$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc6ae02e-14c5-33e3-a3a3-b19396f5f237.roa File: dc6ae02e-14c5-33e3-a3a3-b19396f5f237.roa (raw, json) Hash identifier: H+c+QitYMG32s8tYx2zBJ5JC/cHKUJZp6AYn6mOepss= Subject key identifier: 45:A3:42:51:C0:E7:4C:70:9F:98:AA:5D:45:7F:64:DA:24:58:44:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F733166C175CD57656F380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc6ae02e-14c5-33e3-a3a3-b19396f5f237.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 73.186.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:33:16:6c:17:5c:d5:76:56:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=23965c39-8491-4efd-a844-a016ab2a50fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:85:11:bd:7b:e3:5e:bd:38:ab:20:75:19:59: 05:89:67:a8:c5:c0:d8:92:ed:c4:fc:38:c6:2d:7b: db:df:69:55:a9:cf:23:55:c5:4f:59:75:1c:6a:d4: f3:e4:92:17:f5:b4:22:13:c5:83:58:0d:43:68:28: 5c:b2:6a:5c:38:2a:53:d9:5c:d8:1f:09:b7:a3:98: 91:11:2f:70:6f:94:95:b4:81:ac:bc:98:00:cb:e8: 08:db:30:6b:04:d7:64:8a:b6:c9:81:95:75:9b:54: ec:09:a7:91:c5:14:9a:bf:03:f2:01:98:e6:40:9d: 6e:e3:b9:74:9d:ae:cf:7f:7a:64:dd:af:7a:14:14: ec:89:29:6e:00:45:c5:87:77:d2:83:b5:f1:6f:c6: a6:7c:32:5a:e2:66:c2:2e:bc:9e:4c:17:27:1a:09: 28:97:6a:48:28:22:18:81:28:16:94:75:34:07:22: 57:0b:e5:ea:bd:20:59:02:12:fe:46:75:d0:d4:8b: 64:ca:f5:81:c0:d5:46:74:95:51:e7:4e:6e:d5:cd: fd:2f:7a:ca:bb:8c:57:81:63:5c:02:2d:13:bd:44: 2a:90:bf:a3:2e:0e:f8:56:b7:e8:37:e2:33:17:c7: b6:0f:f4:e0:ac:b3:e8:d2:69:3e:f2:89:98:60:4d: 67:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A3:42:51:C0:E7:4C:70:9F:98:AA:5D:45:7F:64:DA:24:58:44:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc6ae02e-14c5-33e3-a3a3-b19396f5f237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.186.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a2:93:c9:80:45:c5:78:33:65:1a:ad:4e:73:f2:ea:83:2d: 7a:88:35:74:56:2e:22:a6:38:1e:1d:9c:9a:90:4f:d6:18:67: 51:37:0e:91:79:49:76:83:60:c0:71:84:86:2c:3f:ea:38:91: c5:8e:34:d7:f1:87:0c:43:27:35:69:db:6c:0a:9d:dd:45:cc: af:a6:55:34:5f:ca:8f:7b:c6:9f:24:24:e0:a6:ff:85:78:24: 6a:1e:c7:4d:78:72:32:2c:12:dc:85:ef:ba:51:e1:5b:47:5d: 4a:ef:a0:8e:58:a7:3a:63:80:a7:15:a2:45:66:51:dc:fa:16: d5:f8:88:1f:42:2f:79:eb:b9:d9:98:35:a0:97:fa:24:23:d7: d0:fd:b3:06:d6:5c:49:d1:5b:30:9b:55:dc:e7:4e:8a:25:d8: 57:a1:53:93:1b:64:4a:d5:67:63:ef:a5:6a:42:e8:3e:ed:d7: 92:53:81:e4:9c:6d:aa:3c:55:98:89:b8:38:0f:d2:22:47:1f: 75:1a:7f:45:72:50:b9:04:e6:cf:e2:b7:73:2b:c2:00:75:5e: 86:d7:3d:66:ab:ea:2a:98:5d:ab:57:95:b1:cb:66:0a:02:58: 3c:09:23:82:9b:70:6c:89:f1:92:44:1d:7c:89:44:05:59:42: 9a:e8:21:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09zMWbBdc1XZW84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MjM5NjVjMzktODQ5MS00ZWZkLWE4NDQtYTAxNmFiMmE1MGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYURvXvjXr04qyB1GVkFiWeoxcDYku3E/DjG LXvb32lVqc8jVcVPWXUcatTz5JIX9bQiE8WDWA1DaChcsmpcOCpT2VzYHwm3o5iR ES9wb5SVtIGsvJgAy+gI2zBrBNdkirbJgZV1m1TsCaeRxRSavwPyAZjmQJ1u47l0 na7Pf3pk3a96FBTsiSluAEXFh3fSg7Xxb8amfDJa4mbCLryeTBcnGgkol2pIKCIY gSgWlHU0ByJXC+XqvSBZAhL+RnXQ1ItkyvWBwNVGdJVR505u1c39L3rKu4xXgWNc Ai0TvUQqkL+jLg74VrfoN+IzF8e2D/TgrLPo0mk+8omYYE1nlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWjQlHA50xwn5iqXUV/ZNokWET1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGM2YWUwMmUtMTRjNS0z M2UzLWEzYTMtYjE5Mzk2ZjVmMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSbqGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaik8mARcV4M2UarU5z8uqDLXqINXRWLiKmOB4dnJqQT9YYZ1E3DpF5 SXaDYMBxhIYsP+o4kcWONNfxhwxDJzVp22wKnd1FzK+mVTRfyo97xp8kJOCm/4V4 JGoex014cjIsEtyF77pR4VtHXUrvoI5YpzpjgKcVokVmUdz6FtX4iB9CL3nrudmY NaCX+iQj19D9swbWXEnRWzCbVdznTool2FehU5MbZErVZ2PvpWpC6D7t15JTgeSc bao8VZiJuDgP0iJHH3Uaf0VyULkE5s/it3MrwgB1XobXPWar6iqYXatXlbHLZgoC WDwJI4KbcGyJ8ZJEHXyJRAVZQproIac= -----END CERTIFICATE-----Generated at Sun Apr 6 09:41:18 2025 by rpki-client