$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caf94d21-9fad-3dda-adc7-05490970e8c6.roa File: caf94d21-9fad-3dda-adc7-05490970e8c6.roa (raw, json) Hash identifier: cbD3rN3X4C8NSAlAxZk23WZ/st0avkPSZTR1ZVvNfGQ= Subject key identifier: 2A:25:33:1C:71:49:73:A5:C5:2F:01:C1:B7:A9:F5:7A:3A:9D:D2:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430291EA43137301F947F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caf94d21-9fad-3dda-adc7-05490970e8c6.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 73.142.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:29:1e:a4:31:37:30:1f:94:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=52d4e6de-cb17-457e-a1d3-c718509a86e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:89:5a:ce:be:a7:de:9a:51:61:66:15:cf:b5: ed:7e:03:fd:a2:c3:ce:40:df:a2:ef:68:cb:e3:6e: c1:64:36:68:39:ae:70:12:88:8d:09:6c:ff:79:42: 0a:ca:a9:c6:ff:aa:79:94:cd:96:c1:9e:41:45:fd: 4a:32:c1:05:88:1a:60:6d:37:b5:dc:1f:83:1e:77: 21:a4:c7:30:fb:d7:f8:3e:7d:a4:3c:14:a3:fd:3c: 3a:dc:45:0c:4d:0f:20:b8:ad:19:c7:70:cc:c6:ed: 87:e6:80:88:e9:af:b7:f3:50:e7:7c:e7:bd:8b:e2: 1e:79:da:c4:23:4c:47:43:ac:f1:a1:f1:f0:7b:4f: 9d:68:1a:f9:fc:1f:68:40:7c:dc:5e:f2:76:81:3d: fb:d5:c2:46:11:40:79:cc:e6:e1:8d:1d:0c:0d:f6: 25:46:f9:9c:5a:e8:09:d1:b0:01:c6:f0:a5:85:50: 18:e6:03:d6:65:24:9b:a9:c5:37:48:3b:7c:ea:05: 8a:03:9b:d5:77:c8:9e:c7:81:45:62:3f:4d:19:ca: 65:cc:73:18:27:ad:95:20:8a:16:6a:46:65:61:4d: 33:bc:69:30:9e:4d:4b:8e:3b:23:96:48:28:5d:0f: 57:d4:52:b0:1a:d8:a8:24:7c:65:0c:13:79:5e:d2: b1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:25:33:1C:71:49:73:A5:C5:2F:01:C1:B7:A9:F5:7A:3A:9D:D2:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caf94d21-9fad-3dda-adc7-05490970e8c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.142.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:96:b2:d8:41:e8:e5:25:fc:9a:3e:58:49:d5:da:9a:0d:5a: b5:bf:d1:f3:24:40:fb:07:52:56:20:d5:be:56:1d:5e:02:ba: 69:17:a5:68:d2:08:6f:61:a7:7b:86:37:e0:6c:cc:e5:13:0c: 7e:de:08:75:e3:53:08:00:3d:09:38:2a:96:ab:05:d1:45:d5: cd:bc:21:40:59:11:3d:67:c3:96:f7:d9:ec:95:d5:67:8b:32: 1c:5d:2b:99:15:72:9f:3c:4f:2d:0b:15:00:c7:f8:d4:b9:89: d6:5e:02:c4:0d:57:94:c6:92:38:4f:87:71:a7:3a:16:70:5a: 5f:aa:a9:fd:bb:5d:17:be:eb:5f:35:05:4c:96:34:a3:6f:6e: 24:3e:3b:85:c9:03:37:f6:ba:04:a2:76:ff:6c:17:d1:ec:53: f3:33:21:c8:a6:81:f4:56:77:c3:d6:6d:44:bb:ce:07:bd:2b: a6:2a:14:8d:ac:d2:39:51:73:13:a5:83:c1:0d:99:0f:c7:90: bd:f4:54:90:f2:d5:a1:48:40:10:39:e2:47:49:bc:80:aa:e2: 37:b6:30:70:e4:5c:72:44:f3:0d:43:b5:cc:27:fa:c8:b2:82: 1b:40:ad:0b:28:8e:c3:9c:3b:77:5a:5b:cb:e9:fd:80:e2:53: f9:44:3d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMCkepDE3MB+Uf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NTJkNGU2ZGUtY2IxNy00NTdlLWExZDMtYzcxODUwOWE4NmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIlazr6n3ppRYWYVz7XtfgP9osPOQN+i72jL 427BZDZoOa5wEoiNCWz/eUIKyqnG/6p5lM2WwZ5BRf1KMsEFiBpgbTe13B+DHnch pMcw+9f4Pn2kPBSj/Tw63EUMTQ8guK0Zx3DMxu2H5oCI6a+381DnfOe9i+IeedrE I0xHQ6zxofHwe0+daBr5/B9oQHzcXvJ2gT371cJGEUB5zObhjR0MDfYlRvmcWugJ 0bABxvClhVAY5gPWZSSbqcU3SDt86gWKA5vVd8iex4FFYj9NGcplzHMYJ62VIIoW akZlYU0zvGkwnk1LjjsjlkgoXQ9X1FKwGtioJHxlDBN5XtKxMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFColMxxxSXOlxS8Bwbep9Xo6ndJ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2FmOTRkMjEtOWZhZC0z ZGRhLWFkYzctMDU0OTA5NzBlOGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSY4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACWsthB6OUl/Jo+WEnV2poNWrW/0fMkQPsHUlYg1b5WHV4CumkXpWjS CG9hp3uGN+BszOUTDH7eCHXjUwgAPQk4KparBdFF1c28IUBZET1nw5b32eyV1WeL MhxdK5kVcp88Ty0LFQDH+NS5idZeAsQNV5TGkjhPh3GnOhZwWl+qqf27XRe+6181 BUyWNKNvbiQ+O4XJAzf2ugSidv9sF9HsU/MzIcimgfRWd8PWbUS7zge9K6YqFI2s 0jlRcxOlg8ENmQ/HkL30VJDy1aFIQBA54kdJvICq4je2MHDkXHJE8w1Dtcwn+siy ghtArQsojsOcO3daW8vp/YDiU/lEPZE= -----END CERTIFICATE-----Generated at Wed Jun 4 23:13:17 2025 by rpki-client