$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc32422c-4c07-3b9c-ac11-74f4e9374d27.roa File: dc32422c-4c07-3b9c-ac11-74f4e9374d27.roa (raw, json) Hash identifier: L/vKfXS29heprw+Q4w4q/eY6Zk1ksGja++cZHDdHPAI= Subject key identifier: 8A:90:47:04:1A:03:0B:D9:F8:67:8C:6E:8E:08:7F:98:35:73:F6:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8FF4B1A117CFED5D07E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc32422c-4c07-3b9c-ac11-74f4e9374d27.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 73.191.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:ff:4b:1a:11:7c:fe:d5:d0:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=411230e5-93a0-44c4-8d41-c8e32cceef57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3e:59:cc:57:d2:d1:fb:2e:77:36:95:90:8a: cf:94:ef:c8:85:14:39:d3:0f:7a:1e:ba:72:77:73: 69:67:76:4d:6c:78:64:cf:25:73:c1:a0:30:c1:0b: af:05:3c:bb:22:c6:ab:67:db:03:91:3c:3d:8c:05: 9d:c8:a1:26:0b:3e:6f:33:09:b8:81:0f:1d:a3:c1: 8a:34:cc:c6:36:77:14:6c:de:e7:f7:19:99:76:b4: 53:cb:da:74:76:c7:af:c6:c5:43:ac:3a:a5:1d:c2: 1e:9b:d3:a9:b2:e8:50:93:0c:9e:f3:e4:2e:1a:ea: b6:86:92:61:d7:15:bf:e6:4e:e6:36:c5:da:18:bd: 92:60:87:6a:87:ac:76:ef:fb:49:f6:bc:ea:ce:57: c4:a5:95:0d:56:af:b6:60:03:dc:73:34:14:40:b5: 04:d7:73:af:7d:a1:f2:5a:70:08:7b:01:ef:21:07: 7c:d9:d5:c4:4b:24:11:60:ed:91:54:35:35:99:bd: 45:86:f4:6b:e0:9e:d8:84:aa:47:11:3f:7d:97:12: 1d:8f:03:e0:62:62:fc:16:f7:62:43:4f:dc:a0:9b: 90:57:12:13:85:76:68:0f:36:2a:fd:17:3a:dc:21: 3d:9b:9d:f0:33:df:fd:c6:75:c1:bc:d4:77:49:52: 41:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:90:47:04:1A:03:0B:D9:F8:67:8C:6E:8E:08:7F:98:35:73:F6:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc32422c-4c07-3b9c-ac11-74f4e9374d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.191.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:7b:4c:d7:aa:bc:d0:47:df:9c:e3:f6:5d:6d:b8:c2:28:99: 5f:6a:dd:04:ae:92:ea:4b:bf:78:e8:73:7b:ea:cb:2a:fd:4f: 42:69:80:04:44:5b:ff:cb:f7:fe:ea:80:b8:28:16:ee:08:85: ce:fa:0e:d2:bf:ae:1b:f2:54:5a:67:84:05:b8:27:1d:18:41: 96:72:12:51:f7:e7:72:9a:b4:2c:5d:16:41:a1:2a:3a:ab:f4: 13:ba:4b:11:98:93:5c:ec:a8:64:fb:8d:35:b1:f1:ab:22:cc: 49:c7:5d:13:cd:5c:6a:61:c8:1d:b4:c4:80:bb:e7:df:47:3b: ea:d1:df:2c:ca:bc:8e:6a:e2:a1:f4:90:d1:c7:c2:05:8e:55: d5:99:cf:83:c2:99:0e:5d:be:d0:3a:02:a6:d4:11:5d:f9:38: 37:e3:95:f5:e3:2a:3e:50:7f:26:be:de:29:8d:27:58:e3:43: a3:54:ae:0e:f8:38:df:08:c5:bc:32:cf:f9:b5:c9:fa:77:2a: 5f:0d:94:ee:88:86:b3:9d:fe:df:68:b2:bb:0b:a3:e4:f8:b3: a0:d5:c6:00:fa:0b:63:bb:c0:2d:97:ad:f2:2d:8b:1f:07:ec: e0:c8:cc:71:89:6e:5f:d0:b7:38:76:bf:5c:01:b6:3f:f1:eb: 07:67:f3:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+P9LGhF8/tXQfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NDExMjMwZTUtOTNhMC00NGM0LThkNDEtYzhlMzJjY2VlZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD5ZzFfS0fsudzaVkIrPlO/IhRQ50w96Hrpy d3NpZ3ZNbHhkzyVzwaAwwQuvBTy7IsarZ9sDkTw9jAWdyKEmCz5vMwm4gQ8do8GK NMzGNncUbN7n9xmZdrRTy9p0dsevxsVDrDqlHcIem9OpsuhQkwye8+QuGuq2hpJh 1xW/5k7mNsXaGL2SYIdqh6x27/tJ9rzqzlfEpZUNVq+2YAPcczQUQLUE13OvfaHy WnAIewHvIQd82dXESyQRYO2RVDU1mb1FhvRr4J7YhKpHET99lxIdjwPgYmL8Fvdi Q0/coJuQVxIThXZoDzYq/Rc63CE9m53wM9/9xnXBvNR3SVJBjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqQRwQaAwvZ+GeMbo4If5g1c/bVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGMzMjQyMmMtNGMwNy0z YjljLWFjMTEtNzRmNGU5Mzc0ZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSb/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALN7TNeqvNBH35zj9l1tuMIomV9q3QSukupLv3joc3vqyyr9T0JpgARE W//L9/7qgLgoFu4Ihc76DtK/rhvyVFpnhAW4Jx0YQZZyElH353KatCxdFkGhKjqr 9BO6SxGYk1zsqGT7jTWx8asizEnHXRPNXGphyB20xIC7599HO+rR3yzKvI5q4qH0 kNHHwgWOVdWZz4PCmQ5dvtA6AqbUEV35ODfjlfXjKj5Qfya+3imNJ1jjQ6NUrg74 ON8Ixbwyz/m1yfp3Kl8NlO6IhrOd/t9osrsLo+T4s6DVxgD6C2O7wC2XrfItix8H 7ODIzHGJbl/Qtzh2v1wBtj/x6wdn8zM= -----END CERTIFICATE-----Generated at Mon Apr 7 05:48:18 2025 by rpki-client