$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bff952f4-86bd-33a4-86db-f776c9cc533e.roa File: bff952f4-86bd-33a4-86db-f776c9cc533e.roa (raw, json) Hash identifier: LAh+ZfWqy8V10EclE/yNr/KwvXToJEVqij5NbV9DY3g= Subject key identifier: 07:29:FC:4D:B5:F3:E5:B4:3B:E2:03:C4:07:C6:A7:73:5B:12:96:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB068AE19AFD67DF2AE8F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bff952f4-86bd-33a4-86db-f776c9cc533e.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33659 IP address blocks: 73.196.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:68:ae:19:af:d6:7d:f2:ae:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=d4a203e6-d9ad-4903-a4fa-9c9d603b9468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6e:35:cb:95:c0:20:37:80:08:f6:a5:03:4d: 36:7b:e3:5b:bf:6e:c9:e4:a2:1a:b9:4e:bf:8c:b7: f9:05:a2:69:86:f0:84:16:96:b5:ea:83:1c:37:60: d0:51:7f:ec:ff:c0:c2:ed:4d:85:84:93:7f:64:17: c6:b0:7c:b5:d5:39:7a:1b:16:d9:8e:40:98:c5:d4: cb:77:ec:33:2e:f0:b0:3c:e0:f2:03:1e:ad:94:05: 5b:e0:80:3e:2f:b3:6a:0a:a4:28:39:69:b7:12:86: f5:38:5c:05:19:41:cf:d1:1a:86:dc:17:ab:6f:56: 15:2d:a0:b0:76:f9:f7:e3:ec:1e:20:ad:96:f5:cf: 34:e1:70:8b:94:42:95:2c:7f:dc:1e:43:52:85:0d: d2:9a:ef:31:7f:6c:26:04:3f:fe:6e:95:6b:dd:3d: a2:3a:46:af:59:07:bd:63:9b:68:76:6c:7e:5f:e6: fa:24:3c:5b:76:d9:b1:38:09:c8:a5:f3:27:d0:62: 82:72:59:54:9b:30:5d:f3:9b:50:fb:94:7a:c5:5b: 63:37:61:8f:d7:d3:e2:10:67:07:cc:08:b8:07:0d: 05:55:cb:73:9e:34:08:aa:1c:5f:04:27:e1:6d:d3: 33:f6:d6:54:5a:b3:15:8d:44:8d:33:11:e5:bc:30: 97:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:29:FC:4D:B5:F3:E5:B4:3B:E2:03:C4:07:C6:A7:73:5B:12:96:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bff952f4-86bd-33a4-86db-f776c9cc533e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.196.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:f1:21:54:c3:a4:b5:21:12:8c:73:62:65:6c:08:b1:97:22: 65:b3:c5:9f:48:18:90:91:5b:bf:40:23:c1:76:e0:4c:71:f5: 14:41:31:34:b7:46:f2:08:e5:bc:a1:d5:e3:73:99:d7:3b:9a: 98:e1:ec:5f:2a:30:5b:39:7e:8d:cd:be:be:e4:64:59:f0:ba: 60:7c:dd:83:0e:ec:ab:ae:9f:f0:08:bf:5e:a5:bb:5b:61:43: e6:69:5a:52:26:13:28:b9:5c:ea:8d:b9:8c:69:63:e3:eb:2a: 43:7d:6a:97:c9:6c:89:9b:53:ef:3f:ad:76:24:a2:b1:4b:a6: bb:2d:c7:a6:35:1b:44:ab:71:22:40:33:70:f3:00:6d:e8:2b: 35:8e:4b:4d:f8:66:37:0f:71:46:f8:5e:b7:18:b1:cc:dc:5e: b3:ea:82:af:5d:fa:6e:ed:4a:11:3f:82:9e:76:93:ee:07:c4: da:2a:fd:c3:b4:c7:e6:84:b7:18:f2:75:11:ed:1d:f4:73:f4: ca:30:6e:11:f8:95:5b:a8:15:1f:7d:7e:66:a2:29:76:ec:bb: 32:87:cb:5c:d7:63:05:62:9b:b7:22:b2:99:ab:16:24:82:a0: 42:36:f3:1a:eb:a8:ba:7e:af:fc:71:d4:47:cf:93:c3:f0:97: 8e:4b:4e:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssGiuGa/WffKujwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDRhMjAzZTYtZDlhZC00OTAzLWE0ZmEtOWM5ZDYwM2I5NDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW41y5XAIDeACPalA002e+Nbv27J5KIauU6/ jLf5BaJphvCEFpa16oMcN2DQUX/s/8DC7U2FhJN/ZBfGsHy11Tl6GxbZjkCYxdTL d+wzLvCwPODyAx6tlAVb4IA+L7NqCqQoOWm3Eob1OFwFGUHP0RqG3Berb1YVLaCw dvn34+weIK2W9c804XCLlEKVLH/cHkNShQ3Smu8xf2wmBD/+bpVr3T2iOkavWQe9 Y5todmx+X+b6JDxbdtmxOAnIpfMn0GKCcllUmzBd85tQ+5R6xVtjN2GP19PiEGcH zAi4Bw0FVctznjQIqhxfBCfhbdMz9tZUWrMVjUSNMxHlvDCXWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcp/E218+W0O+IDxAfGp3NbEpZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZmOTUyZjQtODZiZC0z M2E0LTg2ZGItZjc3NmM5Y2M1MzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3xIVTDpLUhEoxzYmVsCLGXImWzxZ9IGJCRW79AI8F24Exx9RRBMTS3 RvII5byh1eNzmdc7mpjh7F8qMFs5fo3Nvr7kZFnwumB83YMO7Kuun/AIv16lu1th Q+ZpWlImEyi5XOqNuYxpY+PrKkN9apfJbImbU+8/rXYkorFLprstx6Y1G0SrcSJA M3DzAG3oKzWOS034ZjcPcUb4XrcYsczcXrPqgq9d+m7tShE/gp52k+4HxNoq/cO0 x+aEtxjydRHtHfRz9MowbhH4lVuoFR99fmaiKXbsuzKHy1zXYwVim7cispmrFiSC oEI28xrrqLp+r/xx1EfPk8Pwl45LTsc= -----END CERTIFICATE-----Generated at Wed Apr 9 05:17:06 2025 by rpki-client