$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2aa2ffc-0dc1-3c81-8b3e-cb2e818fbde3.roa File: b2aa2ffc-0dc1-3c81-8b3e-cb2e818fbde3.roa (raw, json) Hash identifier: Pfx2BGUUlJ6xGMEYOyy/QHc4lCxq2vC1A0JQx3TcmU0= Subject key identifier: 07:EF:51:79:7C:40:5D:0B:83:AA:72:79:7E:ED:78:CA:70:B5:C0:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAEACF1E2E91929A819BE40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2aa2ffc-0dc1-3c81-8b3e-cb2e818fbde3.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33660 IP address blocks: 73.65.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:ac:f1:e2:e9:19:29:a8:19:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f9fba4c6-a94e-4c1b-9680-4e1c41c443a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:01:dd:1c:e3:b7:d5:bc:0d:f1:65:75:b6:49: b9:a0:b7:cc:8e:b1:46:7c:6e:08:cc:15:4a:53:e3: c4:7f:4f:81:3c:c7:47:e2:f4:f0:94:fa:f6:2e:7f: eb:8f:9a:bc:81:a5:91:73:47:27:44:93:96:25:68: 01:c7:06:75:cb:d5:c8:6c:ab:32:1c:d3:65:39:a5: 57:59:55:a8:4c:88:60:8f:60:8d:30:dd:08:93:8b: e0:5b:3f:26:35:9e:03:1e:d2:1a:3d:1f:46:3b:89: a7:f0:6c:06:bf:00:ca:e7:ee:9b:7c:60:59:e7:33: ee:24:a6:b2:4a:36:94:4c:b3:cd:1e:78:46:9c:88: d0:b6:da:23:bb:e5:53:73:63:77:46:b6:69:6e:f5: 76:77:af:23:d2:a1:61:70:88:f8:0b:99:be:07:3b: d0:67:87:92:8e:1e:07:18:c8:99:3a:73:1a:3f:50: 8a:e9:92:cd:fc:75:ae:46:eb:69:78:13:d3:a1:81: d0:8f:f3:af:92:4a:5e:98:d6:c4:51:11:04:62:4d: a6:21:83:e4:c6:d7:e1:05:24:f8:93:2d:2c:8c:19: e7:b3:d4:b4:2d:69:b2:f3:66:c7:dc:5b:c9:07:39: 70:93:64:a8:40:f9:3e:ed:52:39:5d:e8:bd:1b:46: 2d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EF:51:79:7C:40:5D:0B:83:AA:72:79:7E:ED:78:CA:70:B5:C0:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2aa2ffc-0dc1-3c81-8b3e-cb2e818fbde3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.65.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:90:e8:bf:61:3f:34:a2:df:42:94:16:0e:7a:55:73:75:2f: bd:30:b6:e2:7a:ed:69:b2:60:41:a2:8e:3c:c5:51:19:46:41: 61:6f:29:8d:b8:74:18:36:86:41:0c:6f:28:5a:e9:e9:09:a5: 10:ba:c2:71:35:dd:b8:b9:f4:3f:73:a8:ad:df:9b:e6:bd:b0: 10:d7:65:8d:5f:ab:d7:64:f0:6f:4b:d7:c6:16:68:6a:23:cf: 68:53:01:34:69:17:02:16:a7:3c:f6:98:4f:73:53:9c:dd:7a: a6:b3:4c:9a:ee:19:b3:db:db:d0:b1:58:4f:fa:77:5d:91:9f: db:e9:ed:6a:a0:75:09:18:e5:2b:32:5a:cf:0e:2a:66:30:cf: 2b:75:cd:b1:56:c7:36:4e:96:74:a1:04:2c:ef:fd:e7:03:6a: 1c:7b:57:a0:a2:b1:7e:af:70:66:96:f3:8d:c2:48:51:e7:12: f5:1d:32:6f:53:72:55:b8:40:51:52:ad:1f:b7:f2:f4:b6:72: f6:92:93:e8:82:92:f5:ad:1d:e6:0a:02:4a:08:fa:fa:56:e9: 22:f7:93:dd:b5:a3:b0:c4:f2:cb:66:76:59:94:34:b9:b0:6b: 34:73:78:be:5e:b6:a7:0a:ec:d6:5d:0a:16:84:4f:5f:cc:21: 77:f2:a3:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrqzx4ukZKagZvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjlmYmE0YzYtYTk0ZS00YzFiLTk2ODAtNGUxYzQxYzQ0M2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAHdHOO31bwN8WV1tkm5oLfMjrFGfG4IzBVK U+PEf0+BPMdH4vTwlPr2Ln/rj5q8gaWRc0cnRJOWJWgBxwZ1y9XIbKsyHNNlOaVX WVWoTIhgj2CNMN0Ik4vgWz8mNZ4DHtIaPR9GO4mn8GwGvwDK5+6bfGBZ5zPuJKay SjaUTLPNHnhGnIjQttoju+VTc2N3RrZpbvV2d68j0qFhcIj4C5m+BzvQZ4eSjh4H GMiZOnMaP1CK6ZLN/HWuRutpeBPToYHQj/OvkkpemNbEUREEYk2mIYPkxtfhBST4 ky0sjBnns9S0LWmy82bH3FvJBzlwk2SoQPk+7VI5Xei9G0YtHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfvUXl8QF0Lg6pyeX7teMpwtcB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjJhYTJmZmMtMGRjMS0z YzgxLThiM2UtY2IyZTgxOGZiZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASUG/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaQ6L9hPzSi30KUFg56VXN1L70wtuJ67WmyYEGijjzFURlGQWFvKY24 dBg2hkEMbyha6ekJpRC6wnE13bi59D9zqK3fm+a9sBDXZY1fq9dk8G9L18YWaGoj z2hTATRpFwIWpzz2mE9zU5zdeqazTJruGbPb29CxWE/6d12Rn9vp7WqgdQkY5Ssy Ws8OKmYwzyt1zbFWxzZOlnShBCzv/ecDahx7V6CisX6vcGaW843CSFHnEvUdMm9T clW4QFFSrR+38vS2cvaSk+iCkvWtHeYKAkoI+vpW6SL3k921o7DE8stmdlmUNLmw azRzeL5etqcK7NZdChaET1/MIXfyo4k= -----END CERTIFICATE-----Generated at Sat May 10 11:40:15 2025 by rpki-client