$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a9d4486-5e37-350c-b1a0-0a78bc9329e2.roa File: 9a9d4486-5e37-350c-b1a0-0a78bc9329e2.roa (raw, json) Hash identifier: TmZSCMM1tG0zjVsR+sbBMfuSOgCF60f9D8jZpIuN09k= Subject key identifier: 08:0E:3D:51:69:46:A2:85:37:7F:02:E6:70:0E:23:22:4A:FD:88:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F74AB6AA5F5A1A3BB9BF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a9d4486-5e37-350c-b1a0-0a78bc9329e2.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 73.4.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:4a:b6:aa:5f:5a:1a:3b:b9:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=4aedc7cd-74fd-44c1-8eec-56b1443521f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d7:47:f4:5a:ad:a3:c2:07:04:87:d4:da:b6: 46:2a:25:87:ae:15:ed:91:13:bc:bc:92:73:d3:43: d2:cb:2c:e1:3c:e6:ac:27:a6:3e:cd:12:f2:e1:e0: 9b:36:ff:7c:94:01:87:9c:65:c4:ba:71:b5:69:25: 28:dc:f5:e1:78:75:ed:86:c3:d0:af:2b:06:1f:d8: fb:d7:4e:ae:eb:f5:f0:7f:15:b3:85:29:a3:41:b2: a9:6f:d0:34:fd:66:ae:09:48:c3:98:d2:88:87:97: dd:db:90:6e:41:d4:46:57:9a:61:92:49:8b:68:be: bd:81:43:2b:ea:59:6a:53:b5:79:f3:92:cd:e9:5d: d0:01:62:39:09:56:d9:ef:e0:7f:12:44:a5:de:dd: f2:19:a1:82:ed:c5:d4:56:23:e3:8f:2c:d5:9f:05: 46:dc:c5:71:41:49:ca:b5:a9:da:a1:e6:4e:3c:e8: ed:32:b6:a1:3d:b7:2c:57:f1:0f:50:50:85:ab:eb: 7f:55:ba:cd:0e:c1:84:4c:54:31:28:36:e5:c7:36: 5d:35:ef:d6:98:b2:7e:7e:f4:ef:47:f5:0c:38:0d: 98:41:ab:c2:b8:77:1e:f4:e1:8f:3f:a4:2f:03:83: 51:ea:ad:81:e8:37:5d:ff:c3:ce:0b:86:4c:a3:d0: 50:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0E:3D:51:69:46:A2:85:37:7F:02:E6:70:0E:23:22:4A:FD:88:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a9d4486-5e37-350c-b1a0-0a78bc9329e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.4.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a2:d4:75:11:a5:60:cf:4e:35:a2:20:bb:51:26:2c:38:45: b0:34:af:40:ab:96:ba:88:3f:ca:bb:28:b1:58:ab:88:d9:95: e3:2c:e8:e0:71:30:fd:a3:38:1e:58:01:3f:4d:8f:65:e4:21: 6a:cc:55:5c:10:91:01:74:56:28:c6:a8:c8:2e:97:f3:cd:41: 24:a6:ed:e6:7e:46:da:e0:3f:64:c1:8b:f6:6b:4d:7b:b6:64: 81:71:7e:02:d3:43:3a:57:78:e3:e9:6b:d4:38:52:27:b5:c1: 21:00:ff:8a:94:95:66:85:e6:c3:98:e8:22:21:ed:a0:8c:55: a7:e2:67:1e:ac:8b:c2:16:4e:c1:ea:22:2a:92:95:24:18:47: 7f:90:5e:13:37:25:75:d7:d9:47:38:61:c1:58:04:31:62:3a: 90:a6:9f:f9:5f:d6:6a:92:2a:10:00:2a:f5:34:25:c5:aa:a0: 00:11:f3:e0:36:9d:31:02:95:5c:e4:90:48:a4:25:c9:d8:2e: df:0b:26:46:82:1c:14:6e:e4:b6:41:91:2f:82:9a:8a:8e:3d: 6d:cf:c4:70:a2:aa:5e:a3:6a:74:1c:7f:23:46:9c:89:f6:b2: 3a:ba:9d:ee:dd:2d:9d:1e:bf:6c:21:80:7f:db:22:e5:e6:fa: e5:72:74:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj090q2ql9aGju5v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NGFlZGM3Y2QtNzRmZC00NGMxLThlZWMtNTZiMTQ0MzUyMWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNdH9Fqto8IHBIfU2rZGKiWHrhXtkRO8vJJz 00PSyyzhPOasJ6Y+zRLy4eCbNv98lAGHnGXEunG1aSUo3PXheHXthsPQrysGH9j7 106u6/XwfxWzhSmjQbKpb9A0/WauCUjDmNKIh5fd25BuQdRGV5phkkmLaL69gUMr 6llqU7V585LN6V3QAWI5CVbZ7+B/EkSl3t3yGaGC7cXUViPjjyzVnwVG3MVxQUnK tanaoeZOPOjtMrahPbcsV/EPUFCFq+t/VbrNDsGETFQxKDblxzZdNe/WmLJ+fvTv R/UMOA2YQavCuHce9OGPP6QvA4NR6q2B6Ddd/8POC4ZMo9BQNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgOPVFpRqKFN38C5nAOIyJK/YhMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWE5ZDQ0ODYtNWUzNy0z NTBjLWIxYTAtMGE3OGJjOTMyOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSQSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKi1HURpWDPTjWiILtRJiw4RbA0r0CrlrqIP8q7KLFYq4jZleMs6OBx MP2jOB5YAT9Nj2XkIWrMVVwQkQF0VijGqMgul/PNQSSm7eZ+RtrgP2TBi/ZrTXu2 ZIFxfgLTQzpXeOPpa9Q4Uie1wSEA/4qUlWaF5sOY6CIh7aCMVafiZx6si8IWTsHq IiqSlSQYR3+QXhM3JXXX2Uc4YcFYBDFiOpCmn/lf1mqSKhAAKvU0JcWqoAAR8+A2 nTEClVzkkEikJcnYLt8LJkaCHBRu5LZBkS+CmoqOPW3PxHCiql6janQcfyNGnIn2 sjq6ne7dLZ0ev2whgH/bIuXm+uVydGk= -----END CERTIFICATE-----Generated at Wed Apr 9 19:35:49 2025 by rpki-client