$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e881750-a47d-30ba-9bb1-46468ec561ed.roa File: 7e881750-a47d-30ba-9bb1-46468ec561ed.roa (raw, json) Hash identifier: hcdGSj6cjHTzIxsV+IKTsFIHiBP8/lBlSBsRl1lUurY= Subject key identifier: DE:27:73:49:21:7B:AD:5C:80:D9:66:BE:76:40:5D:3B:2D:2C:6D:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1A1BA882C9FE9DC968B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e881750-a47d-30ba-9bb1-46468ec561ed.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 73.252.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:a1:ba:88:2c:9f:e9:dc:96:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=91ce00df-75d2-4d61-bde6-369b38604b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8e:47:e0:ba:87:50:d3:88:68:9e:65:e4:85: 16:7c:88:a2:22:1b:c3:46:28:b2:ac:e0:7d:af:11: 9e:31:c4:58:e8:47:db:92:a8:ec:cf:41:5b:e3:67: 51:2f:47:bd:e3:b4:1b:2b:49:e3:07:a7:be:a4:bf: 2a:c7:62:05:99:ce:55:96:1a:f8:22:33:93:2b:04: 3d:31:56:3b:59:74:c0:ab:a5:55:e6:de:c4:ae:04: 76:0a:9a:f5:33:e6:b8:16:03:8a:fc:19:1f:8d:9c: 92:b6:68:43:39:32:81:3e:29:aa:97:68:2e:5c:4d: 64:72:d6:64:49:f9:63:0b:bf:e2:5c:00:0e:26:ba: bf:4a:cf:89:1f:cd:84:5a:db:96:8b:63:4c:46:db: 40:33:4b:af:f7:da:34:d7:16:09:26:00:da:ee:a9: 71:3b:86:b3:5b:87:3d:e9:99:c9:e8:40:5e:e2:3d: 43:60:02:f5:05:cf:9d:a5:ad:61:89:60:70:b1:61: 57:97:b7:67:b4:98:32:7c:e8:7b:a6:0c:06:6e:91: 59:f3:77:cc:42:b1:8c:c2:e2:db:e7:16:5e:8a:cf: 1e:a7:98:8e:3e:b9:63:b3:e1:54:04:b3:47:8d:26: 58:7e:79:d1:25:ff:d9:69:01:c1:fb:3e:b9:9a:96: 50:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:27:73:49:21:7B:AD:5C:80:D9:66:BE:76:40:5D:3B:2D:2C:6D:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e881750-a47d-30ba-9bb1-46468ec561ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.252.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:da:09:2f:31:0b:f0:9d:0f:e6:45:f4:fd:93:25:1d:eb:99: 0e:78:b2:58:b1:67:cc:3d:66:f8:8b:97:66:d3:f3:9c:56:ce: ef:7b:f5:c7:f2:f5:c5:56:d5:ab:d3:b7:77:30:dc:05:b0:4a: 2b:de:d0:8d:d8:f1:36:3f:9c:c4:d4:0f:08:95:98:76:8e:0a: e9:a1:07:06:b5:ff:fc:3e:0a:cd:65:e1:66:38:80:7f:53:33: e9:20:f6:42:10:f5:c5:9a:c2:54:0e:ec:c2:29:b2:06:a0:11: e8:b8:a8:19:c1:5d:7e:df:15:fe:1a:7e:3f:55:25:75:0c:89: ad:03:ba:cd:4b:2f:32:70:14:d8:ec:4a:8d:c0:fb:f6:18:99: 0f:8c:78:94:50:32:0b:a4:83:ab:55:ba:44:dc:f2:54:9e:29: 33:82:f5:9a:34:ca:87:c6:9b:c0:67:c1:59:27:53:97:e6:18: db:8d:c6:dc:f3:18:08:99:b0:69:0b:34:e0:dd:e5:b0:2a:93: 42:f0:9b:2b:14:8b:14:2f:e3:4d:33:f7:60:dc:cb:ff:30:b2: d0:0f:ed:49:e1:39:05:f3:ae:40:ca:b9:75:0e:e0:a4:0b:a4: 10:39:2e:79:2b:84:28:73:27:b3:c0:39:5e:54:17:e1:10:2a: 97:b9:f9:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssaG6iCyf6dyWiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OTFjZTAwZGYtNzVkMi00ZDYxLWJkZTYtMzY5YjM4NjA0YjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo5H4LqHUNOIaJ5l5IUWfIiiIhvDRiiyrOB9 rxGeMcRY6Efbkqjsz0Fb42dRL0e947QbK0njB6e+pL8qx2IFmc5Vlhr4IjOTKwQ9 MVY7WXTAq6VV5t7ErgR2Cpr1M+a4FgOK/BkfjZyStmhDOTKBPimql2guXE1kctZk SfljC7/iXAAOJrq/Ss+JH82EWtuWi2NMRttAM0uv99o01xYJJgDa7qlxO4azW4c9 6ZnJ6EBe4j1DYAL1Bc+dpa1hiWBwsWFXl7dntJgyfOh7pgwGbpFZ83fMQrGMwuLb 5xZeis8ep5iOPrljs+FUBLNHjSZYfnnRJf/ZaQHB+z65mpZQAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4nc0khe61cgNlmvnZAXTstLG1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2U4ODE3NTAtYTQ3ZC0z MGJhLTliYjEtNDY0NjhlYzU2MWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANbaCS8xC/CdD+ZF9P2TJR3rmQ54slixZ8w9ZviLl2bT85xWzu979cfy 9cVW1avTt3cw3AWwSive0I3Y8TY/nMTUDwiVmHaOCumhBwa1//w+Cs1l4WY4gH9T M+kg9kIQ9cWawlQO7MIpsgagEei4qBnBXX7fFf4afj9VJXUMia0Dus1LLzJwFNjs So3A+/YYmQ+MeJRQMgukg6tVukTc8lSeKTOC9Zo0yofGm8BnwVknU5fmGNuNxtzz GAiZsGkLNODd5bAqk0LwmysUixQv400z92Dcy/8wstAP7UnhOQXzrkDKuXUO4KQL pBA5LnkrhChzJ7PAOV5UF+EQKpe5+Y4= -----END CERTIFICATE-----Generated at Tue Apr 29 12:11:16 2025 by rpki-client