$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c0e322d-0cd1-3d44-9512-48a2f8e9efcc.roa File: 3c0e322d-0cd1-3d44-9512-48a2f8e9efcc.roa (raw, json) Hash identifier: JBMnRvJ2hLQZMx2haPBNs33w6XCNsGZ5tWeLp01N6ug= Subject key identifier: 22:8E:D4:9B:55:6F:50:53:F5:A8:CA:C9:55:87:CE:11:F3:BB:73:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA6B0248931F830BED93C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c0e322d-0cd1-3d44-9512-48a2f8e9efcc.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33491 IP address blocks: 73.22.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:b0:24:89:31:f8:30:be:d9:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=30ecf350-d403-47e9-a1fa-e91718f0d473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:23:14:e7:fb:35:a5:79:73:bb:55:ab:8a:1b: e7:e5:f8:e8:93:35:25:c7:e7:31:84:64:25:cf:ad: 51:e4:5d:2c:a6:51:b5:3a:df:4e:31:35:d1:47:a7: e1:72:7d:e3:b7:5d:33:ce:dd:fa:83:94:91:f6:68: a9:55:7b:33:92:b5:5c:8e:7e:e4:43:2f:e6:92:38: 3a:4b:c5:8d:f5:e6:78:2c:70:47:f0:62:41:98:88: e9:d3:e5:db:5d:99:62:46:99:39:5e:43:22:0b:55: 8d:aa:d7:bf:8f:1c:39:32:76:37:d0:72:77:96:a8: 00:00:09:a9:0a:2a:4d:da:97:18:52:e5:a5:42:72: fa:0c:79:1b:3f:72:dc:8e:dc:64:7d:f0:7a:37:2c: 09:c3:cd:69:80:a5:8d:c7:bc:93:2d:e1:ed:d7:d6: 11:e2:3e:88:79:98:61:3c:d1:4f:9e:78:11:6d:7a: 18:20:8c:f7:bf:63:a6:61:e5:77:cc:07:e2:2b:82: d5:cf:9e:5e:27:d8:35:41:8b:ba:56:67:c4:55:f5: 69:91:6c:44:19:ac:31:92:ae:01:45:31:3e:a9:c5: 97:5b:51:0e:68:c5:91:49:5f:70:45:e7:65:59:c1: ee:c0:6b:37:c6:09:ac:89:dd:b2:a0:bc:51:f7:66: e3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8E:D4:9B:55:6F:50:53:F5:A8:CA:C9:55:87:CE:11:F3:BB:73:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c0e322d-0cd1-3d44-9512-48a2f8e9efcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.22.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2c:02:03:2d:f4:e3:f3:8f:7b:8d:7e:52:a8:79:52:12:6f: 7b:98:6e:63:77:a2:f8:5f:de:ac:3e:2f:02:53:84:21:0d:51: dc:9c:3b:18:15:3f:b2:a4:3b:ee:e5:0e:ff:15:d4:cc:b1:be: 45:5d:df:e1:8e:7d:21:2f:f1:56:77:08:b8:10:dc:da:30:bf: 81:b8:19:6e:78:93:93:10:85:7e:fe:67:62:27:3e:5e:fb:56: 01:e9:61:fb:36:5e:66:78:08:24:03:41:50:5c:f2:d8:a7:2e: 40:cf:52:f4:bf:d8:af:04:5d:7e:b6:ab:0d:14:76:10:23:05: 86:29:ba:37:e2:f4:47:b1:1e:90:d1:50:34:1e:18:16:5e:72: 62:44:2c:f1:19:f9:f9:4c:61:ee:2f:84:cd:85:0b:5f:76:67: 4c:38:e2:93:58:15:75:7c:10:64:20:27:c3:29:d9:44:16:98: 61:47:ab:74:39:e3:c3:49:a9:20:47:d1:95:f5:fc:4e:46:27: 4d:8a:ec:ac:33:de:c1:94:1e:30:e7:a8:89:ad:11:0e:1b:a8: 96:4d:fe:7e:3d:3e:18:ad:4a:c1:6b:46:5e:98:f5:35:c4:7b: e7:9a:83:aa:97:74:20:70:d6:c5:3e:4a:a3:52:b4:e6:6d:53: 0d:27:db:00 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEl9prAkiTH4ML7ZPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MzBlY2YzNTAtZDQwMy00N2U5LWExZmEtZTkxNzE4ZjBkNDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliMU5/s1pXlzu1Wrihvn5fjokzUlx+cxhGQl z61R5F0splG1Ot9OMTXRR6fhcn3jt10zzt36g5SR9mipVXszkrVcjn7kQy/mkjg6 S8WN9eZ4LHBH8GJBmIjp0+XbXZliRpk5XkMiC1WNqte/jxw5MnY30HJ3lqgAAAmp CipN2pcYUuWlQnL6DHkbP3LcjtxkffB6NywJw81pgKWNx7yTLeHt19YR4j6IeZhh PNFPnngRbXoYIIz3v2OmYeV3zAfiK4LVz55eJ9g1QYu6VmfEVfVpkWxEGawxkq4B RTE+qcWXW1EOaMWRSV9wRedlWcHuwGs3xgmsid2yoLxR92bjhwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCKO1JtVb1BT9ajKyVWHzhHzu3NxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2MwZTMyMmQtMGNkMS0z ZDQ0LTk1MTItNDhhMmY4ZTllZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASRYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANiwCAy304/OPe41+Uqh5UhJve5huY3ei+F/erD4vAlOEIQ1R3Jw7GBU/ sqQ77uUO/xXUzLG+RV3f4Y59IS/xVncIuBDc2jC/gbgZbniTkxCFfv5nYic+XvtW Aelh+zZeZngIJANBUFzy2KcuQM9S9L/YrwRdfrarDRR2ECMFhim6N+L0R7EekNFQ NB4YFl5yYkQs8Rn5+Uxh7i+EzYULX3ZnTDjik1gVdXwQZCAnwynZRBaYYUerdDnj w0mpIEfRlfX8TkYnTYrsrDPewZQeMOeoia0RDhuolk3+fj0+GK1KwWtGXpj1NcR7 55qDqpd0IHDWxT5Ko1K05m1TDSfbAA== -----END CERTIFICATE-----Generated at Sun Apr 27 13:10:23 2025 by rpki-client