$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcb756a9-5f48-374f-9afa-b998be8dab7d.roa File: dcb756a9-5f48-374f-9afa-b998be8dab7d.roa (raw, json) Hash identifier: H7O7fhCjAmtPL24CB8jfPsEFlKpBAUZmnLuSwiE7/MA= Subject key identifier: 9C:7C:EE:8B:E8:B5:0C:5E:65:84:58:43:42:E2:9C:BA:06:6D:54:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA53DA3432DC757409CED00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcb756a9-5f48-374f-9afa-b998be8dab7d.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 13367 IP address blocks: 73.228.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:3d:a3:43:2d:c7:57:40:9c:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=7c89abba-28b3-491a-b93a-c8ecec2c5d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b4:6f:0c:03:1a:66:d9:a2:5a:af:0f:c2:ee: 3f:27:34:d6:e2:33:90:e7:8a:63:98:ae:cd:6e:5c: 5b:fb:fe:de:fb:df:2f:af:a7:8d:66:3e:e0:23:df: 07:9b:22:86:cb:0e:5d:bf:5e:a9:b0:fa:c1:96:97: 02:4f:cc:a2:e3:d1:16:03:b0:b7:fd:3a:43:2c:c3: 27:5d:85:be:3b:db:f0:f9:a4:c0:a8:cf:0e:aa:5a: d3:76:93:71:b6:18:ca:7c:20:00:16:68:16:97:2c: 2a:c2:7f:81:27:b6:bd:88:52:90:ea:ed:40:59:8e: 59:c5:ab:5e:8d:38:98:3a:2e:c8:98:b2:45:09:a3: 8f:60:8b:b5:27:ea:df:d4:e7:93:ea:8d:b1:4b:88: 96:63:72:f2:57:ed:a8:83:d7:6a:b4:b3:8e:6f:06: 8e:c5:88:a7:0c:f2:ff:4e:64:3e:86:40:66:16:46: 57:30:2b:03:45:bf:8e:94:a6:f9:61:28:ef:1c:76: 47:73:5e:db:df:0c:2f:d4:f3:bc:47:80:b0:a3:7e: 22:16:22:3d:d5:31:87:0f:78:db:1e:ef:d9:b2:09: 4d:f4:34:3c:f0:86:d0:8b:29:44:dc:cb:29:e5:f7: 0a:7f:6b:d8:4e:40:44:a5:c8:00:e8:7e:7c:75:36: a1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7C:EE:8B:E8:B5:0C:5E:65:84:58:43:42:E2:9C:BA:06:6D:54:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcb756a9-5f48-374f-9afa-b998be8dab7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.228.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f0:66:c2:f8:10:1e:5b:ea:a5:7a:a5:e5:d6:6b:50:24:8f: 87:a9:26:a0:8f:65:3d:a2:db:f8:48:b9:19:1b:af:ec:f4:b9: 09:05:c4:9e:b7:2f:40:43:65:84:b5:8c:b8:54:be:c6:7e:8b: 0d:13:d6:fd:1c:7c:56:0b:92:e3:f2:a8:b9:10:46:38:37:a3: f8:91:1b:82:45:70:12:ca:1e:02:33:a9:d9:53:5b:9b:6a:59: e8:4e:5b:e7:21:6b:1b:4d:a2:e7:ab:59:37:50:b5:da:64:61: 58:42:40:37:04:3e:41:68:b6:0a:df:c6:6d:ed:9e:30:cb:56: bf:d2:87:cf:4f:06:38:c5:0f:dc:ba:fd:20:31:2e:27:07:57: 59:12:21:33:db:99:fe:24:94:3f:b2:f5:01:e9:75:ed:ae:17: b7:ba:89:f1:a8:93:44:29:3f:ef:8c:dd:c4:fb:99:9f:25:d2: 25:8c:9a:6d:c5:4e:0c:8b:62:22:e6:f0:25:6f:4c:dc:17:34: 9a:d8:e9:ab:80:db:6a:3a:0e:ef:99:56:23:02:78:e8:27:a9: 2a:1e:a0:c2:08:83:dd:93:03:89:0c:6c:df:ec:cc:6b:2c:c6: 00:4e:04:bc:35:b2:20:be:28:40:81:6a:1a:11:37:5d:ab:74: 62:fc:fd:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pT2jQy3HV0Cc7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk N2M4OWFiYmEtMjhiMy00OTFhLWI5M2EtYzhlY2VjMmM1ZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprRvDAMaZtmiWq8Pwu4/JzTW4jOQ54pjmK7N blxb+/7e+98vr6eNZj7gI98HmyKGyw5dv16psPrBlpcCT8yi49EWA7C3/TpDLMMn XYW+O9vw+aTAqM8OqlrTdpNxthjKfCAAFmgWlywqwn+BJ7a9iFKQ6u1AWY5Zxate jTiYOi7ImLJFCaOPYIu1J+rf1OeT6o2xS4iWY3LyV+2og9dqtLOObwaOxYinDPL/ TmQ+hkBmFkZXMCsDRb+OlKb5YSjvHHZHc17b3wwv1PO8R4Cwo34iFiI91TGHD3jb Hu/ZsglN9DQ88IbQiylE3Msp5fcKf2vYTkBEpcgA6H58dTahowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJx87ovotQxeZYRYQ0LinLoGbVTLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGNiNzU2YTktNWY0OC0z NzRmLTlhZmEtYjk5OGJlOGRhYjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeS8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnwZsL4EB5b6qV6peXWa1Akj4epJqCPZT2i2/hIuRkbr+z0uQkFxJ63 L0BDZYS1jLhUvsZ+iw0T1v0cfFYLkuPyqLkQRjg3o/iRG4JFcBLKHgIzqdlTW5tq WehOW+chaxtNouerWTdQtdpkYVhCQDcEPkFotgrfxm3tnjDLVr/Sh89PBjjFD9y6 /SAxLicHV1kSITPbmf4klD+y9QHpde2uF7e6ifGok0QpP++M3cT7mZ8l0iWMmm3F TgyLYiLm8CVvTNwXNJrY6auA22o6Du+ZViMCeOgnqSoeoMIIg92TA4kMbN/szGss xgBOBLw1siC+KECBahoRN12rdGL8/QA= -----END CERTIFICATE-----Generated at Tue Apr 29 14:37:54 2025 by rpki-client