$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b16b5048-e966-3593-be5d-11f20f4bb17a.roa File: b16b5048-e966-3593-be5d-11f20f4bb17a.roa (raw, json) Hash identifier: Wyysld1mRHr3TNRSsbVnhXyxVdrwN59TvTmBVemTpBA= Subject key identifier: A8:9D:7B:2A:B6:F3:D3:B9:1E:7E:1D:A9:24:6C:0B:60:1E:D8:A4:E0 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F43285849D4A5C534E0DE0D0DB2A6F780 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b16b5048-e966-3593-be5d-11f20f4bb17a.roa Signing time: Mon 12 May 2025 16:59:12 +0000 ROA not before: Mon 12 May 2025 16:59:12 +0000 ROA not after: Sun 10 Aug 2025 16:59:12 +0000 asID: 174 IP address blocks: 173.232.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:a5:c5:34:e0:de:0d:0d:b2:a6:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: May 12 16:59:12 2025 GMT Not After : Aug 10 16:59:12 2025 GMT Subject: CN=ab2a920f-88e6-4aa4-b113-35ddbeef2f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4c:3d:3d:30:65:a2:25:61:be:c9:91:4b:02: 1d:0d:d2:de:0e:11:cd:ab:cb:f2:3f:09:fa:88:52: ce:0c:8e:fe:c9:3d:60:a1:ab:20:d0:9f:ef:5d:68: 36:b4:f8:59:07:03:39:a8:47:46:23:47:aa:41:16: ba:5a:18:f5:5a:a2:19:89:40:09:63:1e:93:ed:eb: e7:4f:4c:6e:f8:70:30:b7:1d:54:83:7f:f8:72:5f: 12:93:46:c6:b1:d7:b5:ed:4c:04:95:75:7a:d5:d3: bc:93:99:81:c9:1d:5d:8f:05:a7:2f:7f:99:40:3f: ce:08:eb:fe:50:4a:76:38:27:ed:53:e5:72:a4:8c: f1:29:70:61:a9:97:34:98:c8:36:58:9b:91:a9:2a: 27:aa:45:9c:e3:b2:16:65:c5:bd:3c:81:89:d7:a4: 41:fb:ee:f9:3c:06:ad:69:01:6b:7b:d1:ee:ce:8e: 3a:09:65:84:2f:a6:c8:07:36:9a:87:a7:2c:ef:8b: c6:6a:8a:b7:07:b4:d4:f9:da:04:97:e8:32:6f:ed: 1c:78:18:2d:b3:8b:f4:a9:7a:90:06:3c:24:aa:7d: 71:c9:0c:71:39:c0:11:c5:81:23:0f:67:be:87:65: f6:3d:92:87:64:88:8c:03:3c:63:cf:f2:fc:27:6e: 42:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9D:7B:2A:B6:F3:D3:B9:1E:7E:1D:A9:24:6C:0B:60:1E:D8:A4:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b16b5048-e966-3593-be5d-11f20f4bb17a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b9:1e:a1:14:15:db:10:ff:8e:7a:38:7b:cd:e4:2a:85:de: 13:b8:d4:63:87:72:0a:ea:8f:7d:8c:8a:56:9b:63:d0:73:68: 92:9c:88:6c:71:98:17:c0:28:af:0a:d8:a2:e8:53:8c:30:35: fc:55:2c:1a:92:bc:cb:7a:ae:71:f9:82:14:cf:f2:f7:e1:8a: d9:a4:59:77:44:46:e1:7a:69:4a:1e:b0:2c:31:4b:64:5e:ec: 7a:4d:f4:c5:26:12:a3:9a:77:b4:6b:22:24:d0:65:88:05:9b: fe:4d:07:79:40:b3:a1:41:47:90:b5:f3:66:22:50:5e:f7:e4: 62:48:f1:e9:72:44:35:ae:ec:9b:eb:50:50:d7:91:0c:41:22: 38:6e:2a:52:d0:78:9e:14:74:9c:82:8a:ea:53:bd:97:90:76: ca:71:38:20:df:77:42:45:27:f3:86:6e:e7:07:3d:9f:f0:b7: ee:58:e9:81:9e:f2:6c:06:85:9f:2c:3d:4d:69:5a:50:20:ad: 61:74:d6:1c:d4:d0:1d:59:f5:2f:1b:6d:b0:46:8e:44:c9:f0: d8:fb:44:98:b4:79:47:6d:ab:a5:b4:c5:23:b4:5b:a8:d2:50: 0f:87:f2:19:ee:e5:55:ba:99:46:6e:d4:48:3e:3f:39:4f:89: b5:58:18:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUpcU04N4NDbKm94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDUxMjE2NTkxMloXDTI1MDgxMDE2NTkxMlowLzEtMCsGA1UEAxMk YWIyYTkyMGYtODhlNi00YWE0LWIxMTMtMzVkZGJlZWYyZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEw9PTBloiVhvsmRSwIdDdLeDhHNq8vyPwn6 iFLODI7+yT1goasg0J/vXWg2tPhZBwM5qEdGI0eqQRa6Whj1WqIZiUAJYx6T7evn T0xu+HAwtx1Ug3/4cl8Sk0bGsde17UwElXV61dO8k5mByR1djwWnL3+ZQD/OCOv+ UEp2OCftU+VypIzxKXBhqZc0mMg2WJuRqSonqkWc47IWZcW9PIGJ16RB++75PAat aQFre9Huzo46CWWEL6bIBzaah6cs74vGaoq3B7TU+doEl+gyb+0ceBgts4v0qXqQ Bjwkqn1xyQxxOcARxYEjD2e+h2X2PZKHZIiMAzxjz/L8J25CkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKideyq289O5Hn4dqSRsC2Ae2KTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYjE2YjUwNDgtZTk2Ni0z NTkzLWJlNWQtMTFmMjBmNGJiMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArehfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE65HqEUFdsQ/456OHvN5CqF3hO41GOHcgrqj32MilabY9BzaJKciGxx mBfAKK8K2KLoU4wwNfxVLBqSvMt6rnH5ghTP8vfhitmkWXdERuF6aUoesCwxS2Re 7HpN9MUmEqOad7RrIiTQZYgFm/5NB3lAs6FBR5C182YiUF735GJI8elyRDWu7Jvr UFDXkQxBIjhuKlLQeJ4UdJyCiupTvZeQdspxOCDfd0JFJ/OGbucHPZ/wt+5Y6YGe 8mwGhZ8sPU1pWlAgrWF01hzU0B1Z9S8bbbBGjkTJ8Nj7RJi0eUdtq6W0xSO0W6jS UA+H8hnu5VW6mUZu1Eg+PzlPibVYGJA= -----END CERTIFICATE-----Generated at Tue May 13 20:51:26 2025 by rpki-client