$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8438b2d-237f-3c51-93d9-4c1b5ff438af.roa File: d8438b2d-237f-3c51-93d9-4c1b5ff438af.roa (raw, json) Hash identifier: KMOBX7GmsVfnu6HM7NW1qpv2e9SqWXyXedj1zpS3xkc= Subject key identifier: C8:1A:A0:F5:93:08:8B:34:D7:80:2B:D4:C7:4B:26:56:9E:D7:27:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0EEB28D729880194F2C1A Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8438b2d-237f-3c51-93d9-4c1b5ff438af.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 73.146.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:ee:b2:8d:72:98:80:19:4f:2c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=bb59a5f2-ed22-4d2a-a652-7223afa7dbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:64:a1:74:91:9f:ad:26:6a:94:fc:02:e2:d0: 65:3f:86:c3:02:05:9d:fa:5e:d9:97:a3:f7:c9:77: fe:34:a3:83:30:08:b6:5e:23:6b:ce:4c:b0:da:1a: 57:65:f5:6a:1f:e8:7b:50:14:19:b8:57:d6:a8:cb: 70:4d:d6:41:b4:2e:9c:b1:98:4a:96:50:73:05:6f: 82:76:e8:3f:b8:d8:13:14:3c:05:c3:fe:38:a8:75: fc:ef:35:bc:65:57:44:05:5f:98:c6:81:f3:85:a1: c1:5f:92:df:ba:eb:59:7b:75:e1:dd:c1:9a:ce:cd: 58:ce:76:15:b2:a2:54:88:73:49:aa:69:8a:91:8f: 62:4c:86:0c:42:7e:00:d6:db:40:8c:30:df:cb:ad: fa:13:59:74:29:5d:2e:d3:59:0f:48:f5:60:3d:23: 91:51:72:91:0f:3b:45:cd:64:1c:44:5a:80:ca:d4: be:f5:2f:68:24:97:41:bf:59:ba:20:4b:82:7f:0b: d9:31:c0:18:cd:0f:0d:25:ac:4f:c2:73:1e:c5:fa: b9:dd:96:dc:4a:a0:81:a8:5b:14:48:ca:91:f0:93: 59:df:06:a5:c5:cb:98:c5:2a:6e:40:2b:32:02:fa: 5f:c4:0d:74:45:2c:0f:0b:27:28:b4:45:6d:79:47: 6d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1A:A0:F5:93:08:8B:34:D7:80:2B:D4:C7:4B:26:56:9E:D7:27:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8438b2d-237f-3c51-93d9-4c1b5ff438af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.146.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:0d:07:cf:a6:36:a3:19:21:09:57:2b:6d:df:db:e0:a7:ee: 7b:5e:8e:c2:43:4d:84:06:05:dd:51:e7:ea:31:a1:99:3c:54: f0:4f:07:fd:32:94:89:78:4a:36:b6:2f:4f:16:e9:b4:d0:95: 18:d5:d0:88:21:c6:6c:9c:ae:5c:45:c1:6e:9b:f8:9b:a9:6e: 74:83:f3:ff:d1:22:c1:32:33:bb:2e:1c:09:47:f6:cc:20:bb: 53:ed:ac:e7:a7:eb:ab:c0:93:c6:4e:b2:a0:67:90:8e:67:f3: 64:d1:aa:a6:ac:8c:fb:ba:5c:9f:70:4a:bf:a5:3f:b5:43:ae: a3:c2:29:22:94:4e:79:7f:29:6a:b2:34:f1:0b:71:9a:71:e4: 86:90:fd:8c:24:13:60:86:9a:a2:b8:c2:c2:78:5c:1b:1a:78: 4f:47:7b:bf:4d:7d:9d:61:57:96:5c:8f:f6:26:24:bc:f8:4b: 23:b7:69:42:ff:7e:98:86:cb:ba:3f:ae:1e:10:88:fd:af:b5: cc:9a:dc:b6:6a:64:35:0b:ef:1c:36:9c:e3:3b:15:47:09:7a: f4:d0:8b:49:b8:99:58:ab:6f:58:3b:6e:cc:fe:18:b1:f3:ba: f2:1d:71:e4:09:81:c4:ef:13:dc:a2:8e:a4:5d:30:82:b3:81: 29:b8:de:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssO6yjXKYgBlPLBowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YmI1OWE1ZjItZWQyMi00ZDJhLWE2NTItNzIyM2FmYTdkYmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGShdJGfrSZqlPwC4tBlP4bDAgWd+l7Zl6P3 yXf+NKODMAi2XiNrzkyw2hpXZfVqH+h7UBQZuFfWqMtwTdZBtC6csZhKllBzBW+C dug/uNgTFDwFw/44qHX87zW8ZVdEBV+YxoHzhaHBX5LfuutZe3Xh3cGazs1YznYV sqJUiHNJqmmKkY9iTIYMQn4A1ttAjDDfy636E1l0KV0u01kPSPVgPSORUXKRDztF zWQcRFqAytS+9S9oJJdBv1m6IEuCfwvZMcAYzQ8NJaxPwnMexfq53ZbcSqCBqFsU SMqR8JNZ3walxcuYxSpuQCsyAvpfxA10RSwPCycotEVteUdtpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgaoPWTCIs014Ar1MdLJlae1yeXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDg0MzhiMmQtMjM3Zi0z YzUxLTkzZDktNGMxYjVmZjQzOGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASZKiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoNB8+mNqMZIQlXK23f2+Cn7ntejsJDTYQGBd1R5+oxoZk8VPBPB/0y lIl4Sja2L08W6bTQlRjV0IghxmycrlxFwW6b+JupbnSD8//RIsEyM7suHAlH9swg u1PtrOen66vAk8ZOsqBnkI5n82TRqqasjPu6XJ9wSr+lP7VDrqPCKSKUTnl/KWqy NPELcZpx5IaQ/YwkE2CGmqK4wsJ4XBsaeE9He79NfZ1hV5Zcj/YmJLz4SyO3aUL/ fpiGy7o/rh4QiP2vtcya3LZqZDUL7xw2nOM7FUcJevTQi0m4mVirb1g7bsz+GLHz uvIdceQJgcTvE9yijqRdMIKzgSm43uA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:21:56 2025 by rpki-client