$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c3a8560-205a-3f94-9f74-8d068d6c387e.roa File: 9c3a8560-205a-3f94-9f74-8d068d6c387e.roa (raw, json) Hash identifier: YWGSsi52vvrMr3tci7wLr2e7tkeV+CobJ6pFB4+CpA8= Subject key identifier: E8:B4:B3:38:35:69:C7:63:FA:E8:40:B7:33:8E:12:2E:D4:61:D7:89 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0FFAAF998F096EC1FC940 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c3a8560-205a-3f94-9f74-8d068d6c387e.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 73.210.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:ff:aa:f9:98:f0:96:ec:1f:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=fe09fb14-2b6e-4021-9d7f-9cf81a6e97a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b6:55:6f:2d:14:bd:3c:ca:26:77:13:42:e7: e2:23:47:e2:0a:05:20:c2:35:7c:aa:d8:d0:94:f2: 9f:a5:9d:eb:0e:dd:62:6e:c2:2e:63:f5:f5:55:d3: 59:a2:08:97:db:46:9c:4c:5e:4c:4a:7c:38:a9:06: 36:84:f5:7d:21:2d:c7:c8:c2:77:d9:fb:2a:62:eb: 22:7a:c0:0a:73:09:0d:8f:86:d1:cf:4e:50:88:cf: e4:8b:d0:b0:38:e6:14:9e:bd:d6:d9:47:d4:cb:7e: 98:25:91:b7:63:06:1f:0c:bb:8d:cf:be:1c:9c:61: f4:3d:ed:6e:91:7a:7b:0b:3c:e2:72:ce:45:a0:66: 33:ad:5a:f2:3d:f8:27:52:e1:ba:ff:16:e3:30:54: 28:ab:b5:7a:04:4d:39:de:a5:34:41:e5:c0:58:d9: 64:5d:74:03:9e:6d:b7:3d:24:e2:ac:29:66:b7:75: 10:a5:4d:25:2c:5d:bf:a0:f7:c1:2f:e7:43:49:37: b0:72:b0:f0:b0:9e:59:d7:94:39:96:24:27:5e:12: f5:12:57:3c:de:3c:9f:ac:40:68:4f:22:98:f2:f1: 5b:aa:ae:73:72:48:82:3a:ec:81:6b:99:50:95:1c: dc:b5:c3:3f:2f:9f:fe:a5:fb:3e:30:b7:be:95:3b: da:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B4:B3:38:35:69:C7:63:FA:E8:40:B7:33:8E:12:2E:D4:61:D7:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c3a8560-205a-3f94-9f74-8d068d6c387e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.210.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:11:f8:d5:3f:d5:38:0b:56:cd:3c:e8:60:3d:e2:e4:32:a9: 0d:02:8d:85:71:57:19:11:1c:e9:b5:10:c9:9c:47:68:97:c8: e1:a7:b2:b0:c5:e1:f2:69:a6:e3:62:ee:10:f7:17:42:28:ca: 6a:a5:54:df:42:56:cb:cb:fb:e6:04:cb:42:95:58:2b:43:c0: fd:b7:51:b6:31:4b:b7:72:00:d7:c1:2b:34:e6:a9:aa:8e:22: de:04:cd:75:77:d3:7c:42:5a:f9:aa:40:eb:21:dc:88:de:26: 19:af:a5:78:38:96:50:2d:af:28:ec:4d:7f:34:5c:ce:f8:99: 9b:ce:39:ad:e2:68:87:1d:79:67:f5:c6:b5:05:18:b1:b8:e2: 25:0c:0b:95:92:d1:e5:03:a0:2c:c9:3d:c0:63:03:91:26:48: 3e:73:ac:12:c0:9e:26:2f:d5:93:1f:50:6e:89:c9:b4:fe:19: 6a:f9:02:be:fe:ed:f1:75:44:de:b3:cf:a1:56:d6:4c:f1:b0: 85:a1:57:13:7f:7e:e1:d3:b0:0f:c3:6b:2a:10:b9:1e:3e:7d: 86:75:ef:26:a9:01:dd:e6:02:7e:87:93:7a:d3:41:2a:ef:d0: 2e:b8:db:7f:69:e1:e9:49:7b:22:92:1f:54:a7:e3:6a:75:fe: 7f:f1:54:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssP+q+ZjwluwfyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZmUwOWZiMTQtMmI2ZS00MDIxLTlkN2YtOWNmODFhNmU5N2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7ZVby0UvTzKJncTQufiI0fiCgUgwjV8qtjQ lPKfpZ3rDt1ibsIuY/X1VdNZogiX20acTF5MSnw4qQY2hPV9IS3HyMJ32fsqYusi esAKcwkNj4bRz05QiM/ki9CwOOYUnr3W2UfUy36YJZG3YwYfDLuNz74cnGH0Pe1u kXp7Czzics5FoGYzrVryPfgnUuG6/xbjMFQoq7V6BE053qU0QeXAWNlkXXQDnm23 PSTirClmt3UQpU0lLF2/oPfBL+dDSTewcrDwsJ5Z15Q5liQnXhL1Elc83jyfrEBo TyKY8vFbqq5zckiCOuyBa5lQlRzctcM/L5/+pfs+MLe+lTvacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOi0szg1acdj+uhAtzOOEi7UYdeJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWMzYTg1NjAtMjA1YS0z Zjk0LTlmNzQtOGQwNjhkNmMzODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAR+NU/1TgLVs086GA94uQyqQ0CjYVxVxkRHOm1EMmcR2iXyOGnsrDF 4fJppuNi7hD3F0IoymqlVN9CVsvL++YEy0KVWCtDwP23UbYxS7dyANfBKzTmqaqO It4EzXV303xCWvmqQOsh3IjeJhmvpXg4llAtryjsTX80XM74mZvOOa3iaIcdeWf1 xrUFGLG44iUMC5WS0eUDoCzJPcBjA5EmSD5zrBLAniYv1ZMfUG6JybT+GWr5Ar7+ 7fF1RN6zz6FW1kzxsIWhVxN/fuHTsA/DayoQuR4+fYZ17yapAd3mAn6Hk3rTQSrv 0C64239p4elJeyKSH1Sn42p1/n/xVGE= -----END CERTIFICATE-----Generated at Sun May 11 01:44:34 2025 by rpki-client