$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a985a80-046a-3781-881e-6b9895aea7f8.roa File: 0a985a80-046a-3781-881e-6b9895aea7f8.roa (raw, json) Hash identifier: jTrEDV/RdJQotWLSJ3fGwra41m/IGCWXvA423IwvjbQ= Subject key identifier: F4:8F:20:55:FC:C6:86:AB:5A:5B:3C:71:87:BF:ED:9E:4A:D3:78:9C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF757CCA7AF8FF8E28E664C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a985a80-046a-3781-881e-6b9895aea7f8.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 33287 IP address blocks: 73.165.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:7c:ca:7a:f8:ff:8e:28:e6:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=4fdb3515-9fca-4c85-a2a9-82619b656f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d6:27:1a:8a:73:40:02:eb:66:62:82:0c:7d: bc:fc:04:a6:a9:f6:9d:26:a1:84:e6:fd:95:90:60: 87:a4:72:ff:a8:97:8f:a2:92:f9:f9:3d:68:c3:51: 3a:10:14:c4:99:ec:2c:0a:aa:d3:92:2a:33:10:1b: fd:37:a7:9b:ca:2d:36:33:4c:a0:09:69:6a:19:36: d7:11:16:55:10:7d:b6:dd:7b:4a:2a:1b:3a:32:42: ca:05:ba:57:71:d6:6d:89:65:80:70:ed:42:b9:ec: fd:e3:5d:19:40:c9:64:45:b6:cb:80:78:12:6f:aa: 09:8c:c2:15:27:23:80:e2:20:44:2a:61:e2:f9:e2: 2d:d3:b9:9a:ab:2a:d6:81:5d:16:14:36:c3:1d:a7: 3f:15:cf:20:a6:cd:b2:ed:b7:14:6c:d3:56:9b:d9: cb:95:66:a6:fa:ec:58:ca:b3:d9:5d:5c:3c:ee:51: 9c:e6:b7:66:a3:85:45:68:a7:7c:de:4e:9b:14:ad: ca:be:27:d9:f4:91:0b:2c:d6:9a:e7:a0:c8:3f:95: a1:7c:50:47:12:23:db:b6:80:78:21:2e:c0:6f:a5: 7a:2f:4f:4d:83:b2:c3:9b:5a:05:38:25:ad:b8:5e: 90:e7:7b:e0:e9:6c:ee:82:f4:30:76:c8:42:8d:c3: 92:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8F:20:55:FC:C6:86:AB:5A:5B:3C:71:87:BF:ED:9E:4A:D3:78:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a985a80-046a-3781-881e-6b9895aea7f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.165.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:40:3a:c7:7c:70:3b:4c:d2:a1:4e:db:ef:b6:61:da:55:4f: 1d:01:7f:9b:c8:ad:6b:aa:eb:ca:29:b2:dd:75:f4:49:c3:0b: f0:1e:81:4a:ef:b1:ff:cd:66:76:30:5a:ca:63:c5:1d:4a:5d: df:d7:50:0c:d1:82:fc:16:05:a7:79:8c:8f:b3:a8:7a:b8:50: c5:be:2e:ec:1d:1d:ff:ae:27:07:0a:4a:57:f9:20:dc:40:cf: 98:31:9d:2f:a4:9e:0b:1c:3f:7b:55:2f:d9:0a:a5:ea:5f:6e: 41:ea:47:eb:e9:92:95:93:8e:6d:ab:bf:0b:d8:8e:16:c3:56: bd:98:63:21:83:f9:a8:c6:2f:6c:4b:1c:ec:f5:51:c5:9e:95: cd:4d:a9:3c:2d:ac:db:6b:16:84:be:e0:97:ec:38:94:2b:ac: de:5f:9d:3c:aa:80:09:fe:6f:26:7a:3d:06:1e:91:4e:3f:79: 96:f2:59:c5:5c:27:16:35:58:c6:74:02:1b:44:9d:8a:e8:e8: 87:03:1a:21:d3:44:4c:2e:84:c8:01:fb:48:cb:2b:cd:41:db: 0a:66:ec:00:6b:c4:51:bd:0f:04:53:00:ed:a0:f6:b4:e3:a9: c1:31:e4:7f:b2:c3:37:03:88:a4:48:69:84:30:05:08:f4:77: c2:6d:97:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dXzKevj/jijmZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk NGZkYjM1MTUtOWZjYS00Yzg1LWEyYTktODI2MTliNjU2ZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtYnGopzQALrZmKCDH28/ASmqfadJqGE5v2V kGCHpHL/qJePopL5+T1ow1E6EBTEmewsCqrTkiozEBv9N6ebyi02M0ygCWlqGTbX ERZVEH223XtKKhs6MkLKBbpXcdZtiWWAcO1Cuez9410ZQMlkRbbLgHgSb6oJjMIV JyOA4iBEKmHi+eIt07maqyrWgV0WFDbDHac/Fc8gps2y7bcUbNNWm9nLlWam+uxY yrPZXVw87lGc5rdmo4VFaKd83k6bFK3KvifZ9JELLNaa56DIP5WhfFBHEiPbtoB4 IS7Ab6V6L09Ng7LDm1oFOCWtuF6Q53vg6WzugvQwdshCjcOSHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSPIFX8xoarWls8cYe/7Z5K03icMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGE5ODVhODAtMDQ2YS0z NzgxLTg4MWUtNmI5ODk1YWVhN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSaXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpAOsd8cDtM0qFO2++2YdpVTx0Bf5vIrWuq68opst119EnDC/AegUrv sf/NZnYwWspjxR1KXd/XUAzRgvwWBad5jI+zqHq4UMW+LuwdHf+uJwcKSlf5INxA z5gxnS+kngscP3tVL9kKpepfbkHqR+vpkpWTjm2rvwvYjhbDVr2YYyGD+ajGL2xL HOz1UcWelc1NqTwtrNtrFoS+4JfsOJQrrN5fnTyqgAn+byZ6PQYekU4/eZbyWcVc JxY1WMZ0AhtEnYro6IcDGiHTREwuhMgB+0jLK81B2wpm7ABrxFG9DwRTAO2g9rTj qcEx5H+ywzcDiKRIaYQwBQj0d8Jtl6I= -----END CERTIFICATE-----Generated at Tue Jun 3 06:54:38 2025 by rpki-client