$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c443500c-a5d9-3c93-92ed-1d23221bdf07.roa File: c443500c-a5d9-3c93-92ed-1d23221bdf07.roa (raw, json) Hash identifier: VYMFfGDexrtxVCtUfWj4yDSgXNWkZmGSUSyF8mhTqEM= Subject key identifier: 31:AC:C6:5B:CC:9D:32:B7:6C:EC:00:C5:7C:36:66:84:B9:FA:67:6F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAEDC53F25E6E0E7F101400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c443500c-a5d9-3c93-92ed-1d23221bdf07.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 73.194.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:dc:53:f2:5e:6e:0e:7f:10:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f2e7f3b1-8715-4ba0-aeb6-a00156164ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1d:43:3e:94:8d:b6:3b:43:23:97:6d:23:d2: 53:e5:ec:9a:22:7a:67:34:87:71:fc:a7:78:fb:98: 08:8b:50:48:e2:75:c8:29:05:d0:18:7b:30:0b:61: a7:53:73:54:6d:bf:16:a5:04:ca:58:06:3c:df:18: 37:05:29:9d:df:11:92:d8:26:4c:72:c9:c6:78:2b: 5f:62:5c:19:06:85:8f:63:4c:aa:1c:81:ad:de:45: 34:dc:c5:bc:38:fe:46:b8:ce:86:f2:89:57:4b:9e: fa:ae:18:48:f2:5b:a0:ee:35:91:a4:cb:42:64:21: 05:94:fd:d4:58:22:c8:e4:f5:f2:33:4e:d3:52:01: ef:e8:40:2e:13:01:a6:d6:64:62:8a:a8:17:74:88: 2f:ed:aa:c9:77:ab:8c:c4:95:83:bd:56:92:51:73: a0:63:9a:86:fd:52:bc:09:0a:69:b7:59:87:35:ae: af:b4:15:7d:81:0c:3d:5b:a7:2e:f7:93:8c:2a:23: 10:ba:92:35:28:a2:04:8b:ad:13:ef:8d:26:66:80: 34:67:8a:3a:48:a8:6b:e0:eb:09:f1:88:a9:eb:2b: bc:9c:70:60:bd:9d:0d:99:68:eb:3e:75:50:f4:aa: 22:1e:33:ff:83:75:96:44:83:6a:ae:e6:5f:eb:5c: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AC:C6:5B:CC:9D:32:B7:6C:EC:00:C5:7C:36:66:84:B9:FA:67:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c443500c-a5d9-3c93-92ed-1d23221bdf07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.194.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e4:d0:91:f1:2e:53:e6:4a:63:7a:64:d8:48:79:e2:d5:79: e6:cd:e7:18:2f:76:b4:df:06:c6:2e:50:bb:0b:7a:2c:33:93: 29:9e:cf:75:b3:59:67:1f:26:35:f6:33:e8:dd:92:f6:9e:ab: 67:4f:b1:a2:ca:c8:82:a8:2e:52:53:e0:dc:cc:0c:f4:a2:eb: 92:81:a9:89:18:18:f2:8d:91:36:39:49:29:bb:8f:a4:be:55: 66:9b:22:53:93:fa:62:fd:1f:1b:65:0c:43:33:24:6d:4e:26: 71:18:8d:c1:b6:ed:d0:e6:7e:7a:4a:b1:3d:6c:42:cd:84:38: 67:35:86:1e:35:a6:32:cc:6d:52:ce:20:26:86:77:d6:a5:ef: 93:4f:eb:59:7c:08:dc:f2:3c:29:36:f1:51:16:8c:7e:49:26: 3b:0d:c6:8f:13:a4:cf:d6:9c:6e:52:4f:8e:14:91:79:99:e4: 6a:6e:1a:25:c7:04:a0:6c:9c:c6:ac:ec:78:c5:57:0c:d2:08: b8:84:2c:ff:1e:98:a8:6a:76:cf:8e:05:69:88:a1:2f:ad:40: e5:26:4d:40:ab:b3:ee:d0:c7:8e:a4:c1:e6:7e:4b:c7:95:5f: 19:cc:09:ee:42:f8:13:14:41:71:00:94:5b:05:6e:3c:83:d3: fb:69:89:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrtxT8l5uDn8QFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjJlN2YzYjEtODcxNS00YmEwLWFlYjYtYTAwMTU2MTY0Y2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR1DPpSNtjtDI5dtI9JT5eyaInpnNIdx/Kd4 +5gIi1BI4nXIKQXQGHswC2GnU3NUbb8WpQTKWAY83xg3BSmd3xGS2CZMcsnGeCtf YlwZBoWPY0yqHIGt3kU03MW8OP5GuM6G8olXS576rhhI8lug7jWRpMtCZCEFlP3U WCLI5PXyM07TUgHv6EAuEwGm1mRiiqgXdIgv7arJd6uMxJWDvVaSUXOgY5qG/VK8 CQppt1mHNa6vtBV9gQw9W6cu95OMKiMQupI1KKIEi60T740mZoA0Z4o6SKhr4OsJ 8Yip6yu8nHBgvZ0NmWjrPnVQ9KoiHjP/g3WWRINqruZf61w4ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGsxlvMnTK3bOwAxXw2ZoS5+mdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzQ0MzUwMGMtYTVkOS0z YzkzLTkyZWQtMWQyMzIyMWJkZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScIOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXk0JHxLlPmSmN6ZNhIeeLVeebN5xgvdrTfBsYuULsLeiwzkymez3Wz WWcfJjX2M+jdkvaeq2dPsaLKyIKoLlJT4NzMDPSi65KBqYkYGPKNkTY5SSm7j6S+ VWabIlOT+mL9HxtlDEMzJG1OJnEYjcG27dDmfnpKsT1sQs2EOGc1hh41pjLMbVLO ICaGd9al75NP61l8CNzyPCk28VEWjH5JJjsNxo8TpM/WnG5ST44UkXmZ5GpuGiXH BKBsnMas7HjFVwzSCLiELP8emKhqds+OBWmIoS+tQOUmTUCrs+7Qx46kweZ+S8eV XxnMCe5C+BMUQXEAlFsFbjyD0/tpiXI= -----END CERTIFICATE-----Generated at Sun Apr 27 18:49:58 2025 by rpki-client