$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54b65c87-d89b-3861-ae0c-942446af6b4e.roa File: 54b65c87-d89b-3861-ae0c-942446af6b4e.roa (raw, json) Hash identifier: IeCCTGLPQDoZ0R2sv4qHftcumsVmhqfbG+PgyvZXRAQ= Subject key identifier: 90:B9:C7:83:81:A9:09:AE:D9:C6:5F:5F:81:B2:83:E3:1A:77:AA:EE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB00AA69AECA2E2F7DC7C08 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54b65c87-d89b-3861-ae0c-942446af6b4e.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 73.252.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:0a:a6:9a:ec:a2:e2:f7:dc:7c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=8699b56c-8411-4bf7-8c53-0dd8046b061b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a0:a9:81:4b:3a:92:6a:f8:82:9d:b1:d9:2b: 3d:e8:a8:0a:da:69:ed:5c:6b:f6:60:3f:e9:35:d4: d6:e6:29:e8:76:81:1f:72:20:4b:4c:5f:f9:47:f7: 02:fc:33:24:68:77:d4:f3:99:fe:03:84:1a:68:64: f8:99:37:6d:e3:bd:8a:18:3c:19:9d:bb:b5:b1:78: 7e:63:b0:67:8d:e9:2d:91:db:39:69:da:8f:46:80: 14:af:c8:32:ba:e5:f9:4b:9b:c0:37:86:9a:19:a0: 8a:94:72:08:81:e9:68:39:0e:7f:47:a1:73:72:4b: 96:62:7e:d5:fd:a3:1e:e3:6e:41:30:54:68:a2:1b: ba:08:03:16:4c:a1:28:6e:3e:53:19:0a:8b:f0:12: 37:97:81:cc:89:cf:25:53:9b:41:41:ea:03:ba:f2: b5:2f:80:58:64:70:1d:29:48:ac:ac:74:bd:9f:d1: 65:30:ef:9c:54:1b:04:c6:68:1a:df:e4:5f:6b:96: c3:2c:16:35:aa:23:fb:9a:03:84:af:29:4f:31:f1: 65:f2:cd:40:e2:4d:2c:c7:84:a6:3f:1a:c4:46:66: 24:6f:e3:a9:9e:6c:74:63:cd:33:84:87:78:d4:16: b9:13:aa:84:52:18:a6:42:28:43:8f:eb:63:94:ed: 33:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B9:C7:83:81:A9:09:AE:D9:C6:5F:5F:81:B2:83:E3:1A:77:AA:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/54b65c87-d89b-3861-ae0c-942446af6b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.252.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:28:7e:bc:bf:7e:4b:08:0f:0c:13:96:b5:9e:d2:8b:71:a3: dc:47:44:6c:31:f1:44:1e:51:b7:f7:55:0e:a8:e9:c8:c0:3b: c5:77:4c:2b:45:83:32:d3:e0:b8:47:2d:67:ea:47:ee:46:a3: 3b:8d:52:72:2a:9c:79:10:be:01:68:73:d9:cf:06:7d:ae:77: c1:67:6b:d8:ea:04:bb:00:b3:db:7b:30:49:9f:15:68:5b:8e: cf:9a:45:b6:2e:4a:e7:36:78:1d:fb:9d:d0:0a:73:21:bc:05: f2:47:40:ad:c2:fd:2f:19:06:28:a9:c3:97:0c:4d:19:10:cb: 23:cd:0b:c2:3f:e5:0b:ad:09:28:fa:bb:61:53:a2:e6:ac:d6: 81:fe:66:8e:79:32:eb:7a:a5:1c:03:a2:a9:8e:d4:13:85:52: 74:32:31:ff:b2:d8:01:24:8c:99:7d:ee:16:d8:dc:d7:3c:73: a5:8f:47:5d:ca:ed:24:68:a5:1f:cc:b0:99:ef:4f:eb:a9:9e: 48:59:11:80:ad:70:12:91:78:29:a3:dd:e9:2f:d8:5e:d3:bd: 2a:98:b1:5e:91:07:9a:ae:0e:c4:78:59:85:5c:6c:8c:db:c3: 59:e5:e8:22:44:42:68:b9:c5:4a:bc:b5:af:70:85:ad:71:b8: ae:5a:63:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssAqmmuyi4vfcfAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODY5OWI1NmMtODQxMS00YmY3LThjNTMtMGRkODA0NmIwNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqCpgUs6kmr4gp2x2Ss96KgK2mntXGv2YD/p NdTW5inodoEfciBLTF/5R/cC/DMkaHfU85n+A4QaaGT4mTdt472KGDwZnbu1sXh+ Y7Bnjektkds5adqPRoAUr8gyuuX5S5vAN4aaGaCKlHIIgeloOQ5/R6FzckuWYn7V /aMe425BMFRoohu6CAMWTKEobj5TGQqL8BI3l4HMic8lU5tBQeoDuvK1L4BYZHAd KUisrHS9n9FlMO+cVBsExmga3+Rfa5bDLBY1qiP7mgOErylPMfFl8s1A4k0sx4Sm PxrERmYkb+Opnmx0Y80zhId41Ba5E6qEUhimQihDj+tjlO0z5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJC5x4OBqQmu2cZfX4Gyg+Mad6ruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTRiNjVjODctZDg5Yi0z ODYxLWFlMGMtOTQyNDQ2YWY2YjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEofry/fksIDwwTlrWe0otxo9xHRGwx8UQeUbf3VQ6o6cjAO8V3TCtF gzLT4LhHLWfqR+5GozuNUnIqnHkQvgFoc9nPBn2ud8Fna9jqBLsAs9t7MEmfFWhb js+aRbYuSuc2eB37ndAKcyG8BfJHQK3C/S8ZBiipw5cMTRkQyyPNC8I/5QutCSj6 u2FTouas1oH+Zo55Mut6pRwDoqmO1BOFUnQyMf+y2AEkjJl97hbY3Nc8c6WPR13K 7SRopR/MsJnvT+upnkhZEYCtcBKReCmj3ekv2F7TvSqYsV6RB5quDsR4WYVcbIzb w1nl6CJEQmi5xUq8ta9wha1xuK5aY4k= -----END CERTIFICATE-----Generated at Mon Apr 7 09:34:22 2025 by rpki-client