$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3d0d7c7-ca49-3bcd-ba32-14a1ffcc6a24.roa File: b3d0d7c7-ca49-3bcd-ba32-14a1ffcc6a24.roa (raw, json) Hash identifier: z2uBXaLRJfUJ1cIPBkMvOmrrGMypMuEmiEgu1KsNLP4= Subject key identifier: AA:DE:72:27:37:F8:87:6C:DF:19:5F:DD:9F:3D:E4:25:11:7D:11:70 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB07426A4B0D60BE589A7C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3d0d7c7-ca49-3bcd-ba32-14a1ffcc6a24.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 73.226.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:74:26:a4:b0:d6:0b:e5:89:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=4c39212c-53bd-4946-a586-f28680aa5f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3a:0e:c0:cf:48:33:a5:e2:b9:50:61:6a:bc: 5b:4c:f1:65:62:cc:f4:a4:d4:6d:f7:69:78:af:cf: 4a:fa:d4:48:d8:52:ee:98:84:3c:60:d6:d0:58:1f: f0:96:6d:63:62:33:f7:c8:1a:22:b6:87:23:5e:2b: 9d:d0:ca:e2:5d:52:9b:58:26:8f:f9:c1:03:e2:b0: 49:fb:f0:cd:cc:79:e1:3b:60:4f:ee:f2:c4:ce:fd: 6d:7e:78:85:96:6f:e1:12:76:12:eb:3b:1c:31:63: ef:c9:79:c7:0a:81:0e:5e:90:86:51:74:e1:62:00: 84:0d:72:80:52:20:90:a4:5f:7a:b7:b0:d6:ca:9b: b2:7d:fc:29:2c:ea:a8:89:27:9d:50:1c:3d:23:b6: 10:4a:47:d1:68:4f:44:ca:2c:cd:87:35:b7:54:25: a4:81:d1:35:c9:97:0e:79:0a:d4:8c:66:9d:b3:b4: 36:57:95:9d:2d:aa:8b:29:07:fe:ec:13:41:cf:ae: a1:b6:74:9b:77:ad:18:8f:b8:6d:06:27:16:8a:77: 38:76:1c:ed:ba:30:1b:ea:83:f6:3e:48:c1:04:9e: 46:fe:e5:4e:3d:fc:32:ae:a4:bc:69:48:8f:15:26: bf:1b:34:e8:22:57:09:fa:b4:e6:6b:5f:7d:88:40: 9f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DE:72:27:37:F8:87:6C:DF:19:5F:DD:9F:3D:E4:25:11:7D:11:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3d0d7c7-ca49-3bcd-ba32-14a1ffcc6a24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.226.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:7f:51:ad:9e:50:1f:30:01:05:cc:d9:3e:f6:eb:53:a2:28: 09:53:24:60:6c:24:21:95:20:37:61:bc:33:48:d3:38:b3:fc: 15:a9:5e:55:48:75:68:f3:de:9c:0d:66:47:eb:ff:82:b4:17: 89:5d:ae:8b:80:28:89:40:e2:0e:5b:3a:49:1b:dc:df:03:49: fc:96:d1:17:a7:ce:1f:80:b4:1b:18:7c:85:83:86:ec:17:e4: dc:b9:a9:3b:09:1c:27:a9:9a:a0:cb:e0:35:6e:a7:6e:f6:fd: ca:e6:91:c3:0c:bd:6b:3c:af:91:b0:04:85:9c:f4:c2:b5:b2: 4b:f0:df:21:57:22:e0:e6:33:cc:b9:38:14:32:22:73:84:e6: e2:25:0b:5c:f4:35:8a:50:7c:2b:d0:72:39:2a:19:44:c5:a0: d5:89:1d:e5:ad:51:8e:ae:9c:fb:ff:4c:d7:25:9a:2a:03:0b: 2c:f4:18:35:b9:b4:a5:db:2d:da:ac:97:c1:0a:ed:8b:f7:91: 8f:f2:c7:98:d4:01:e0:c8:98:90:fb:2b:fb:51:33:7e:54:f3: 57:7c:43:2e:4c:22:e0:42:b0:c6:60:a4:1b:b3:78:37:ef:6f: 5b:e1:23:70:21:58:1f:e2:0e:f7:c3:f3:db:9f:9f:2b:0d:df: 17:a8:54:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssHQmpLDWC+WJp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NGMzOTIxMmMtNTNiZC00OTQ2LWE1ODYtZjI4NjgwYWE1ZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizoOwM9IM6XiuVBharxbTPFlYsz0pNRt92l4 r89K+tRI2FLumIQ8YNbQWB/wlm1jYjP3yBoitocjXiud0MriXVKbWCaP+cED4rBJ +/DNzHnhO2BP7vLEzv1tfniFlm/hEnYS6zscMWPvyXnHCoEOXpCGUXThYgCEDXKA UiCQpF96t7DWypuyffwpLOqoiSedUBw9I7YQSkfRaE9EyizNhzW3VCWkgdE1yZcO eQrUjGads7Q2V5WdLaqLKQf+7BNBz66htnSbd60Yj7htBicWinc4dhztujAb6oP2 PkjBBJ5G/uVOPfwyrqS8aUiPFSa/GzToIlcJ+rTma199iECfgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrecic3+Ids3xlf3Z895CURfRFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjNkMGQ3YzctY2E0OS0z YmNkLWJhMzItMTRhMWZmY2M2YTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeL+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKF/Ua2eUB8wAQXM2T7261OiKAlTJGBsJCGVIDdhvDNI0ziz/BWpXlVI dWjz3pwNZkfr/4K0F4ldrouAKIlA4g5bOkkb3N8DSfyW0Renzh+AtBsYfIWDhuwX 5Ny5qTsJHCepmqDL4DVup272/crmkcMMvWs8r5GwBIWc9MK1skvw3yFXIuDmM8y5 OBQyInOE5uIlC1z0NYpQfCvQcjkqGUTFoNWJHeWtUY6unPv/TNclmioDCyz0GDW5 tKXbLdqsl8EK7Yv3kY/yx5jUAeDImJD7K/tRM35U81d8Qy5MIuBCsMZgpBuzeDfv b1vhI3AhWB/iDvfD89ufnysN3xeoVOc= -----END CERTIFICATE-----Generated at Sun Apr 6 22:55:34 2025 by rpki-client