$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e8d90b3-847a-3640-aa19-de45608a05c2.roa File: 0e8d90b3-847a-3640-aa19-de45608a05c2.roa (raw, json) Hash identifier: tlVE2BhHJ4HFfW5y62jKVN54szHmlrwEHlRhV+chI3Q= Subject key identifier: 49:86:F5:88:E3:8A:FC:BE:B2:9E:E7:66:5E:E6:1B:00:FA:DA:36:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4325B15F4B041DC06746440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e8d90b3-847a-3640-aa19-de45608a05c2.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 73.76.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:5b:15:f4:b0:41:dc:06:74:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=58101a73-7722-4a6d-9bb1-057b2fe3ffa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c0:5f:46:b5:87:9a:0b:4a:a0:86:5b:1e:79: be:0b:36:87:ca:85:c3:6b:52:82:71:c9:77:0e:f6: f4:56:be:22:78:12:7b:bd:1c:ef:fd:50:c4:03:cd: 24:33:d6:97:c3:07:c0:42:f3:08:c4:d3:c7:35:d1: 07:8a:be:be:1b:0d:88:39:20:e0:6a:b7:1b:9e:c2: 00:d0:8b:99:2a:6e:52:7b:f9:31:fe:80:04:02:f8: a7:e1:e5:13:cb:0f:34:6f:8c:1c:44:bf:16:71:ae: 35:8b:bd:83:e4:62:3c:a4:9e:47:07:14:fd:2c:a3: 99:b1:81:b4:86:60:d6:b9:f5:26:db:8a:f5:61:38: 42:e4:5b:10:35:61:a6:72:b9:84:ae:97:f5:4d:00: 31:95:24:fb:d9:ca:2e:9a:48:d9:f7:62:14:3d:29: 21:25:18:7a:cf:0b:71:78:c7:34:49:77:e9:20:78: 65:2c:f4:3e:84:67:34:2d:b0:fb:a6:1b:71:2f:fd: b1:4f:1c:04:ba:5f:10:9b:49:d8:17:00:c1:ac:57: 1a:e5:d3:21:b6:a4:c4:85:37:20:1a:fd:a2:ad:9f: 05:e2:9f:c2:c5:bd:55:f2:67:f1:90:ab:c6:a6:c0: 3c:60:a2:76:3e:8a:20:72:6b:52:bd:c6:9b:89:76: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:86:F5:88:E3:8A:FC:BE:B2:9E:E7:66:5E:E6:1B:00:FA:DA:36:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e8d90b3-847a-3640-aa19-de45608a05c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.76.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d1:19:e7:8d:27:53:20:88:56:0f:13:1e:1e:e9:8c:6e:18: a6:5d:d3:62:e6:58:df:d2:f0:bf:08:4d:ad:01:49:6a:40:b3: 3d:7f:d7:c3:cd:eb:ae:a0:d8:39:8d:e5:f7:05:3b:78:8d:6a: aa:58:91:29:a6:23:4a:e1:0c:ee:a2:b5:97:ec:69:0a:dc:d5: 63:b7:c0:4b:de:44:c1:8f:9d:2d:bd:47:87:24:c5:1b:b9:79: 1f:ab:84:fb:19:a4:60:6b:9a:dd:ca:bb:a2:11:10:07:3a:53: 5f:2e:0a:e4:b4:0f:ed:66:18:bc:fc:41:78:37:d8:8a:e5:20: db:d4:f1:ab:47:5c:34:5a:b1:ec:46:23:21:9a:e3:bd:b0:03: fc:53:01:95:13:88:25:a1:22:44:00:aa:e0:6c:ba:6e:ea:fe: 0e:84:5b:34:7a:9a:ff:a8:1b:81:85:0c:6e:5e:60:5c:f9:36: 33:f7:93:49:6f:8f:99:62:da:21:fc:36:8f:82:61:0d:9e:b0: 55:0b:59:14:e5:63:8b:a5:69:af:d7:19:37:ba:e2:02:76:c3: ce:3b:ba:e8:85:c6:41:d0:79:d3:d3:1c:22:a3:9d:81:32:bd: c4:c4:4c:17:d7:aa:52:44:8f:fd:39:67:54:4a:39:dd:f7:88: 24:78:ba:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMlsV9LBB3AZ0ZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NTgxMDFhNzMtNzcyMi00YTZkLTliYjEtMDU3YjJmZTNmZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cBfRrWHmgtKoIZbHnm+CzaHyoXDa1KCccl3 Dvb0Vr4ieBJ7vRzv/VDEA80kM9aXwwfAQvMIxNPHNdEHir6+Gw2IOSDgarcbnsIA 0IuZKm5Se/kx/oAEAvin4eUTyw80b4wcRL8Wca41i72D5GI8pJ5HBxT9LKOZsYG0 hmDWufUm24r1YThC5FsQNWGmcrmErpf1TQAxlST72coumkjZ92IUPSkhJRh6zwtx eMc0SXfpIHhlLPQ+hGc0LbD7phtxL/2xTxwEul8Qm0nYFwDBrFca5dMhtqTEhTcg Gv2irZ8F4p/Cxb1V8mfxkKvGpsA8YKJ2PoogcmtSvcabiXbQLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmG9Yjjivy+sp7nZl7mGwD62jYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGU4ZDkwYjMtODQ3YS0z NjQwLWFhMTktZGU0NTYwOGEwNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSUxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvRGeeNJ1MgiFYPEx4e6YxuGKZd02LmWN/S8L8ITa0BSWpAsz1/18PN 666g2DmN5fcFO3iNaqpYkSmmI0rhDO6itZfsaQrc1WO3wEveRMGPnS29R4ckxRu5 eR+rhPsZpGBrmt3Ku6IREAc6U18uCuS0D+1mGLz8QXg32IrlINvU8atHXDRasexG IyGa472wA/xTAZUTiCWhIkQAquBsum7q/g6EWzR6mv+oG4GFDG5eYFz5NjP3k0lv j5li2iH8No+CYQ2esFULWRTlY4ulaa/XGTe64gJ2w847uuiFxkHQedPTHCKjnYEy vcTETBfXqlJEj/05Z1RKOd33iCR4ujE= -----END CERTIFICATE-----Generated at Tue Jun 3 05:57:57 2025 by rpki-client