$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf7a12a-844e-3ebf-bf0d-330790488703.roa File: baf7a12a-844e-3ebf-bf0d-330790488703.roa (raw, json) Hash identifier: J4Ek+khPw06tEodOWMM5qpOr5zjbSa3QMZQqOh5mE6g= Subject key identifier: 4F:6B:CD:9A:EE:33:61:62:81:03:11:AB:52:F5:E6:6B:CC:16:1D:01 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C05C1D4D3B5872F46C03800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf7a12a-844e-3ebf-bf0d-330790488703.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33659 IP address blocks: 73.196.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:c1:d4:d3:b5:87:2f:46:c0:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=b97135b5-dac7-49c3-aaa1-5447bbac2556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8b:6e:e5:6e:44:e2:ae:11:58:07:1f:89:bd: 93:5d:2b:9f:d1:d7:a4:3b:5b:84:dd:09:2c:49:d9: 48:6b:63:6e:3a:27:97:5e:4d:84:39:c8:e4:43:3c: 53:b3:2e:ca:90:78:28:83:00:e7:83:3a:10:b7:13: e3:0d:68:dd:7a:7e:51:4d:82:a8:63:83:16:1a:1a: f2:b0:31:9a:57:bf:56:9c:39:9c:56:98:34:2e:e6: 46:47:58:e1:15:17:c2:47:55:66:a7:b1:22:c7:c2: d1:5a:5a:6c:cd:c3:2d:ce:df:26:ec:6a:f3:c2:83: ed:a4:23:89:bc:24:fd:ff:d2:1a:9a:2f:63:66:2a: ae:c6:73:d3:a5:e8:ca:65:48:8d:01:0b:22:61:7b: 34:a1:63:06:16:f0:0d:0f:56:5d:be:a0:37:2d:5f: d5:13:08:f9:84:52:cd:50:a3:f5:9b:15:f6:1b:87: 0c:21:79:82:d0:e2:1e:63:70:e2:55:5e:22:4e:f3: 35:ac:c1:0d:7d:dd:99:e7:4a:db:08:4a:da:39:e8: a2:e1:09:2d:bb:ca:10:69:3e:0a:31:eb:07:99:a1: 36:7d:49:ae:06:ff:4d:8a:77:2d:8f:c0:43:25:cc: c8:25:f4:ee:90:b8:7f:61:5b:f0:51:1e:6c:77:7a: 88:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6B:CD:9A:EE:33:61:62:81:03:11:AB:52:F5:E6:6B:CC:16:1D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baf7a12a-844e-3ebf-bf0d-330790488703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.196.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:1b:25:d7:af:7a:60:da:e0:3a:b7:93:f3:48:2c:a1:91:8e: 51:8d:c2:ef:f6:8f:82:00:3b:ae:6e:e6:f4:cf:35:16:f5:51: bf:35:83:6f:be:01:35:c1:4f:21:fa:43:de:85:06:b7:9a:6b: 4f:b2:08:d3:66:96:f5:0c:5e:bf:c4:2e:54:06:04:bc:84:64: 12:6a:48:04:de:e3:20:36:91:c2:6f:c5:d4:b3:a9:74:52:a1: 90:09:ff:85:a5:72:37:f2:9b:07:8b:9b:98:30:a1:63:dc:f3: ff:a7:b1:6c:69:90:b2:8b:39:a3:64:32:50:7e:eb:10:af:4a: 71:ed:37:5d:a4:23:af:6f:84:4a:cd:ca:df:c3:12:e9:7e:fa: a1:5d:d4:ec:89:df:53:86:36:7a:e5:39:e8:c5:10:18:f5:a4: 2d:b7:1d:35:32:fe:c9:64:2d:69:64:a3:73:0a:7f:76:af:a4: d6:67:db:28:e1:47:05:6d:d2:e9:df:09:05:be:3b:ba:2f:f8: aa:72:f6:c9:a9:82:10:8e:2c:ef:44:a1:c1:57:53:f8:78:dc: 55:fb:76:e0:1e:32:7c:fb:81:3a:cb:3d:6a:11:f6:4b:40:7f: b5:2f:c1:b0:66:66:52:e8:a0:a8:f0:b2:12:9e:20:a1:99:a1: 69:d7:54:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBcHU07WHL0bAOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk Yjk3MTM1YjUtZGFjNy00OWMzLWFhYTEtNTQ0N2JiYWMyNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgItu5W5E4q4RWAcfib2TXSuf0dekO1uE3Qks SdlIa2NuOieXXk2EOcjkQzxTsy7KkHgogwDngzoQtxPjDWjden5RTYKoY4MWGhry sDGaV79WnDmcVpg0LuZGR1jhFRfCR1Vmp7Eix8LRWlpszcMtzt8m7GrzwoPtpCOJ vCT9/9Iami9jZiquxnPTpejKZUiNAQsiYXs0oWMGFvAND1ZdvqA3LV/VEwj5hFLN UKP1mxX2G4cMIXmC0OIeY3DiVV4iTvM1rMENfd2Z50rbCEraOeii4Qktu8oQaT4K MesHmaE2fUmuBv9Ninctj8BDJczIJfTukLh/YVvwUR5sd3qIVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9rzZruM2FigQMRq1L15mvMFh0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFmN2ExMmEtODQ0ZS0z ZWJmLWJmMGQtMzMwNzkwNDg4NzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScTCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMbJdevemDa4Dq3k/NILKGRjlGNwu/2j4IAO65u5vTPNRb1Ub81g2++ ATXBTyH6Q96FBreaa0+yCNNmlvUMXr/ELlQGBLyEZBJqSATe4yA2kcJvxdSzqXRS oZAJ/4WlcjfymweLm5gwoWPc8/+nsWxpkLKLOaNkMlB+6xCvSnHtN12kI69vhErN yt/DEul++qFd1OyJ31OGNnrlOejFEBj1pC23HTUy/slkLWlko3MKf3avpNZn2yjh RwVt0unfCQW+O7ov+Kpy9smpghCOLO9EocFXU/h43FX7duAeMnz7gTrLPWoR9ktA f7UvwbBmZlLooKjwshKeIKGZoWnXVIc= -----END CERTIFICATE-----Generated at Tue Jun 3 05:55:59 2025 by rpki-client