$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18a68ce5-473a-3cd2-aba6-74a1a562ae36.roa File: 18a68ce5-473a-3cd2-aba6-74a1a562ae36.roa (raw, json) Hash identifier: trMMZ9ox+Cst2XYGuzyQLRijayuVaG0HJwO4GujRuFw= Subject key identifier: 40:87:9E:15:DE:BA:D8:D9:DD:0C:2D:2E:4C:BC:D4:64:3D:5D:A5:92 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C05FCB07E74BF2C976D771D Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18a68ce5-473a-3cd2-aba6-74a1a562ae36.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33287 IP address blocks: 73.233.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:fc:b0:7e:74:bf:2c:97:6d:77:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=2bad3a57-6528-4487-8d71-d3ebd0bc268b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:34:66:9b:51:12:ce:96:65:63:c3:ac:17:79: 95:71:93:04:a2:1f:31:50:36:05:a7:91:f7:75:f1: 20:39:d7:39:09:87:86:d1:29:7e:6f:cc:1a:7f:fa: 09:a3:53:28:2d:4d:29:bc:4c:74:cc:f2:0a:23:5f: d7:01:d3:2d:69:7b:dd:80:0d:92:ff:41:6a:d7:93: ff:3e:39:76:f9:86:19:41:ea:76:f8:35:7c:ba:75: 32:ce:19:bb:19:00:93:ae:c7:aa:8f:01:39:44:bc: 4b:89:8e:e5:77:7d:9d:c9:8d:a9:9a:41:8d:7c:cf: 61:00:68:32:87:52:c0:68:f8:60:03:29:e9:5b:90: 89:25:e9:26:52:8f:21:60:d2:39:9a:50:e1:2c:52: 81:b4:7a:89:46:5a:e1:85:c5:bb:9e:10:e2:61:db: a0:71:d3:d5:ee:2d:f0:18:21:0c:cd:32:80:fd:b0: 9b:e2:4c:31:f2:b8:96:fb:cb:04:1a:a4:50:a6:18: fc:3c:9c:bd:9e:85:6a:e6:82:46:23:9f:59:75:1c: d5:e4:b1:53:f7:9b:60:f4:b2:e1:17:e9:f6:f1:6b: 42:8d:5a:68:13:3b:74:9a:40:63:00:3e:02:26:20: 7e:0b:21:ec:b2:78:a1:13:71:de:20:48:25:28:8c: 24:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:87:9E:15:DE:BA:D8:D9:DD:0C:2D:2E:4C:BC:D4:64:3D:5D:A5:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18a68ce5-473a-3cd2-aba6-74a1a562ae36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.233.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:44:be:fd:4d:29:a5:f2:18:6d:e5:b0:21:8b:63:3d:9e:f6: 35:c0:81:d8:1c:c3:a2:84:f7:4a:17:e2:04:b2:3e:3f:91:16: b6:98:46:e0:8c:2d:4d:e1:57:bf:e6:ba:6d:94:46:16:48:b9: cf:b4:4f:ec:41:23:b0:db:80:eb:f9:b2:6b:87:47:03:61:09: cb:2b:0d:5d:d2:36:e3:e0:13:77:ec:a6:4a:4e:d2:55:e2:eb: ee:39:7c:09:55:da:bf:c7:9a:5a:41:94:2f:80:84:09:17:9a: 0b:d9:f6:27:4e:ce:41:d3:ac:f5:4d:68:d1:47:66:4e:de:46: 9d:bb:79:c4:8e:6f:68:84:09:10:b6:8e:63:c3:32:dd:18:ab: 06:b3:44:7d:38:eb:65:f2:43:08:9a:9c:4f:f3:87:d8:a3:cf: c5:12:36:80:49:7f:1b:a9:8e:b7:15:f2:c2:ba:c2:b3:4e:96: b7:16:fd:e7:e7:ac:be:6d:c7:cf:25:35:8c:75:9d:7c:c8:e7: 3f:99:48:f2:58:bd:22:aa:d5:b3:7e:86:e7:50:36:94:84:57: 78:7b:17:6f:62:16:68:ab:e4:c4:e5:7a:11:1c:ce:32:f1:1a: ba:fc:96:6e:3a:7e:8a:5c:73:2d:3a:1e:af:ef:7e:08:98:1f: 1d:8c:46:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBfywfnS/LJdtdx0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MmJhZDNhNTctNjUyOC00NDg3LThkNzEtZDNlYmQwYmMyNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjRmm1ESzpZlY8OsF3mVcZMEoh8xUDYFp5H3 dfEgOdc5CYeG0Sl+b8waf/oJo1MoLU0pvEx0zPIKI1/XAdMtaXvdgA2S/0Fq15P/ Pjl2+YYZQep2+DV8unUyzhm7GQCTrseqjwE5RLxLiY7ld32dyY2pmkGNfM9hAGgy h1LAaPhgAynpW5CJJekmUo8hYNI5mlDhLFKBtHqJRlrhhcW7nhDiYdugcdPV7i3w GCEMzTKA/bCb4kwx8riW+8sEGqRQphj8PJy9noVq5oJGI59ZdRzV5LFT95tg9LLh F+n28WtCjVpoEzt0mkBjAD4CJiB+CyHssnihE3HeIEglKIwkbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECHnhXeutjZ3QwtLky81GQ9XaWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMThhNjhjZTUtNDczYS0z Y2QyLWFiYTYtNzRhMWE1NjJhZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSeneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtEvv1NKaXyGG3lsCGLYz2e9jXAgdgcw6KE90oX4gSyPj+RFraYRuCM LU3hV7/mum2URhZIuc+0T+xBI7DbgOv5smuHRwNhCcsrDV3SNuPgE3fspkpO0lXi 6+45fAlV2r/HmlpBlC+AhAkXmgvZ9idOzkHTrPVNaNFHZk7eRp27ecSOb2iECRC2 jmPDMt0YqwazRH0462XyQwianE/zh9ijz8USNoBJfxupjrcV8sK6wrNOlrcW/efn rL5tx88lNYx1nXzI5z+ZSPJYvSKq1bN+hudQNpSEV3h7F29iFmir5MTlehEczjLx Grr8lm46fopccy06Hq/vfgiYHx2MRgM= -----END CERTIFICATE-----Generated at Tue Jun 3 05:59:59 2025 by rpki-client