$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f3d494-8dfe-33d4-ad58-9a18c123ff70.roa File: 35f3d494-8dfe-33d4-ad58-9a18c123ff70.roa (raw, json) Hash identifier: h+3CJAeOtWg6eFnTErWUCvhx3sYEekUjQ4PpjNOuOHo= Subject key identifier: 90:56:6E:AA:75:C3:75:DB:37:A1:61:F9:34:65:9F:10:16:95:4C:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C079DD47F0AFB7CB713C100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f3d494-8dfe-33d4-ad58-9a18c123ff70.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33287 IP address blocks: 73.165.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:9d:d4:7f:0a:fb:7c:b7:13:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=0d324d00-b017-4306-ae5a-feb5d54606e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dc:e2:46:ff:d2:ed:43:92:cf:c3:c8:05:6c: 98:2c:68:be:1f:a0:10:f5:10:27:ba:c7:a9:3a:5f: c4:0f:26:c8:a7:94:b1:bb:1c:cd:ed:35:71:a3:c3: 87:e6:b3:4f:06:2e:c5:ad:b6:b5:9f:ca:e7:f8:17: 69:f7:1b:6c:c8:21:1f:71:6e:43:75:61:e2:18:f8: 8f:d2:7d:5a:52:70:aa:e7:57:ad:5e:65:5e:32:ca: a7:ce:a4:70:2f:0b:8e:47:ce:70:a5:5f:50:12:6c: 0c:1b:e2:99:e5:d2:43:f9:32:ef:06:8c:53:cd:0a: 59:27:60:ed:b8:93:c8:d0:bc:5c:1d:47:d4:7c:f6: 92:9b:57:ad:0a:7b:c1:48:81:25:46:e1:1c:15:3e: da:b1:ff:73:61:a2:89:d0:ca:3f:3a:cd:01:79:cb: a2:59:66:bb:5f:69:64:7e:31:87:00:3c:ad:a7:54: 20:4a:6b:d1:f4:93:11:a8:bd:6a:28:14:1c:e5:3f: 58:b9:36:99:ca:55:7c:67:a2:9b:b9:b4:63:65:8e: 18:b7:85:84:f8:29:6f:74:aa:d6:ff:3a:ff:da:26: 91:e2:54:01:14:32:ca:28:bd:ab:80:bb:03:4c:4c: 91:a5:0f:13:16:ce:c8:c2:13:94:27:fa:c3:7e:75: 78:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:56:6E:AA:75:C3:75:DB:37:A1:61:F9:34:65:9F:10:16:95:4C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35f3d494-8dfe-33d4-ad58-9a18c123ff70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.165.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:46:9f:8d:5f:2b:1b:84:70:2f:f3:ad:20:ab:1c:7d:60:a4: 8c:ec:ef:9e:35:f2:08:35:8b:0e:6a:a8:e2:3c:e4:dd:31:4b: 88:a4:2a:da:03:ca:d2:cd:10:74:07:c0:83:d6:e8:41:a1:fa: 8e:3b:cd:9a:39:74:41:b2:43:cc:24:41:b7:7e:a8:eb:cb:12: 2a:c0:a6:d4:80:68:c7:57:3b:ac:8a:1b:6e:f4:26:14:06:c3: 2f:5f:fe:05:a5:9c:2c:1b:18:3f:a4:1c:33:3d:83:6d:d2:6e: 8f:de:8c:a6:24:d0:c0:16:58:8d:08:5c:f5:5c:eb:47:4c:1c: 55:39:ad:85:5e:5a:1d:b1:36:ef:da:e0:67:71:25:49:de:30: 7f:44:00:50:9e:85:b1:e6:1f:e1:a9:15:ac:11:9f:ff:7b:2d: 94:b8:32:d1:ee:c8:03:ba:48:16:cf:34:0a:0d:62:6a:9c:db: 05:58:82:98:fd:f7:4e:de:9d:70:a3:1a:ae:f8:a9:9b:60:b7: cf:c7:52:55:be:30:fe:26:ab:ce:e0:08:ea:96:2e:17:40:2b: 11:49:78:46:48:de:4f:e6:8c:d0:01:44:1a:ff:c4:5d:c1:a4: 22:32:b5:6c:e9:ca:20:a0:98:9b:58:73:cd:93:19:5e:ec:ad: 49:e8:5b:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB53Ufwr7fLcTwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MGQzMjRkMDAtYjAxNy00MzA2LWFlNWEtZmViNWQ1NDYwNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidziRv/S7UOSz8PIBWyYLGi+H6AQ9RAnusep Ol/EDybIp5SxuxzN7TVxo8OH5rNPBi7Frba1n8rn+Bdp9xtsyCEfcW5DdWHiGPiP 0n1aUnCq51etXmVeMsqnzqRwLwuOR85wpV9QEmwMG+KZ5dJD+TLvBoxTzQpZJ2Dt uJPI0LxcHUfUfPaSm1etCnvBSIElRuEcFT7asf9zYaKJ0Mo/Os0BecuiWWa7X2lk fjGHADytp1QgSmvR9JMRqL1qKBQc5T9YuTaZylV8Z6KbubRjZY4Yt4WE+ClvdKrW /zr/2iaR4lQBFDLKKL2rgLsDTEyRpQ8TFs7IwhOUJ/rDfnV4WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBWbqp1w3XbN6Fh+TRlnxAWlUwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzVmM2Q0OTQtOGRmZS0z M2Q0LWFkNTgtOWExOGMxMjNmZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZGn41fKxuEcC/zrSCrHH1gpIzs75418gg1iw5qqOI85N0xS4ikKtoD ytLNEHQHwIPW6EGh+o47zZo5dEGyQ8wkQbd+qOvLEirAptSAaMdXO6yKG270JhQG wy9f/gWlnCwbGD+kHDM9g23Sbo/ejKYk0MAWWI0IXPVc60dMHFU5rYVeWh2xNu/a 4GdxJUneMH9EAFCehbHmH+GpFawRn/97LZS4MtHuyAO6SBbPNAoNYmqc2wVYgpj9 907enXCjGq74qZtgt8/HUlW+MP4mq87gCOqWLhdAKxFJeEZI3k/mjNABRBr/xF3B pCIytWzpyiCgmJtYc82TGV7srUnoW/Q= -----END CERTIFICATE-----Generated at Tue Jun 3 06:21:38 2025 by rpki-client