$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0595697b-422c-3581-841d-0c114bd6e12d.roa File: 0595697b-422c-3581-841d-0c114bd6e12d.roa (raw, json) Hash identifier: 3UiH3UyqvWCE30grOyKYyL+1/gOlMw6ypXh5b8h9gXM= Subject key identifier: BB:93:68:B5:EF:AC:C5:01:6A:4A:F6:DD:C5:C7:1A:6D:50:DD:40:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB18C98E35260DC38C71740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0595697b-422c-3581-841d-0c114bd6e12d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 73.170.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:8c:98:e3:52:60:dc:38:c7:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=b551496c-116a-40ed-bcde-97a9bf27ac83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f4:50:01:db:35:d1:8a:3a:e7:dd:6c:ad:fc: 00:81:7e:38:43:33:fc:dc:ad:1c:8f:28:b7:7f:48: 91:65:b7:c2:da:26:3b:00:4d:dd:31:36:22:75:f5: 94:39:b8:77:14:0e:0b:e5:87:ce:77:ee:fa:bd:56: 36:28:6a:52:0e:5d:75:08:71:27:ba:72:8b:d7:60: 57:79:43:97:40:cb:a0:2a:01:fe:ec:d1:93:73:e2: 06:e3:ac:4e:f1:31:5b:5d:8f:f1:dd:15:0c:0d:cd: 51:90:a5:92:64:38:40:da:23:1b:89:e5:d2:3f:6b: 48:d0:72:8f:13:58:ce:cb:3b:00:8f:51:1d:ce:e3: 85:e3:87:33:17:01:b9:94:36:87:c6:01:f2:d1:49: 0d:65:54:d7:44:ea:d5:09:92:92:5e:56:ba:32:46: 85:64:6e:52:d3:de:6a:7a:5d:66:81:62:b3:bc:d0: 85:69:f8:26:d2:d7:38:a2:cc:ef:f1:d6:fc:7a:68: 12:93:c1:1e:30:3f:78:a3:1e:de:74:a9:0f:e9:64: 40:8b:20:15:b4:20:b0:17:fe:e9:9f:67:f5:73:46: 20:dd:b2:45:f1:50:8e:37:1a:52:ab:8c:1a:aa:42: 70:f3:c4:4c:db:8e:00:df:0a:50:ea:ad:f8:5c:4f: 9b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:93:68:B5:EF:AC:C5:01:6A:4A:F6:DD:C5:C7:1A:6D:50:DD:40:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0595697b-422c-3581-841d-0c114bd6e12d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.170.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:db:f1:52:4d:2e:bd:13:c1:dd:b0:ec:62:08:76:c6:43:44: a9:6f:b4:30:f0:8a:de:e3:6e:72:b8:e0:8e:b1:b3:24:82:23: f8:02:09:a6:03:48:90:b1:13:76:68:88:b7:13:1e:fb:2d:19: 4c:4b:9e:72:c5:6b:e9:3d:7e:17:91:96:14:f0:55:ab:b4:cb: ec:ae:fd:f1:5e:cd:0d:d0:d1:bc:d1:0f:dc:c5:66:30:35:44: 6f:1c:64:0a:af:56:7a:80:37:22:a9:3d:3e:cc:d5:dd:b8:f8: ed:35:0d:f7:10:6c:00:89:5d:1e:2c:46:5a:22:da:3b:9c:54: 38:59:2a:cc:06:db:af:08:55:79:c0:5d:c9:5c:4c:c2:8f:d8: 28:9a:81:36:10:3e:5e:e7:58:55:cd:2b:1e:23:01:d0:5f:86: be:e3:6f:10:68:60:d2:a6:dd:48:ec:47:fd:06:22:18:56:a2: 7c:f9:fa:3d:34:ef:5c:88:1b:c7:b4:23:0f:fb:66:49:eb:a9: 23:ee:6b:bf:e5:1a:6a:9a:84:a3:64:8d:00:02:b0:bd:cb:5d: 9f:2e:35:54:16:53:38:a6:1e:87:ea:78:8f:21:cb:a3:72:af: 0e:2d:26:52:fc:49:19:b4:91:ea:95:c7:79:f2:e8:56:80:8d: ed:39:d7:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssYyY41Jg3DjHF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YjU1MTQ5NmMtMTE2YS00MGVkLWJjZGUtOTdhOWJmMjdhYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fRQAds10Yo6591srfwAgX44QzP83K0cjyi3 f0iRZbfC2iY7AE3dMTYidfWUObh3FA4L5YfOd+76vVY2KGpSDl11CHEnunKL12BX eUOXQMugKgH+7NGTc+IG46xO8TFbXY/x3RUMDc1RkKWSZDhA2iMbieXSP2tI0HKP E1jOyzsAj1EdzuOF44czFwG5lDaHxgHy0UkNZVTXROrVCZKSXla6MkaFZG5S095q el1mgWKzvNCFafgm0tc4oszv8db8emgSk8EeMD94ox7edKkP6WRAiyAVtCCwF/7p n2f1c0Yg3bJF8VCONxpSq4waqkJw88RM244A3wpQ6q34XE+b+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuTaLXvrMUBakr23cXHGm1Q3UD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDU5NTY5N2ItNDIyYy0z NTgxLTg0MWQtMGMxMTRiZDZlMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSarSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbb8VJNLr0Twd2w7GIIdsZDRKlvtDDwit7jbnK44I6xsySCI/gCCaYD SJCxE3ZoiLcTHvstGUxLnnLFa+k9fheRlhTwVau0y+yu/fFezQ3Q0bzRD9zFZjA1 RG8cZAqvVnqANyKpPT7M1d24+O01DfcQbACJXR4sRloi2jucVDhZKswG268IVXnA XclcTMKP2CiagTYQPl7nWFXNKx4jAdBfhr7jbxBoYNKm3UjsR/0GIhhWonz5+j00 71yIG8e0Iw/7ZknrqSPua7/lGmqahKNkjQACsL3LXZ8uNVQWUzimHofqeI8hy6Ny rw4tJlL8SRm0keqVx3ny6FaAje051xI= -----END CERTIFICATE-----Generated at Sat May 10 21:15:29 2025 by rpki-client