$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e85b58f0-a0bc-3fe4-8894-4027a06a0bed.roa File: e85b58f0-a0bc-3fe4-8894-4027a06a0bed.roa (raw, json) Hash identifier: Q2tQBbHbmbEnMbPYfMFZzgWrhxxUCjfScsd5XnwdldM= Subject key identifier: F4:73:64:DC:77:8E:96:4B:85:D6:12:FC:DC:5C:E6:14:E2:C7:B0:7C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7BB9A0B51AAC8D09AF000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e85b58f0-a0bc-3fe4-8894-4027a06a0bed.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 73.18.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:bb:9a:0b:51:aa:c8:d0:9a:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=6b25e6b1-9f79-40d9-a6f2-af06deaa1973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:5e:11:ad:cf:8e:ab:38:3d:6f:ce:db:64: 18:ac:0b:b9:d8:95:87:37:fe:3e:df:fe:35:f8:3d: 4e:be:f0:23:82:db:62:97:43:a2:d0:94:5b:ea:81: 85:6c:c5:77:2c:19:59:c2:85:aa:d8:8c:99:44:43: 46:28:16:f7:94:70:21:52:52:f1:51:13:02:95:6d: c2:9f:e1:b7:c6:a6:db:d4:b6:26:5f:d6:13:d0:53: e0:f3:c2:23:53:20:9f:6d:00:ce:6a:90:d5:b4:0a: f2:8f:ab:7d:ee:74:36:a4:21:bb:1d:e4:45:59:51: 2c:23:86:b8:1c:ee:64:a9:51:4a:0f:28:f3:d3:1a: b4:ef:2c:ed:c2:88:68:be:34:b1:b9:ce:87:91:ad: ed:b2:11:70:d3:3a:80:62:a5:ce:25:ac:77:3e:e4: 1c:e9:92:33:4f:37:64:e2:9c:7f:34:b1:4d:aa:81: 3b:30:05:f2:69:f8:c3:31:c6:e5:b9:26:ce:08:be: 10:ae:b8:f5:2a:fc:44:c1:e1:b2:26:50:07:d5:c2: b2:54:2d:00:4a:9c:32:85:c2:ee:7b:15:16:d9:83: 87:26:37:fa:bd:5d:50:60:f9:6c:b6:b5:31:6c:9e: 5e:c7:39:0b:38:99:50:f1:64:3c:f9:bd:51:27:c0: e0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:73:64:DC:77:8E:96:4B:85:D6:12:FC:DC:5C:E6:14:E2:C7:B0:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e85b58f0-a0bc-3fe4-8894-4027a06a0bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.18.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:6d:2f:a0:30:f6:b3:26:77:6b:0d:1e:e8:f4:b7:1c:8e:73: 82:4d:99:f4:aa:35:1a:90:6e:55:0a:d2:a9:a4:c6:15:2d:c3: 83:7b:c7:4d:4d:83:34:79:7b:65:16:7b:94:72:b9:4e:f4:41: 42:a7:1e:76:44:e2:d4:9f:94:32:3e:d0:30:81:28:c1:60:3d: e3:cb:35:dd:70:4b:e3:b6:93:d7:d4:29:28:33:36:06:71:00: 71:6e:81:c0:be:cf:9f:e9:6a:ea:0e:24:2a:b4:8b:9f:be:06: 7a:7e:9f:d2:98:39:d1:8f:fe:05:6a:32:84:73:e7:5f:18:37: 60:b3:e7:af:64:7f:5d:e2:05:cf:20:1f:12:b4:44:71:95:80: a8:2d:20:f1:09:4c:0d:99:99:9a:2e:68:bc:73:f1:b2:87:f3: 29:96:b5:b9:63:48:1c:c6:62:01:74:03:8d:81:94:d3:d7:cf: 0f:49:18:28:1c:cc:5e:54:c2:bd:c2:2e:cb:9a:b5:6b:07:34: 0d:5e:8e:c4:a6:b2:74:b0:ca:0d:c4:52:75:41:60:cb:11:4f: 02:64:31:52:72:6b:1d:87:8e:33:cb:f8:6d:bc:53:45:87:fb: 8b:96:ea:77:a7:ed:60:af:46:aa:a0:ed:29:71:75:dd:fa:45: 2e:10:0c:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj097uaC1GqyNCa8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NmIyNWU2YjEtOWY3OS00MGQ5LWE2ZjItYWYwNmRlYWExOTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDFeEa3Pjqs4PW/O22QYrAu52JWHN/4+3/41 +D1OvvAjgttil0Oi0JRb6oGFbMV3LBlZwoWq2IyZRENGKBb3lHAhUlLxURMClW3C n+G3xqbb1LYmX9YT0FPg88IjUyCfbQDOapDVtAryj6t97nQ2pCG7HeRFWVEsI4a4 HO5kqVFKDyjz0xq07yztwohovjSxuc6Hka3tshFw0zqAYqXOJax3PuQc6ZIzTzdk 4px/NLFNqoE7MAXyafjDMcbluSbOCL4Qrrj1KvxEweGyJlAH1cKyVC0ASpwyhcLu exUW2YOHJjf6vV1QYPlstrUxbJ5exzkLOJlQ8WQ8+b1RJ8DgowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRzZNx3jpZLhdYS/Nxc5hTix7B8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTg1YjU4ZjAtYTBiYy0z ZmU0LTg4OTQtNDAyN2EwNmEwYmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRLmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJtL6Aw9rMmd2sNHuj0txyOc4JNmfSqNRqQblUK0qmkxhUtw4N7x01N gzR5e2UWe5RyuU70QUKnHnZE4tSflDI+0DCBKMFgPePLNd1wS+O2k9fUKSgzNgZx AHFugcC+z5/pauoOJCq0i5++Bnp+n9KYOdGP/gVqMoRz518YN2Cz569kf13iBc8g HxK0RHGVgKgtIPEJTA2ZmZouaLxz8bKH8ymWtbljSBzGYgF0A42BlNPXzw9JGCgc zF5Uwr3CLsuatWsHNA1ejsSmsnSwyg3EUnVBYMsRTwJkMVJyax2HjjPL+G28U0WH +4uW6nen7WCvRqqg7Slxdd36RS4QDCg= -----END CERTIFICATE-----Generated at Mon Apr 7 06:04:03 2025 by rpki-client