$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf21a9bd-7136-3ddf-9404-185e1b785bd0.roa File: bf21a9bd-7136-3ddf-9404-185e1b785bd0.roa (raw, json) Hash identifier: v4Svu+IOENbRbMahZE+Sn2ba9qzDPwK3+BVdiA/pzbU= Subject key identifier: 48:04:09:BD:03:02:C2:5C:BD:12:F7:C5:EF:58:CE:7B:A6:D8:7A:59 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAECAF62ACEB70AC95D4000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf21a9bd-7136-3ddf-9404-185e1b785bd0.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 73.33.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:ca:f6:2a:ce:b7:0a:c9:5d:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=77e76230-9984-46d6-b3c9-0538cead7dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6e:4c:1b:e7:f4:02:a6:0b:22:04:93:cb:6d: 8d:5f:ab:85:d0:c4:49:2a:1a:de:50:50:21:3c:97: 15:95:e5:ab:87:3f:47:06:2f:d3:a7:d5:c3:ce:5f: c0:7a:4b:c6:47:a2:7f:4c:84:cd:3c:fd:dc:4b:5b: 37:39:45:2c:21:61:f0:68:02:cf:67:57:95:39:ef: 45:9c:89:f7:93:6f:f3:5e:42:5e:77:a7:13:08:80: c7:fc:c8:0f:3d:17:7d:90:77:df:4b:d3:6c:cc:51: ad:31:3c:07:30:02:80:4d:b2:65:d3:f1:bb:ed:51: 9a:94:a8:c3:e3:90:8a:a1:93:ec:69:dc:95:c4:ac: b0:2c:42:dc:19:7d:2e:6a:d4:f8:63:16:20:b9:ac: b0:b0:4b:7e:b3:54:31:dc:3f:43:34:38:36:60:34: 63:45:d0:d8:ee:5a:73:cb:fb:46:b9:f8:84:ca:f3: f6:4b:e4:9f:35:44:36:b2:5b:ea:37:e9:af:4b:e0: 76:64:43:76:92:2e:ca:62:9c:b1:4f:d0:d2:76:5a: 04:3a:c4:14:18:1b:4e:7c:f8:02:ed:5a:ca:68:12: d0:d3:d4:cb:ae:9e:bb:96:07:96:bb:5e:cb:36:60: b4:ed:51:8e:dc:06:be:d9:a4:92:57:ee:7d:4e:67: 43:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:04:09:BD:03:02:C2:5C:BD:12:F7:C5:EF:58:CE:7B:A6:D8:7A:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf21a9bd-7136-3ddf-9404-185e1b785bd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.33.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:73:d2:14:d1:b1:05:38:27:d3:29:49:22:97:63:a7:16:15: b9:b2:e6:f4:e6:9e:91:04:21:6f:3d:04:5c:61:06:78:d9:4a: 14:41:c9:51:e4:3f:76:4d:9d:20:bf:04:ad:31:03:62:62:36: 46:fe:a0:13:f8:ef:15:87:83:58:d7:e3:93:25:01:d1:1d:43: 28:f0:df:77:26:46:25:03:b3:ac:fa:2c:41:38:69:4f:62:cb: 40:c2:8e:76:ef:3e:2a:f0:7b:f2:b5:ba:29:bd:2d:f2:5a:44: 7a:ce:a1:c7:74:13:8b:ad:de:0f:a6:12:51:54:3c:65:e0:9c: 11:80:36:d3:e4:90:1e:86:f8:f8:50:71:0e:de:9e:0e:f5:d0: 9a:27:d1:fb:8c:3f:2b:23:ce:80:fb:aa:c6:94:33:4b:18:a6: 80:48:0c:f8:8d:fc:65:6f:0c:5c:e6:5c:48:e8:bd:5d:cc:56: 62:85:b6:d0:06:8a:9f:e5:16:c4:1b:c3:61:99:1e:6f:4b:32: a6:1c:a0:c2:59:90:df:2b:5d:21:d7:d1:69:09:fc:59:f5:78: a0:ba:89:9b:ec:78:d3:20:a8:47:54:e0:6d:c5:71:04:dc:c6: d5:ac:57:69:9b:02:c8:68:e3:a8:35:42:de:58:b4:8e:93:9a: b5:d9:68:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrsr2Ks63CsldQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NzdlNzYyMzAtOTk4NC00NmQ2LWIzYzktMDUzOGNlYWQ3ZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG5MG+f0AqYLIgSTy22NX6uF0MRJKhreUFAh PJcVleWrhz9HBi/Tp9XDzl/AekvGR6J/TITNPP3cS1s3OUUsIWHwaALPZ1eVOe9F nIn3k2/zXkJed6cTCIDH/MgPPRd9kHffS9NszFGtMTwHMAKATbJl0/G77VGalKjD 45CKoZPsadyVxKywLELcGX0uatT4YxYguaywsEt+s1Qx3D9DNDg2YDRjRdDY7lpz y/tGufiEyvP2S+SfNUQ2slvqN+mvS+B2ZEN2ki7KYpyxT9DSdloEOsQUGBtOfPgC 7VrKaBLQ09TLrp67lgeWu17LNmC07VGO3Aa+2aSSV+59TmdDowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgECb0DAsJcvRL3xe9Yznum2HpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmYyMWE5YmQtNzEzNi0z ZGRmLTk0MDQtMTg1ZTFiNzg1YmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSEOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpz0hTRsQU4J9MpSSKXY6cWFbmy5vTmnpEEIW89BFxhBnjZShRByVHk P3ZNnSC/BK0xA2JiNkb+oBP47xWHg1jX45MlAdEdQyjw33cmRiUDs6z6LEE4aU9i y0DCjnbvPirwe/K1uim9LfJaRHrOocd0E4ut3g+mElFUPGXgnBGANtPkkB6G+PhQ cQ7eng710Jon0fuMPysjzoD7qsaUM0sYpoBIDPiN/GVvDFzmXEjovV3MVmKFttAG ip/lFsQbw2GZHm9LMqYcoMJZkN8rXSHX0WkJ/Fn1eKC6iZvseNMgqEdU4G3FcQTc xtWsV2mbAsho46g1Qt5YtI6TmrXZaFs= -----END CERTIFICATE-----Generated at Sun Apr 6 20:41:58 2025 by rpki-client