$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba856736-f5e3-3382-b1de-dd3e763c2681.roa File: ba856736-f5e3-3382-b1de-dd3e763c2681.roa (raw, json) Hash identifier: 7rB+GCKzUB2TcLbajWfTH1IdW1cSNy9mt1FNoJ5F0p4= Subject key identifier: C9:6D:F4:C8:5C:3A:7E:43:5E:B2:78:3C:7D:24:75:5B:EF:9D:A1:C1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF04DCD79BE678AFEAAD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba856736-f5e3-3382-b1de-dd3e763c2681.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 69.253.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:04:dc:d7:9b:e6:78:af:ea:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=3c8339ce-acaf-4a8a-9328-49a08b298e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:69:56:3b:80:10:c3:d3:70:80:6d:86:e8: 5d:3a:75:a6:be:a2:20:78:83:02:29:47:d1:9f:07: 8d:9d:88:3d:95:32:e6:71:d9:ff:a1:c7:4a:c0:bb: b4:2c:d8:40:e6:4f:d7:d4:8c:16:87:fe:29:30:df: e7:e2:4f:b5:d6:05:06:b3:41:ee:df:af:01:74:0e: ed:e0:17:91:da:e0:52:4b:0e:9b:54:0c:58:19:97: d4:00:66:4f:8c:ed:b4:9e:fd:79:64:13:db:3a:3a: ee:3f:84:dd:f8:7e:58:28:1f:68:64:83:33:09:76: 1d:56:97:2f:90:ef:a5:e5:b3:fd:74:e9:e6:dd:63: 27:02:1d:da:88:c6:00:72:02:48:4f:82:d5:7b:e6: 3f:23:5d:8e:a1:c5:ea:d0:61:dc:93:89:fd:a9:5b: 15:af:04:db:23:a6:b9:e6:24:17:8d:1a:94:64:4d: aa:0b:d2:0f:46:2f:5f:a0:de:a3:c9:45:5b:e2:bc: d0:00:e2:b0:e6:b8:36:c3:5d:1f:71:3a:28:15:5b: 73:cb:2e:81:94:76:3d:a0:79:db:d8:d7:f4:57:ba: 69:0c:fa:c9:64:b0:4c:30:c3:2b:5a:72:55:97:55: 61:1f:f3:8d:70:27:3d:65:4a:a9:34:3d:c0:b7:d1: e1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6D:F4:C8:5C:3A:7E:43:5E:B2:78:3C:7D:24:75:5B:EF:9D:A1:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba856736-f5e3-3382-b1de-dd3e763c2681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.253.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:14:28:22:c7:01:54:91:b8:4e:b3:65:3d:9f:dc:90:f4:3a: 98:b2:b0:c5:3d:09:23:a0:05:e2:ba:cd:4f:c3:26:ce:2a:ff: 7f:99:5c:bf:04:f5:c9:a3:46:32:d3:c2:46:8b:2a:77:41:21: 14:84:ef:c4:7b:b8:d1:79:3a:09:b7:62:b1:7e:df:4e:45:ed: 60:30:9e:d2:73:c4:85:4c:2d:60:ee:ca:6c:8c:a6:d6:1e:14: 45:b5:b2:ea:13:bf:98:5e:ee:3f:7e:03:72:3e:f2:6f:a8:2a: b3:fa:7b:19:3d:bc:77:2f:1c:bc:da:87:bd:6a:17:2a:96:ee: 3e:55:3f:aa:cf:98:72:ab:ea:5b:0a:25:61:17:52:94:a0:bf: 7e:8b:2b:fd:d6:4a:e8:24:5c:68:53:26:62:f2:d4:ee:e3:8a: 65:bc:38:bd:fb:a7:41:8a:c9:2a:84:27:41:d8:37:32:58:3d: bd:db:3c:de:3b:16:a3:e7:ad:a3:72:7c:ea:6d:f8:03:59:f8: 77:bc:f1:98:ab:5e:26:c5:99:be:64:10:f7:b7:7d:e2:78:c9: f5:35:00:e9:93:c2:33:e9:ad:b1:5e:a7:46:f8:fc:6b:e4:b8: 26:d0:b5:90:dd:9f:3e:a9:91:d6:97:44:36:de:ad:50:40:9a: e8:2c:f5:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrwTc15vmeK/qrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk M2M4MzM5Y2UtYWNhZi00YThhLTkzMjgtNDlhMDhiMjk4ZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCVpVjuAEMPTcIBthuhdOnWmvqIgeIMCKUfR nweNnYg9lTLmcdn/ocdKwLu0LNhA5k/X1IwWh/4pMN/n4k+11gUGs0Hu368BdA7t 4BeR2uBSSw6bVAxYGZfUAGZPjO20nv15ZBPbOjruP4Td+H5YKB9oZIMzCXYdVpcv kO+l5bP9dOnm3WMnAh3aiMYAcgJIT4LVe+Y/I12OocXq0GHck4n9qVsVrwTbI6a5 5iQXjRqUZE2qC9IPRi9foN6jyUVb4rzQAOKw5rg2w10fcTooFVtzyy6BlHY9oHnb 2Nf0V7ppDPrJZLBMMMMrWnJVl1VhH/ONcCc9ZUqpND3At9HhGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlt9MhcOn5DXrJ4PH0kdVvvnaHBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmE4NTY3MzYtZjVlMy0z MzgyLWIxZGUtZGQzZTc2M2MyNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARf3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIUKCLHAVSRuE6zZT2f3JD0OpiysMU9CSOgBeK6zU/DJs4q/3+ZXL8E 9cmjRjLTwkaLKndBIRSE78R7uNF5Ogm3YrF+305F7WAwntJzxIVMLWDuymyMptYe FEW1suoTv5he7j9+A3I+8m+oKrP6exk9vHcvHLzah71qFyqW7j5VP6rPmHKr6lsK JWEXUpSgv36LK/3WSugkXGhTJmLy1O7jimW8OL37p0GKySqEJ0HYNzJYPb3bPN47 FqPnraNyfOpt+ANZ+He88ZirXibFmb5kEPe3feJ4yfU1AOmTwjPprbFep0b4/Gvk uCbQtZDdnz6pkdaXRDberVBAmugs9Vk= -----END CERTIFICATE-----Generated at Sun May 11 07:50:03 2025 by rpki-client