$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af815171-6d33-3c44-ae1a-df61877078e7.roa File: af815171-6d33-3c44-ae1a-df61877078e7.roa (raw, json) Hash identifier: 9vVcsq7OTW+YXtfUyvzwFmcpuZqKUCBzWa+Up32+0+w= Subject key identifier: 17:E3:68:97:55:CF:B1:6C:F6:E6:EB:9D:70:B6:2B:EA:A7:3D:8F:1B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F22C394B5A46C6FAA9D47D20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af815171-6d33-3c44-ae1a-df61877078e7.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 22258 IP address blocks: 73.177.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:39:4b:5a:46:c6:fa:a9:d4:7d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=71c690aa-ec17-4bf7-a574-ec1dfab83c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:63:2b:ae:b6:18:87:31:e7:87:a7:d7:dc:1f: d7:fc:af:b9:16:82:ad:d8:a2:d6:19:f0:de:70:ab: 14:e5:4e:80:9a:26:29:db:c6:bb:a4:1b:3e:7f:a3: bb:8c:6f:fb:cc:99:10:76:a8:3a:48:3e:e0:86:44: c4:d5:42:3c:60:08:4e:bf:69:ee:60:f2:a5:11:26: 78:36:67:46:c1:e0:46:4a:98:0d:cd:45:c3:dd:e8: af:52:8d:13:95:78:e0:a8:60:c7:af:47:8c:ae:31: 3a:8f:96:53:d8:97:7e:bd:eb:e0:9c:c1:1e:42:d6: f8:98:8c:d2:39:b5:a8:51:a3:6d:a0:33:6f:27:f5: b7:36:19:76:51:c2:36:da:1c:f1:c6:4c:d3:59:17: 82:b1:51:5d:f1:21:bc:a4:4b:6e:42:14:dd:7b:05: 5e:05:a7:f3:cd:75:7f:8a:7d:f8:f5:97:d2:09:ab: db:03:0c:95:20:0a:97:3f:8d:94:2c:7b:a8:93:dc: 98:ab:21:c1:f9:45:96:48:21:aa:aa:bb:af:bb:77: dd:a4:bc:51:7e:03:ee:66:c8:9c:7a:4b:d4:a9:ef: a7:c9:ed:95:1d:db:a8:37:33:7e:cc:62:d0:38:a0: 2c:0f:41:05:92:40:07:a2:af:7e:e0:a5:ef:99:32: 97:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E3:68:97:55:CF:B1:6C:F6:E6:EB:9D:70:B6:2B:EA:A7:3D:8F:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af815171-6d33-3c44-ae1a-df61877078e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.177.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:41:96:50:53:01:54:e5:82:eb:75:e4:85:4b:5c:36:6e:ad: 9a:ca:a2:5e:30:3c:5d:e9:a4:95:29:46:23:46:46:1d:5d:11: 3f:7f:2c:ba:69:6a:61:8f:0e:8a:9d:f4:1e:ab:86:95:9e:c5: ad:5c:cc:c0:30:37:a2:70:10:4c:f0:60:6f:a0:b6:c8:aa:79: 70:bd:d8:42:52:a1:64:e6:f7:82:3b:ce:aa:a5:09:58:23:04: 8f:32:f5:86:cf:7b:97:77:b6:9d:a2:19:5c:d1:3e:bd:2e:4b: 07:fd:9d:ad:5d:c3:24:1f:bd:03:78:b2:24:bc:8e:71:68:a5: d5:5b:b4:37:6e:19:e9:32:c4:76:ce:ca:cf:48:a7:be:7e:43: 06:15:1b:a7:23:49:3f:8a:99:a9:ee:46:43:0b:62:b0:20:29: e5:3e:63:12:29:c4:15:de:e3:ef:59:de:2f:05:3b:31:cb:80: 7d:b4:7e:94:f2:37:9b:69:32:c5:c8:70:0d:ea:f1:51:b9:00: dc:1c:58:6d:66:67:9e:8c:7d:59:b4:08:7a:34:35:b6:f4:5f: b2:67:55:00:f4:7b:ec:54:65:de:a7:78:a7:9d:fd:56:88:dc: f9:e0:20:98:14:79:ed:04:43:4e:44:a4:b1:03:23:71:d9:a9: 39:3f:df:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLDlLWkbG+qnUfSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NzFjNjkwYWEtZWMxNy00YmY3LWE1NzQtZWMxZGZhYjgzYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2MrrrYYhzHnh6fX3B/X/K+5FoKt2KLWGfDe cKsU5U6AmiYp28a7pBs+f6O7jG/7zJkQdqg6SD7ghkTE1UI8YAhOv2nuYPKlESZ4 NmdGweBGSpgNzUXD3eivUo0TlXjgqGDHr0eMrjE6j5ZT2Jd+vevgnMEeQtb4mIzS ObWoUaNtoDNvJ/W3Nhl2UcI22hzxxkzTWReCsVFd8SG8pEtuQhTdewVeBafzzXV/ in349ZfSCavbAwyVIAqXP42ULHuok9yYqyHB+UWWSCGqqruvu3fdpLxRfgPuZsic ekvUqe+nye2VHduoNzN+zGLQOKAsD0EFkkAHoq9+4KXvmTKXxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfjaJdVz7Fs9ubrnXC2K+qnPY8bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY4MTUxNzEtNmQzMy0z YzQ0LWFlMWEtZGY2MTg3NzA3OGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSbEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5BllBTAVTlgut15IVLXDZurZrKol4wPF3ppJUpRiNGRh1dET9/LLpp amGPDoqd9B6rhpWexa1czMAwN6JwEEzwYG+gtsiqeXC92EJSoWTm94I7zqqlCVgj BI8y9YbPe5d3tp2iGVzRPr0uSwf9na1dwyQfvQN4siS8jnFopdVbtDduGekyxHbO ys9Ip75+QwYVG6cjST+KmanuRkMLYrAgKeU+YxIpxBXe4+9Z3i8FOzHLgH20fpTy N5tpMsXIcA3q8VG5ANwcWG1mZ56MfVm0CHo0Nbb0X7JnVQD0e+xUZd6neKed/VaI 3PngIJgUee0EQ05EpLEDI3HZqTk/31s= -----END CERTIFICATE-----Generated at Mon Apr 7 06:36:00 2025 by rpki-client