$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3e22f91-342c-3434-97d8-682adf689b68.roa File: e3e22f91-342c-3434-97d8-682adf689b68.roa (raw, json) Hash identifier: D2BVSzjxZEbeBlvusoy7Yfy31a9YB2eo3h1RPUDkkAs= Subject key identifier: 14:25:D6:D8:96:C1:E0:24:79:08:92:89:7A:04:F9:F8:B6:75:AE:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1920CCFDF9F6F6CEE6480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3e22f91-342c-3434-97d8-682adf689b68.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 73.202.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:92:0c:cf:df:9f:6f:6c:ee:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=b9cdca55-2442-4753-9050-b6ec16e89ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:a6:ea:ab:c7:fa:c5:9c:91:d4:64:05:1a: b3:59:66:f5:b7:72:b9:68:da:6d:3f:39:fd:14:80: 15:12:96:f1:76:aa:fb:46:96:86:0e:8d:80:b8:e9: a7:6c:ae:3f:39:86:f8:f0:2d:2b:69:17:c7:5f:c6: ed:b5:55:cb:d1:da:5c:e4:90:d5:52:92:bb:17:98: d4:a1:85:7d:40:fd:f2:ab:c1:0c:0b:11:4e:28:3c: 85:c6:9c:2c:f1:38:30:ec:e1:cf:b3:c9:97:90:91: 91:65:0c:73:1f:6e:bb:25:53:02:09:63:1d:a4:91: b0:ef:cb:ed:6f:21:96:c4:05:12:79:b3:9a:0f:0e: 56:4b:59:d2:d4:66:9d:75:ac:75:8c:f3:d4:0c:e0: e2:c3:d0:49:3e:7e:25:b6:e0:86:40:23:88:d0:d3: ef:01:73:68:7b:8a:58:43:b8:e7:a1:d3:0f:9e:da: da:2b:c1:86:e3:36:16:80:a5:d0:d9:26:79:99:41: 4c:7c:5b:49:e4:3d:d3:f1:bf:b8:d4:09:fd:00:e3: 46:d1:f3:56:81:b6:31:ec:6a:63:5f:6d:2f:90:c6: 3d:58:35:2f:39:10:1e:96:08:ea:9d:96:30:83:b9: 27:81:d2:76:28:66:ed:cb:6e:34:cf:71:32:e9:bc: f2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:25:D6:D8:96:C1:E0:24:79:08:92:89:7A:04:F9:F8:B6:75:AE:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3e22f91-342c-3434-97d8-682adf689b68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.202.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:92:a0:e2:c8:15:8a:1d:92:aa:e4:d2:20:c0:d6:bb:22:68: 46:32:22:9b:16:0a:50:5c:76:fe:d9:3d:51:1c:15:16:e7:b3: 9e:5b:70:97:db:89:eb:ce:e0:df:9c:47:a4:c6:1c:0c:69:7e: 28:27:53:1f:f5:b1:3d:1a:40:25:99:2e:e3:98:46:84:2f:e4: 39:c4:cf:c8:08:1c:08:86:26:14:d6:fc:b0:62:f6:33:8d:4a: ed:7a:82:19:22:3a:30:90:58:24:60:1d:09:07:12:2f:03:a5: 89:8b:a7:9e:9c:37:90:77:c4:3d:a4:4b:fc:f2:e7:2c:5c:71: eb:be:f6:42:7c:05:98:8c:46:60:9d:e4:0b:a7:ba:55:35:1f: b3:2d:7a:2b:e8:73:0a:bf:c3:9f:a4:8b:4c:6d:60:ec:9f:df: 81:89:0c:86:48:90:51:1f:35:7c:b3:91:b5:a2:fd:75:ff:1d: 77:e7:a1:53:70:a3:e8:04:3f:cc:5e:4d:68:c1:f1:8e:16:88: 4a:32:fe:60:9c:75:d1:ab:c2:e3:5b:34:2e:96:0c:a4:b4:19: 0e:a9:2d:91:8f:23:69:5d:5e:af:94:72:70:81:d2:cd:5b:92: d6:15:17:6c:79:1c:a6:2a:4a:a5:f6:c4:bb:fc:32:a9:3d:90: fe:38:ed:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssZIMz9+fb2zuZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjljZGNhNTUtMjQ0Mi00NzUzLTkwNTAtYjZlYzE2ZTg5ZWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3Gm6qvH+sWckdRkBRqzWWb1t3K5aNptPzn9 FIAVEpbxdqr7RpaGDo2AuOmnbK4/OYb48C0raRfHX8bttVXL0dpc5JDVUpK7F5jU oYV9QP3yq8EMCxFOKDyFxpws8Tgw7OHPs8mXkJGRZQxzH267JVMCCWMdpJGw78vt byGWxAUSebOaDw5WS1nS1Gaddax1jPPUDODiw9BJPn4ltuCGQCOI0NPvAXNoe4pY Q7jnodMPntraK8GG4zYWgKXQ2SZ5mUFMfFtJ5D3T8b+41An9AONG0fNWgbYx7Gpj X20vkMY9WDUvORAelgjqnZYwg7kngdJ2KGbty240z3Ey6bzy1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQl1tiWweAkeQiSiXoE+fi2da7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTNlMjJmOTEtMzQyYy0z NDM0LTk3ZDgtNjgyYWRmNjg5YjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaSoOLIFYodkqrk0iDA1rsiaEYyIpsWClBcdv7ZPVEcFRbns55bcJfb ievO4N+cR6TGHAxpfignUx/1sT0aQCWZLuOYRoQv5DnEz8gIHAiGJhTW/LBi9jON Su16ghkiOjCQWCRgHQkHEi8DpYmLp56cN5B3xD2kS/zy5yxcceu+9kJ8BZiMRmCd 5AunulU1H7Mteivocwq/w5+ki0xtYOyf34GJDIZIkFEfNXyzkbWi/XX/HXfnoVNw o+gEP8xeTWjB8Y4WiEoy/mCcddGrwuNbNC6WDKS0GQ6pLZGPI2ldXq+UcnCB0s1b ktYVF2x5HKYqSqX2xLv8Mqk9kP447aU= -----END CERTIFICATE-----Generated at Mon Apr 7 06:09:00 2025 by rpki-client