$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ebe86dc-60ed-3155-99e9-d4e4ccd2b508.roa File: 0ebe86dc-60ed-3155-99e9-d4e4ccd2b508.roa (raw, json) Hash identifier: 32HiQmz2h4QeDVnsYDUI5Ugp1sAyf4II59s+Mh7D7FY= Subject key identifier: 23:3E:53:D6:D6:C2:CB:16:BB:52:47:13:71:0F:19:C5:F1:DE:80:DF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43140A73E4E5C35A884DC40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ebe86dc-60ed-3155-99e9-d4e4ccd2b508.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 73.157.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:40:a7:3e:4e:5c:35:a8:84:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=6372a0df-fa14-4b21-9d7a-b7a6c4577852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d1:81:5b:30:a5:de:42:ff:e2:b2:c8:16:91: 08:14:7b:89:66:8c:e8:6d:53:f3:3a:87:c2:28:39: 11:e6:78:92:82:9c:fd:34:1c:c7:f3:a2:70:8b:a0: f5:e0:4f:a4:a6:7d:08:ee:05:50:0d:5e:17:1b:56: f4:8d:d1:70:40:60:9b:ae:33:7e:ac:73:b9:de:e4: ea:0d:49:b9:f8:86:56:f6:3d:6c:66:34:a2:e1:a4: 33:13:5e:80:3d:ff:95:3f:6b:7a:4c:e3:fd:a5:d2: 9d:c6:27:ec:28:3f:f2:a3:a4:ba:20:d1:c4:61:81: 8f:2c:de:42:5e:50:e5:f3:c1:64:10:a1:63:7f:31: 46:0d:86:33:0a:b6:df:57:43:b0:39:fb:2d:0c:0e: 39:ea:ca:e9:1b:79:31:25:39:4f:ff:c1:c0:8d:0c: e2:93:70:ee:7e:82:a9:fb:31:10:1d:ee:66:02:01: 40:91:4f:3b:f3:bf:de:58:17:82:a6:c1:0f:12:8c: b9:85:82:7b:4c:e3:72:41:0e:59:89:a1:e9:fd:28: 37:89:13:cc:0d:50:2c:37:07:3a:13:d3:bf:c7:23: 26:91:33:71:e6:bf:39:ff:46:61:2b:b4:8f:2b:f2: ad:44:21:34:25:78:86:da:fb:b2:17:a6:76:86:8f: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3E:53:D6:D6:C2:CB:16:BB:52:47:13:71:0F:19:C5:F1:DE:80:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ebe86dc-60ed-3155-99e9-d4e4ccd2b508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.157.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:45:3f:5c:6e:aa:8f:6c:5f:5c:6e:a8:fa:1d:3f:f1:d6:59: 69:62:cb:69:b4:af:ca:f2:ed:fb:56:b2:9b:17:d5:ca:df:8b: 92:53:fd:95:73:72:81:6e:6d:a8:c5:e0:c2:0c:fb:01:53:2e: 2e:49:4c:a2:e1:40:26:79:73:2d:a9:2d:f3:5c:91:fd:d8:96: be:33:40:3b:f8:3d:04:ee:03:6b:ed:5b:04:d8:03:8b:0b:37: f5:25:b0:9d:3b:09:24:d8:a6:f3:10:04:14:91:be:ba:b1:61: 2e:40:27:6f:da:b4:a7:60:d4:a9:f1:0e:9e:f4:6a:26:a5:d6: b3:87:a8:22:90:bd:e9:01:c9:e7:ec:53:a1:9f:66:c5:74:43: 36:fa:7b:7b:55:98:15:4d:50:3e:6e:9e:08:46:59:85:d7:4f: e0:18:7f:64:a3:8c:4c:8c:2e:b3:f3:fe:f0:ae:4a:64:bd:e4: a2:1e:e6:21:fe:10:c1:58:b0:b0:db:e6:57:ae:5f:95:5c:40: 15:64:7d:fe:2f:fa:5d:f4:8f:09:58:a4:44:9e:9b:b7:ef:62: 58:b1:47:fb:ab:d3:94:a9:3a:27:20:5d:3f:8c:36:70:94:61: 10:b6:f5:37:48:5d:aa:ed:fe:94:be:8c:4c:c0:b8:23:67:a7: 42:d0:ba:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMUCnPk5cNaiE3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NjM3MmEwZGYtZmExNC00YjIxLTlkN2EtYjdhNmM0NTc3ODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidGBWzCl3kL/4rLIFpEIFHuJZozobVPzOofC KDkR5niSgpz9NBzH86Jwi6D14E+kpn0I7gVQDV4XG1b0jdFwQGCbrjN+rHO53uTq DUm5+IZW9j1sZjSi4aQzE16APf+VP2t6TOP9pdKdxifsKD/yo6S6INHEYYGPLN5C XlDl88FkEKFjfzFGDYYzCrbfV0OwOfstDA456srpG3kxJTlP/8HAjQzik3DufoKp +zEQHe5mAgFAkU8787/eWBeCpsEPEoy5hYJ7TONyQQ5ZiaHp/Sg3iRPMDVAsNwc6 E9O/xyMmkTNx5r85/0ZhK7SPK/KtRCE0JXiG2vuyF6Z2ho+EYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM+U9bWwssWu1JHE3EPGcXx3oDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGViZTg2ZGMtNjBlZC0z MTU1LTk5ZTktZDRlNGNjZDJiNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASZ38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1FP1xuqo9sX1xuqPodP/HWWWliy2m0r8ry7ftWspsX1crfi5JT/ZVz coFubajF4MIM+wFTLi5JTKLhQCZ5cy2pLfNckf3Ylr4zQDv4PQTuA2vtWwTYA4sL N/UlsJ07CSTYpvMQBBSRvrqxYS5AJ2/atKdg1KnxDp70aial1rOHqCKQvekByefs U6GfZsV0Qzb6e3tVmBVNUD5unghGWYXXT+AYf2SjjEyMLrPz/vCuSmS95KIe5iH+ EMFYsLDb5leuX5VcQBVkff4v+l30jwlYpESem7fvYlixR/ur05SpOicgXT+MNnCU YRC29TdIXart/pS+jEzAuCNnp0LQutM= -----END CERTIFICATE-----Generated at Tue Jun 3 06:10:30 2025 by rpki-client