$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23c78681-b1df-3084-ba39-6728cf606194.roa File: 23c78681-b1df-3084-ba39-6728cf606194.roa (raw, json) Hash identifier: jGhXFgPe1AQw9nJgf22mXNpfoJbKGwZi1ISo/L4hndo= Subject key identifier: 42:DA:C5:2F:63:24:DC:31:6A:07:5F:B4:68:8F:58:39:08:EB:BC:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FD333747C9225D9988700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23c78681-b1df-3084-ba39-6728cf606194.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 73.157.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:d3:33:74:7c:92:25:d9:98:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=8eb77d7a-edbb-467c-b101-c7b5f4280a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:5f:4e:27:51:21:1a:52:37:9e:6a:95:4f: d4:25:36:0a:5c:66:ab:0c:3b:79:5d:63:42:b3:20: 22:5c:db:d1:b6:d8:23:cc:59:88:cb:1b:2b:72:3e: c5:0a:67:85:db:95:79:ee:bc:05:cf:cc:42:a6:7d: 46:6b:88:98:ab:71:46:05:d2:d2:41:dc:9e:60:a1: 6c:2f:66:76:4f:a7:16:4c:c7:bc:88:d9:a1:7b:0e: 86:82:22:97:68:d3:a5:be:8a:b6:97:08:c9:ee:89: 0a:04:c3:cf:3b:70:5c:e0:60:84:1c:73:d9:c2:8f: 79:46:18:07:29:f0:a0:62:4a:38:9d:e5:cb:bf:0e: f9:8a:59:14:07:fd:a9:fc:dc:8b:b9:44:d8:8b:de: bc:f1:8e:05:5b:d5:2d:b3:51:42:ba:1f:e6:6a:8b: 73:b9:89:8d:7e:e0:c0:04:9a:f8:a2:f9:f8:52:69: 4d:8e:20:14:26:83:5c:37:93:cf:22:0e:68:6a:e6: 11:db:fc:fb:cd:03:32:8c:7e:95:68:34:b5:d1:bb: 3a:d9:38:7a:47:85:9b:c0:a0:6f:2c:70:05:dc:cb: 90:a4:ae:48:17:e9:7a:02:93:22:39:ba:d2:40:ce: 54:24:c5:aa:60:26:6b:ce:f1:d8:72:cc:45:b4:cb: 2c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DA:C5:2F:63:24:DC:31:6A:07:5F:B4:68:8F:58:39:08:EB:BC:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23c78681-b1df-3084-ba39-6728cf606194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.157.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a2:57:8b:65:d6:47:e3:60:7a:8f:64:6d:21:43:f5:6c:5c: f1:b0:13:99:ad:d3:54:0f:5d:78:53:05:4a:b4:01:a4:84:3a: e5:f9:8d:8b:b2:a0:fb:4f:27:53:f8:19:91:b2:af:9b:f8:cf: ef:a3:2f:47:bb:d1:45:d4:8e:6a:2e:c4:8b:19:a2:e7:20:da: 1b:21:7e:c8:11:d8:82:43:36:ab:1f:4f:8f:9b:cf:a7:6c:44: 25:af:b2:e9:8c:0f:c7:1c:ef:9a:1e:47:b0:8a:b5:1e:f8:99: 32:a8:d2:62:47:41:f5:ea:3e:29:c8:fd:75:5a:cb:70:92:0c: 7c:13:25:26:2a:84:7b:c9:9a:bd:46:00:fa:98:83:70:7e:0e: 78:b4:4d:4a:cb:4a:1a:09:3c:aa:6f:a6:7a:7c:32:11:15:8b: 0d:05:3b:55:09:ca:93:38:12:5e:0f:19:be:a7:c4:b6:0f:e4: a3:17:50:2c:5b:ea:74:23:32:97:b0:1c:c5:15:fc:e3:3b:04: f4:b4:21:6a:18:ad:c0:e0:3d:2c:ca:c7:9f:12:cf:64:a2:d4: ff:a5:8f:a4:0f:03:15:27:3a:08:fc:16:ce:0e:32:ce:e8:32: 06:98:3c:dd:f1:73:ba:b5:05:85:af:99:25:ca:90:dc:94:7b: 6b:89:e2:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL9MzdHySJdmYhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OGViNzdkN2EtZWRiYi00NjdjLWIxMDEtYzdiNWY0MjgwYTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7hfTidRIRpSN55qlU/UJTYKXGarDDt5XWNC syAiXNvRttgjzFmIyxsrcj7FCmeF25V57rwFz8xCpn1Ga4iYq3FGBdLSQdyeYKFs L2Z2T6cWTMe8iNmhew6GgiKXaNOlvoq2lwjJ7okKBMPPO3Bc4GCEHHPZwo95RhgH KfCgYko4neXLvw75ilkUB/2p/NyLuUTYi9688Y4FW9Uts1FCuh/maotzuYmNfuDA BJr4ovn4UmlNjiAUJoNcN5PPIg5oauYR2/z7zQMyjH6VaDS10bs62Th6R4WbwKBv LHAF3MuQpK5IF+l6ApMiObrSQM5UJMWqYCZrzvHYcsxFtMss2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELaxS9jJNwxagdftGiPWDkI67y8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjNjNzg2ODEtYjFkZi0z MDg0LWJhMzktNjcyOGNmNjA2MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ2aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSiV4tl1kfjYHqPZG0hQ/VsXPGwE5mt01QPXXhTBUq0AaSEOuX5jYuy oPtPJ1P4GZGyr5v4z++jL0e70UXUjmouxIsZoucg2hshfsgR2IJDNqsfT4+bz6ds RCWvsumMD8cc75oeR7CKtR74mTKo0mJHQfXqPinI/XVay3CSDHwTJSYqhHvJmr1G APqYg3B+Dni0TUrLShoJPKpvpnp8MhEViw0FO1UJypM4El4PGb6nxLYP5KMXUCxb 6nQjMpewHMUV/OM7BPS0IWoYrcDgPSzKx58Sz2Si1P+lj6QPAxUnOgj8Fs4OMs7o MgaYPN3xc7q1BYWvmSXKkNyUe2uJ4iY= -----END CERTIFICATE-----Generated at Tue May 13 02:42:19 2025 by rpki-client