXYxZ2FKc0gkqt OltdSvdYQq+Io4GOL2qdMexKbH6OlDIoP+9LVUSR3uq0VS9gawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB4b5jxrWdNUemvGfHUP7DZqD0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE3ZTc3MzYtZDFkMy0z Njc0LWIxM2EtMzQ1N2E4NDY3YTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFDBQ49tkqVdI2aXkV2uQ30TiurxmZXJXRdrsCTZIQ82nNV8twa/JQs kCxWuetUjCeMjhStbsbfgiQOtaLRlB0Uu2jvRfLlnxqyW/4eUVQqtFHugajXQ60z F20R0F4ViUjY0JlOT/iJvOz7iA2qAlCdQzHTQD43YXUQFpP3zX5qe7AAF1IdGb1S VglXhPi6NwYX9j5IsKTFxMRAIvgiL08fDe618SyGIg/c+EtuAXSX0UXtTbm7rq0d 9tPhD2vkUXg5FMUL5PJ/0NoNT69Uu75ZGEn8pV8Dpip8gpKmNLZ8V5qYrR6xpjXl UT5kX8txN2OoNsvqqWexgc7I2N98JQo= -----END CERTIFICATE-----Generated at Sun Apr 6 09:48:55 2025 by rpki-client