$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bafdd1f-25a8-3d0c-a8da-bf03eabdf2c3.roa File: 2bafdd1f-25a8-3d0c-a8da-bf03eabdf2c3.roa (raw, json) Hash identifier: RX622Jf7bjHosiYVZDsb5HcEvVgqwLXWYBAIxE5t0zs= Subject key identifier: 27:2A:BD:12:40:20:A3:30:DC:DB:6A:26:B8:64:CB:93:F1:25:A7:A2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43214E244127E1830884380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bafdd1f-25a8-3d0c-a8da-bf03eabdf2c3.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 73.18.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:14:e2:44:12:7e:18:30:88:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=defe71ea-3318-4124-af31-9f686ce9ba27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:70:37:49:19:b0:e9:2d:04:55:4f:0f:61:ac: 99:02:08:5b:f0:78:c3:a6:3b:da:bb:0d:d9:d2:9d: 6c:b6:89:d5:72:9f:4c:a1:1a:e1:a4:f3:88:2f:49: 4b:d7:6b:7c:13:be:f6:07:9b:40:f0:17:f3:89:c2: db:5f:c4:2d:87:19:9c:91:09:77:ab:04:45:c5:3b: 74:6d:17:1a:7e:7e:3a:c9:60:50:e4:eb:bf:c9:e8: db:18:06:22:55:48:8f:ab:68:82:ae:a3:f2:9a:e8: e8:f5:1d:c0:b9:09:63:7d:a4:ec:19:a6:c1:3d:e5: 24:57:c4:91:89:96:1e:b3:74:24:1e:74:26:75:5f: 12:9e:11:85:e6:4d:da:35:de:e9:fc:86:35:0f:5c: 49:63:db:6b:5e:56:68:b5:0c:2c:0f:38:8f:c6:fc: 60:33:06:53:01:2b:0d:8e:26:ca:44:fe:af:ad:ce: 2b:45:60:77:d2:73:54:f4:95:b5:d1:b0:41:ae:a0: 7a:00:2a:b9:75:31:e2:23:59:e3:b4:6a:88:16:c6: 29:82:30:b1:2a:89:fd:e1:60:a4:b7:51:a6:ef:ab: 8e:a7:3b:43:b3:61:96:74:a0:e7:df:07:e5:f5:dc: 54:0f:af:d5:5b:aa:83:ea:a9:c7:8e:dc:20:df:13: 21:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2A:BD:12:40:20:A3:30:DC:DB:6A:26:B8:64:CB:93:F1:25:A7:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2bafdd1f-25a8-3d0c-a8da-bf03eabdf2c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.18.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a8:0d:b3:ac:b9:32:24:7f:ea:1e:d6:3f:15:71:8f:1f:cc: 6a:4e:c0:ba:bf:d2:e7:3a:5e:cd:9d:b2:5f:04:71:13:76:f8: 7e:9f:83:eb:bc:e7:50:b5:95:66:bc:a2:d7:de:e0:01:47:0c: e3:5a:6c:89:09:a9:e3:13:05:ad:d4:11:d4:84:0c:4f:b4:b3: 23:07:5a:b6:50:04:91:da:fb:52:b6:97:08:06:9f:be:af:9d: f3:f0:82:8a:39:59:f3:ca:cc:25:46:94:18:2d:ca:fe:ea:27: 6f:96:bd:b8:24:5c:cc:eb:dc:12:75:ba:7d:8b:dc:06:18:92: 1f:a7:3e:3f:a8:9a:9c:90:41:8a:d1:23:fd:56:82:c7:4f:99: 78:6c:08:91:8a:b6:01:ee:b2:96:16:cc:f8:c3:58:ba:95:8d: 6a:fb:cd:9c:56:33:21:aa:ff:a3:80:c7:20:c4:59:73:8a:10: 03:f5:aa:60:1a:aa:2e:86:52:52:a4:ff:68:62:3c:af:99:54: 6c:96:ff:c7:c6:0c:a4:6d:4c:10:75:68:65:e4:4a:8a:d7:2d: 86:5f:46:fa:c2:e4:fc:73:e8:65:3d:b0:76:d3:a4:de:61:93: 04:33:d2:b2:57:09:28:f3:cc:9f:ca:b3:64:47:62:9e:5c:f3: d9:c3:f0:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMhTiRBJ+GDCIQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZGVmZTcxZWEtMzMxOC00MTI0LWFmMzEtOWY2ODZjZTliYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXA3SRmw6S0EVU8PYayZAghb8HjDpjvauw3Z 0p1stonVcp9MoRrhpPOIL0lL12t8E772B5tA8BfzicLbX8QthxmckQl3qwRFxTt0 bRcafn46yWBQ5Ou/yejbGAYiVUiPq2iCrqPymujo9R3AuQljfaTsGabBPeUkV8SR iZYes3QkHnQmdV8SnhGF5k3aNd7p/IY1D1xJY9trXlZotQwsDziPxvxgMwZTASsN jibKRP6vrc4rRWB30nNU9JW10bBBrqB6ACq5dTHiI1njtGqIFsYpgjCxKon94WCk t1Gm76uOpztDs2GWdKDn3wfl9dxUD6/VW6qD6qnHjtwg3xMhBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcqvRJAIKMw3NtqJrhky5PxJaeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmJhZmRkMWYtMjVhOC0z ZDBjLWE4ZGEtYmYwM2VhYmRmMmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRIEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmoDbOsuTIkf+oe1j8VcY8fzGpOwLq/0uc6Xs2dsl8EcRN2+H6fg+u8 51C1lWa8otfe4AFHDONabIkJqeMTBa3UEdSEDE+0syMHWrZQBJHa+1K2lwgGn76v nfPwgoo5WfPKzCVGlBgtyv7qJ2+WvbgkXMzr3BJ1un2L3AYYkh+nPj+ompyQQYrR I/1WgsdPmXhsCJGKtgHuspYWzPjDWLqVjWr7zZxWMyGq/6OAxyDEWXOKEAP1qmAa qi6GUlKk/2hiPK+ZVGyW/8fGDKRtTBB1aGXkSorXLYZfRvrC5Pxz6GU9sHbTpN5h kwQz0rJXCSjzzJ/Ks2RHYp5c89nD8OE= -----END CERTIFICATE-----Generated at Tue Jun 3 04:47:26 2025 by rpki-client