$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/768dcd34-36fa-3c50-88a1-5c55156f4435.roa File: 768dcd34-36fa-3c50-88a1-5c55156f4435.roa (raw, json) Hash identifier: /63X81gubFVKcAhmIam52qF5tXM/+altq6LXIxW8Fik= Subject key identifier: D8:83:DC:51:15:55:5D:16:2C:05:27:4E:A6:DD:A7:57:5B:D3:AA:1C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203C73924475D41CB1BC2A40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/768dcd34-36fa-3c50-88a1-5c55156f4435.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 33659 IP address blocks: 73.196.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:73:92:44:75:d4:1c:b1:bc:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=b38a5530-74ea-49ec-a62b-902f510ede92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:c9:2c:ea:a7:75:47:53:fc:41:4a:a4:38: 49:a0:3f:f2:94:f3:ce:10:ef:bc:61:54:ec:4c:18: 92:26:1f:52:2e:d2:d9:fa:28:33:27:e4:c7:9d:b3: 3b:5d:0d:80:48:93:80:17:cf:47:e8:4f:ca:72:13: ed:b3:db:e7:d1:85:7e:32:cb:d1:b5:7b:e6:1b:db: d2:e7:89:55:95:7d:1d:d0:9f:7c:67:72:d7:2a:10: e8:fb:97:95:86:ec:4c:58:1d:0b:a8:77:0d:f8:df: b4:19:0b:3e:a9:28:77:a0:c2:b2:35:b9:af:54:96: 5d:4d:98:95:ee:40:f9:b6:34:7e:41:ad:b4:8f:b6: 77:4c:6b:d4:6f:5f:04:86:2c:39:11:b2:e8:83:db: 3b:06:28:38:13:59:ca:a2:8d:ab:f4:50:ce:cf:8a: ec:a0:f2:ab:ae:d8:a9:0c:13:64:7b:9d:9e:8f:0f: b2:7d:1b:db:5b:56:64:6d:f3:e9:79:8c:22:ca:8f: ea:f3:56:e9:a4:e0:1c:63:84:e7:63:c4:05:77:98: c3:8d:ae:59:92:b6:16:68:66:88:c3:b9:a6:5e:43: e1:72:37:0d:73:f6:37:fe:82:c5:f9:0c:c2:89:63: 1c:14:fd:af:01:97:79:ff:9b:bc:33:f9:82:45:c1: 5c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:83:DC:51:15:55:5D:16:2C:05:27:4E:A6:DD:A7:57:5B:D3:AA:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/768dcd34-36fa-3c50-88a1-5c55156f4435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.196.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1f:29:8a:36:84:f0:0e:ce:e9:b5:5b:e1:92:e3:1b:77:c9: b2:ef:e0:3a:8b:be:05:84:df:67:2b:b0:35:fe:34:96:4e:f6: dd:f3:41:6b:e6:2b:6a:66:2e:48:ee:c7:24:ab:87:fb:64:fd: c1:43:be:02:58:b4:79:0e:fe:d0:c8:e1:15:ed:8d:78:00:21: eb:87:c5:08:18:dc:e1:f9:48:7f:d4:a8:61:25:02:e0:06:d8: fc:21:a8:fd:19:f5:a8:c3:fb:d0:d7:01:b8:e6:76:36:9b:e8: 9c:6f:73:e0:d4:79:6c:f3:5c:ab:e5:48:7a:a5:4f:4f:bd:04: bb:a4:14:1d:8f:16:c2:e7:74:75:09:72:0a:3e:90:f5:5d:61: ad:1d:13:b7:f0:0e:27:3d:9c:d7:ec:f7:25:33:6a:05:b9:0b: 37:57:e4:13:79:98:ab:5d:62:ba:51:83:b2:92:58:86:25:f9: 07:1d:91:e6:61:3c:3e:35:ba:05:6c:05:6e:ff:09:cb:c6:a1: a3:3b:34:af:b4:1b:6e:f1:11:94:5d:0e:cd:0d:55:f9:2b:b5: 35:3c:9e:cf:3c:a1:55:86:49:15:d3:b6:f9:13:37:7c:2b:2c: 5a:d7:2d:d0:3f:7e:39:03:fd:23:d4:39:78:09:f4:23:53:b2: 05:d8:b7:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPHOSRHXUHLG8KkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk YjM4YTU1MzAtNzRlYS00OWVjLWE2MmItOTAyZjUxMGVkZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur3JLOqndUdT/EFKpDhJoD/ylPPOEO+8YVTs TBiSJh9SLtLZ+igzJ+THnbM7XQ2ASJOAF89H6E/KchPts9vn0YV+MsvRtXvmG9vS 54lVlX0d0J98Z3LXKhDo+5eVhuxMWB0LqHcN+N+0GQs+qSh3oMKyNbmvVJZdTZiV 7kD5tjR+Qa20j7Z3TGvUb18Ehiw5EbLog9s7Big4E1nKoo2r9FDOz4rsoPKrrtip DBNke52ejw+yfRvbW1ZkbfPpeYwiyo/q81bppOAcY4TnY8QFd5jDja5ZkrYWaGaI w7mmXkPhcjcNc/Y3/oLF+QzCiWMcFP2vAZd5/5u8M/mCRcFcMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiD3FEVVV0WLAUnTqbdp1db06ocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzY4ZGNkMzQtMzZmYS0z YzUwLTg4YTEtNWM1NTE1NmY0NDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEfKYo2hPAOzum1W+GS4xt3ybLv4DqLvgWE32crsDX+NJZO9t3zQWvm K2pmLkjuxySrh/tk/cFDvgJYtHkO/tDI4RXtjXgAIeuHxQgY3OH5SH/UqGElAuAG 2PwhqP0Z9ajD+9DXAbjmdjab6Jxvc+DUeWzzXKvlSHqlT0+9BLukFB2PFsLndHUJ cgo+kPVdYa0dE7fwDic9nNfs9yUzagW5CzdX5BN5mKtdYrpRg7KSWIYl+QcdkeZh PD41ugVsBW7/CcvGoaM7NK+0G27xEZRdDs0NVfkrtTU8ns88oVWGSRXTtvkTN3wr LFrXLdA/fjkD/SPUOXgJ9CNTsgXYtxU= -----END CERTIFICATE-----Generated at Mon Apr 28 21:43:41 2025 by rpki-client