$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3fd8374-ebca-332f-9a83-cae3f96dd384.roa File: d3fd8374-ebca-332f-9a83-cae3f96dd384.roa (raw, json) Hash identifier: OScnPDq34b7nAFAzO1QlVLq97nykOX7FQA97Dc9Q250= Subject key identifier: 87:A6:A9:0C:9B:58:EA:5C:38:5E:0B:43:01:01:06:C7:93:A7:75:CC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8F9021A77AFD54324C6C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3fd8374-ebca-332f-9a83-cae3f96dd384.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 73.161.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:f9:02:1a:77:af:d5:43:24:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=8aba91ee-a6fb-4314-baad-78addd1f3e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:01:cf:9c:ed:59:6e:b5:79:18:d0:4d:2f:13: 8a:b1:29:2f:e2:6d:82:37:35:5e:a3:a5:86:42:58: 13:7f:c8:e3:f1:ed:cf:14:12:70:72:bb:01:96:35: bd:e5:50:af:0a:18:f7:92:d3:66:fe:de:f1:8b:6a: a2:50:08:b8:2f:e2:e3:fd:b0:13:2b:b2:a0:b8:4b: 6a:69:51:ce:5a:89:9e:c3:69:ad:35:50:ff:d6:55: 78:3e:32:ae:42:cc:b9:e9:33:87:96:28:27:33:12: 30:b6:90:de:29:17:06:9d:3f:f9:b4:4f:0c:ad:62: 13:92:49:04:aa:34:54:14:f9:fb:4b:3c:f8:b1:e1: 48:f1:71:39:02:c7:a5:99:60:0f:dc:e0:57:f9:1d: f8:6b:76:1d:be:8a:4c:4b:83:6f:04:c0:ac:0f:95: 6f:32:df:0b:0a:76:73:6e:4f:c5:16:6b:dc:fa:69: bf:20:4e:5a:a2:2d:98:56:7c:05:dd:53:8c:94:f1: 2e:f3:f8:b0:8e:c1:10:75:3e:72:07:4d:d4:64:05: d1:f2:b2:1c:5d:50:cf:2e:82:a0:ad:a4:92:ca:d2: 0e:43:cb:04:e0:86:13:37:a9:0a:e8:0d:3e:62:00: c9:7f:4c:7f:65:ab:12:15:fc:d2:d5:92:71:04:ec: 91:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A6:A9:0C:9B:58:EA:5C:38:5E:0B:43:01:01:06:C7:93:A7:75:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3fd8374-ebca-332f-9a83-cae3f96dd384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:1b:55:c1:fb:96:d2:97:0c:ca:8e:27:b4:8c:03:65:ec:1d: 7a:7e:8d:23:a6:a3:bb:10:68:e6:e7:db:02:f3:fb:e6:da:dc: ab:30:72:c6:6c:c8:b3:04:b6:1f:6f:2c:c1:24:f0:5f:25:b1: e0:63:e8:53:eb:08:fd:a0:a6:99:96:88:82:72:e7:43:3e:a0: 6d:79:08:15:c6:0b:ef:59:52:15:0d:bd:db:71:da:24:ae:b3: b0:d0:46:10:f0:18:8f:df:ab:0a:64:f4:89:0e:aa:fd:27:5b: 66:80:bb:00:5c:a7:19:ae:26:c9:db:dc:e0:a8:96:78:da:d2: 24:75:15:c8:0e:92:aa:eb:87:ad:2f:2e:4e:94:62:c7:e6:b6: 9b:31:49:41:43:27:eb:a5:0c:dc:fa:9c:26:20:e7:d7:b3:c7: 2b:ef:8a:a1:25:46:7b:3c:82:76:9b:31:ad:19:70:04:5e:22: b9:f9:9c:b7:82:59:7f:5c:83:2e:3a:54:1b:38:67:03:fe:2e: 55:66:ba:f4:4a:58:16:1a:18:e1:0b:44:35:da:b1:47:8e:b4: 10:27:ca:af:93:c4:80:f6:88:c6:84:94:00:a4:ef:91:9f:02: 90:0f:e3:05:da:3d:41:b2:d6:d6:f6:bd:8e:68:c6:9a:62:da: 7c:11:fb:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+PkCGnev1UMkxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OGFiYTkxZWUtYTZmYi00MzE0LWJhYWQtNzhhZGRkMWYzZTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gHPnO1ZbrV5GNBNLxOKsSkv4m2CNzVeo6WG QlgTf8jj8e3PFBJwcrsBljW95VCvChj3ktNm/t7xi2qiUAi4L+Lj/bATK7KguEtq aVHOWomew2mtNVD/1lV4PjKuQsy56TOHlignMxIwtpDeKRcGnT/5tE8MrWITkkkE qjRUFPn7Szz4seFI8XE5AselmWAP3OBX+R34a3YdvopMS4NvBMCsD5VvMt8LCnZz bk/FFmvc+mm/IE5aoi2YVnwF3VOMlPEu8/iwjsEQdT5yB03UZAXR8rIcXVDPLoKg raSSytIOQ8sE4IYTN6kK6A0+YgDJf0x/ZasSFfzS1ZJxBOyRWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIemqQybWOpcOF4LQwEBBseTp3XMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNmZDgzNzQtZWJjYS0z MzJmLTlhODMtY2FlM2Y5NmRkMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMbVcH7ltKXDMqOJ7SMA2XsHXp+jSOmo7sQaObn2wLz++ba3KswcsZs yLMEth9vLMEk8F8lseBj6FPrCP2gppmWiIJy50M+oG15CBXGC+9ZUhUNvdtx2iSu s7DQRhDwGI/fqwpk9IkOqv0nW2aAuwBcpxmuJsnb3OColnja0iR1FcgOkqrrh60v Lk6UYsfmtpsxSUFDJ+ulDNz6nCYg59ezxyvviqElRns8gnabMa0ZcAReIrn5nLeC WX9cgy46VBs4ZwP+LlVmuvRKWBYaGOELRDXasUeOtBAnyq+TxID2iMaElACk75Gf ApAP4wXaPUGy1tb2vY5oxppi2nwR+0I= -----END CERTIFICATE-----Generated at Mon Apr 7 06:17:45 2025 by rpki-client