$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8e7ec97-7ec4-34a4-86db-331a673e2d15.roa File: c8e7ec97-7ec4-34a4-86db-331a673e2d15.roa (raw, json) Hash identifier: R3c47ruxd+F8La7A899AqAYs9/gqe+8VAyrNasW1nPA= Subject key identifier: B3:34:D5:25:3D:75:59:10:CE:22:E5:FF:DB:CC:5F:9F:BB:C0:4D:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DC4899773CF903A6ADD40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8e7ec97-7ec4-34a4-86db-331a673e2d15.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 73.65.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:c4:89:97:73:cf:90:3a:6a:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=2a2f7f92-de31-449f-a51a-ddb063f18a91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cd:fe:c6:73:3f:05:5a:4f:c2:68:70:5c:de: 48:87:7d:9e:79:a2:8a:9d:98:84:9d:c1:f3:13:10: d6:93:6c:68:d4:bd:91:f7:00:92:07:30:48:ac:f7: 7f:a7:c3:34:0b:b6:59:2e:56:d8:93:ef:03:90:9a: 7e:e4:7b:81:31:44:1e:50:26:e2:6a:24:54:cb:33: 02:6f:31:e6:7b:f1:75:1f:dc:4e:7b:b0:87:15:17: f4:2f:c5:93:68:36:17:1e:c3:f0:57:f9:2d:b5:21: ff:b2:1c:dc:97:b4:00:6c:2b:71:46:a1:6f:2b:20: 38:48:9d:46:dd:16:01:14:93:7b:12:b8:d3:25:8c: ea:ee:0f:71:4e:86:27:51:91:cc:8e:57:0c:5d:eb: 0b:21:25:30:bd:41:5c:1f:d9:3b:16:71:7d:e9:86: 7e:99:d3:2c:3c:37:92:fe:18:da:60:db:54:1e:c9: 92:27:d1:f4:d0:84:65:18:7a:2d:d9:6f:17:a3:e9: d7:d1:5f:40:a9:6a:c6:42:b4:33:eb:a9:27:b8:f5: 35:08:0d:b3:d7:7b:ea:fd:70:a4:51:27:31:56:7e: 59:60:ee:ec:c9:b1:ff:26:fa:36:1b:f3:7f:67:53: 35:d2:de:ba:48:b4:6b:12:5f:b1:4e:df:85:b5:21: c3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:34:D5:25:3D:75:59:10:CE:22:E5:FF:DB:CC:5F:9F:BB:C0:4D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8e7ec97-7ec4-34a4-86db-331a673e2d15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.65.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:cc:29:89:16:0b:11:3a:32:0b:28:12:07:67:a6:9d:88:73: 64:d8:12:b4:0b:cb:96:d7:37:e5:0d:16:bf:46:fa:04:ac:0c: 9a:9e:fc:e9:d4:35:6c:3a:6a:73:c0:7d:39:d2:f6:5d:e2:52: 4d:cf:d9:bd:53:51:67:05:d2:3a:09:7a:2c:45:38:c9:05:15: 26:53:48:dc:6a:49:d3:c0:2b:8e:e9:4f:47:0d:1c:0e:1f:6f: 2e:97:06:ee:37:df:31:e1:b1:ed:5f:51:85:f2:40:da:9f:d7: b9:45:9e:4b:82:b3:5b:23:97:e7:73:74:cc:db:d7:5f:6e:d8: f0:24:55:8d:94:76:da:3a:a8:1d:c3:51:ad:b9:e8:15:2a:fe: fe:e6:84:8c:f5:3d:5f:0d:0c:ee:26:f9:7c:54:d0:bd:49:63: 07:6b:6d:ce:26:57:f7:cd:81:81:f9:e1:76:af:01:ba:81:43: a3:b5:7b:c9:9f:2d:a9:32:c4:a8:f1:eb:cd:ba:87:77:26:59: 3e:02:de:1f:47:6a:56:b0:dc:36:8d:f5:78:48:ff:4b:58:92: 2d:0f:46:16:c8:3e:94:4a:86:4b:ff:37:6f:7a:b8:9c:9d:5a: fa:36:10:ab:38:0f:f8:8d:b6:87:54:84:a4:2c:1c:54:a2:a6: d8:52:d0:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebcSJl3PPkDpq3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MmEyZjdmOTItZGUzMS00NDlmLWE1MWEtZGRiMDYzZjE4YTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc3+xnM/BVpPwmhwXN5Ih32eeaKKnZiEncHz ExDWk2xo1L2R9wCSBzBIrPd/p8M0C7ZZLlbYk+8DkJp+5HuBMUQeUCbiaiRUyzMC bzHme/F1H9xOe7CHFRf0L8WTaDYXHsPwV/kttSH/shzcl7QAbCtxRqFvKyA4SJ1G 3RYBFJN7ErjTJYzq7g9xToYnUZHMjlcMXesLISUwvUFcH9k7FnF96YZ+mdMsPDeS /hjaYNtUHsmSJ9H00IRlGHot2W8Xo+nX0V9AqWrGQrQz66knuPU1CA2z13vq/XCk UScxVn5ZYO7sybH/Jvo2G/N/Z1M10t66SLRrEl+xTt+FtSHD9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLM01SU9dVkQziLl/9vMX5+7wE1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzhlN2VjOTctN2VjNC0z NGE0LTg2ZGItMzMxYTY3M2UyZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSUEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXMKYkWCxE6MgsoEgdnpp2Ic2TYErQLy5bXN+UNFr9G+gSsDJqe/OnU NWw6anPAfTnS9l3iUk3P2b1TUWcF0joJeixFOMkFFSZTSNxqSdPAK47pT0cNHA4f by6XBu433zHhse1fUYXyQNqf17lFnkuCs1sjl+dzdMzb119u2PAkVY2Udto6qB3D Ua256BUq/v7mhIz1PV8NDO4m+XxU0L1JYwdrbc4mV/fNgYH54XavAbqBQ6O1e8mf LakyxKjx6826h3cmWT4C3h9Halaw3DaN9XhI/0tYki0PRhbIPpRKhkv/N296uJyd Wvo2EKs4D/iNtodUhKQsHFSipthS0LM= -----END CERTIFICATE-----Generated at Mon Apr 7 05:46:52 2025 by rpki-client