$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08fc74e4-37cb-3b1b-8a22-a47e5801a8e4.roa File: 08fc74e4-37cb-3b1b-8a22-a47e5801a8e4.roa (raw, json) Hash identifier: 5M0PZTxaqWl6vjmTjX2YFMAOfqCJ1Vm5AuIlqJ45bag= Subject key identifier: FB:2F:FF:0B:B2:C2:55:96:8C:89:18:5A:2F:DE:DA:44:CF:48:FF:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C075A1AFCD3AC7B03752E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08fc74e4-37cb-3b1b-8a22-a47e5801a8e4.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33659 IP address blocks: 73.194.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:5a:1a:fc:d3:ac:7b:03:75:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=4f2e7bff-78c1-4d69-9686-0272630260ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6c:dc:b4:3d:92:93:32:3a:a9:2f:59:64:45: fb:77:9b:57:4b:18:c1:a8:c5:c7:fb:88:b6:48:19: e6:22:bf:97:27:b4:37:5c:b5:4f:18:6a:b5:02:10: 0b:0e:41:49:ec:cb:f2:23:18:c3:a9:c0:f9:c2:05: 19:cb:d9:cb:67:4d:cb:0c:d9:e5:dd:2c:1e:e1:74: f3:09:11:5e:10:44:76:57:a6:1f:47:0b:26:39:99: 4b:45:8e:2e:ae:52:1d:52:27:bf:e8:ac:d3:fa:d2: 42:b5:6d:e6:c9:ef:f8:ec:f8:21:69:a5:76:9f:f1: f5:cc:bc:bd:22:c1:ad:e7:94:b6:75:3b:fb:01:b8: 7c:ca:6e:ab:c3:49:82:c1:79:00:97:0e:2a:cd:74: 5e:3f:03:7d:ca:15:6b:ba:2b:4f:a5:58:bd:f0:33: 86:65:02:7b:70:64:d6:c5:95:71:62:a8:3e:3a:e2: a3:31:c6:e5:a3:4d:2b:28:b5:40:77:d9:89:23:67: f4:ec:bd:52:93:7d:01:cf:b9:44:df:89:dd:53:47: ad:53:af:55:40:2e:28:de:93:ea:4b:16:90:b9:4b: 9a:7b:1d:22:26:65:a7:60:59:df:db:ef:d8:6e:77: 25:87:11:1e:e1:94:ef:ca:4d:18:f8:f2:47:98:ec: a1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2F:FF:0B:B2:C2:55:96:8C:89:18:5A:2F:DE:DA:44:CF:48:FF:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08fc74e4-37cb-3b1b-8a22-a47e5801a8e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.194.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:12:ae:b9:8a:dd:d5:f5:df:a2:f7:88:88:c5:32:4e:6f:e1: 49:8f:41:cb:4d:e8:7c:bd:2a:e8:a5:9e:2f:28:a4:bb:10:ce: 31:5e:49:ef:5e:e7:8c:34:ed:ee:f2:43:85:b5:23:1b:0e:e7: 6f:2b:1d:7d:c9:52:2e:23:c8:52:0f:73:8c:18:23:d3:b9:d6: 59:7b:84:00:c0:1a:1a:20:07:5b:a0:32:38:97:97:2b:d4:1a: 7e:5a:22:3c:e6:c2:9b:c6:ed:59:ca:0d:22:be:4d:96:2c:dd: 80:01:d6:5f:a7:83:03:b4:aa:51:9d:42:6f:21:7d:70:41:0f: 91:1b:37:4e:87:cd:74:77:90:1b:42:94:57:2a:f0:1b:9f:de: 59:cb:ed:68:1f:ab:51:ce:34:a2:4f:08:33:3e:33:5f:99:bc: 3c:1b:aa:46:16:e5:4f:3b:53:bb:25:03:39:c8:57:0e:85:ef: f1:51:70:9e:8e:67:71:78:e5:f9:3d:16:35:05:0d:33:6e:0c: 7f:2c:a6:d2:f8:ad:51:f4:4f:5d:f7:9d:f5:5d:ed:e9:6c:1c: 22:bf:7e:2d:d6:49:8d:4b:0f:6b:8f:da:43:93:b3:0e:0f:cd: 18:03:6d:a1:50:d3:4f:9d:75:50:c4:3e:ad:cb:51:f6:f8:f5: 4c:40:f2:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB1oa/NOsewN1LgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NGYyZTdiZmYtNzhjMS00ZDY5LTk2ODYtMDI3MjYzMDI2MGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWzctD2SkzI6qS9ZZEX7d5tXSxjBqMXH+4i2 SBnmIr+XJ7Q3XLVPGGq1AhALDkFJ7MvyIxjDqcD5wgUZy9nLZ03LDNnl3Swe4XTz CRFeEER2V6YfRwsmOZlLRY4urlIdUie/6KzT+tJCtW3mye/47PghaaV2n/H1zLy9 IsGt55S2dTv7Abh8ym6rw0mCwXkAlw4qzXRePwN9yhVruitPpVi98DOGZQJ7cGTW xZVxYqg+OuKjMcblo00rKLVAd9mJI2f07L1Sk30Bz7lE34ndU0etU69VQC4o3pPq SxaQuUuaex0iJmWnYFnf2+/YbnclhxEe4ZTvyk0Y+PJHmOyhAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsv/wuywlWWjIkYWi/e2kTPSP9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDhmYzc0ZTQtMzdjYi0z YjFiLThhMjItYTQ3ZTU4MDFhOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScKMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4SrrmK3dX136L3iIjFMk5v4UmPQctN6Hy9Kuilni8opLsQzjFeSe9e 54w07e7yQ4W1IxsO528rHX3JUi4jyFIPc4wYI9O51ll7hADAGhogB1ugMjiXlyvU Gn5aIjzmwpvG7VnKDSK+TZYs3YAB1l+ngwO0qlGdQm8hfXBBD5EbN06HzXR3kBtC lFcq8Buf3lnL7Wgfq1HONKJPCDM+M1+ZvDwbqkYW5U87U7slAznIVw6F7/FRcJ6O Z3F45fk9FjUFDTNuDH8sptL4rVH0T133nfVd7elsHCK/fi3WSY1LD2uP2kOTsw4P zRgDbaFQ00+ddVDEPq3LUfb49UxA8oE= -----END CERTIFICATE-----Generated at Tue Jun 3 05:02:00 2025 by rpki-client