$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39873da3-8881-3459-ad71-33da20d3da5e.roa File: 39873da3-8881-3459-ad71-33da20d3da5e.roa (raw, json) Hash identifier: RItyWG2XlgYXX1jG/E8IXdXlHfnHMRhcS7I/fN9UDsU= Subject key identifier: BD:C2:37:4A:A6:FC:78:BC:9E:E1:A4:BD:6C:C9:37:AA:90:E8:1B:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06ECF352389EFED2E8BA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39873da3-8881-3459-ad71-33da20d3da5e.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 73.202.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:ec:f3:52:38:9e:fe:d2:e8:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=280ca9fe-04f6-4abf-bfe9-db2bb84b9a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:21:9e:56:a1:df:8b:c5:a6:b5:76:d5:87:22: 18:3c:a2:0c:d1:12:c6:0b:43:03:86:01:2f:68:52: 3d:4e:64:5d:11:ca:85:2a:40:9b:cb:c3:03:6f:f0: 06:cf:ab:ed:47:00:1d:0d:0e:d1:03:8f:a7:81:06: a4:bf:c0:7f:f4:4f:8d:6e:aa:76:e8:49:59:c9:65: 60:f4:ad:07:a5:3d:ca:ab:f1:38:2e:8b:ec:c4:f7: 99:b4:9a:f7:00:78:f7:08:60:8a:57:81:e6:b6:74: eb:71:1c:39:30:ad:c7:16:66:03:04:3b:f0:97:07: b1:94:54:d8:3c:43:0c:6e:59:41:f3:db:27:c4:9e: 70:0d:93:75:a0:f5:f6:1a:c7:de:18:c7:98:f8:9f: 50:19:98:91:e0:41:98:b0:4f:ad:81:87:e1:a2:d9: bd:4b:fb:1f:ac:c4:ee:5f:d3:dd:40:83:b4:1c:2b: 02:d8:d5:74:e3:55:1d:08:76:c0:31:59:09:ac:8e: 6a:b2:70:ef:da:95:64:b9:ce:ab:81:3d:b4:1f:18: 06:eb:ff:aa:44:ce:ad:ec:8c:d5:88:04:39:fb:d7: 88:75:db:d7:2f:ab:d1:10:1b:c8:59:4c:0b:2d:98: f6:61:95:2e:d4:ba:13:70:fe:b3:3c:29:0c:b0:14: db:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C2:37:4A:A6:FC:78:BC:9E:E1:A4:BD:6C:C9:37:AA:90:E8:1B:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39873da3-8881-3459-ad71-33da20d3da5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.202.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b3:3b:39:c5:b6:de:31:04:d6:55:20:c8:43:27:14:c6:f9: 4e:ec:e5:06:4f:da:6e:2c:ee:11:04:c1:43:f4:82:b2:dd:f1: 56:e9:12:0d:fe:8d:85:30:b7:7b:eb:23:02:e4:44:0d:a0:07: f5:f1:da:90:3e:1c:eb:94:43:14:83:25:35:3a:3e:b6:14:4a: f9:e0:a0:d9:e7:ed:ac:d3:02:d5:dd:59:52:73:67:74:3d:79: 0b:5f:9e:cd:1a:fd:98:0c:09:6b:c4:4e:7b:9f:61:7a:36:f9: 33:cf:41:ad:80:8d:1c:a9:b2:07:c0:57:d5:67:60:37:7d:72: 10:4d:07:9f:5c:fa:8d:e6:15:27:83:0d:37:84:48:4c:2d:2b: 92:1b:a8:0c:5e:3c:fb:23:30:cc:24:58:b2:ca:a4:cf:df:b2: 92:a2:cf:85:92:e2:b7:aa:98:9a:cc:0a:94:9a:1e:a1:ff:ef: 3f:48:e1:23:d3:e5:e0:79:10:2f:b1:cd:d0:ff:0c:5e:dc:51: 15:1e:59:b0:f1:6e:c6:71:46:47:83:00:0e:68:3b:5a:6c:b5: f3:12:86:32:e9:7c:35:c2:ce:a2:32:cf:27:75:92:8f:8d:e9: 50:44:31:52:9a:4a:4a:fe:3d:83:b5:91:b3:5e:0d:0f:e5:bc: e9:73:b6:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBuzzUjie/tLouoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MjgwY2E5ZmUtMDRmNi00YWJmLWJmZTktZGIyYmI4NGI5YTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSGeVqHfi8WmtXbVhyIYPKIM0RLGC0MDhgEv aFI9TmRdEcqFKkCby8MDb/AGz6vtRwAdDQ7RA4+ngQakv8B/9E+Nbqp26ElZyWVg 9K0HpT3Kq/E4LovsxPeZtJr3AHj3CGCKV4HmtnTrcRw5MK3HFmYDBDvwlwexlFTY PEMMbllB89snxJ5wDZN1oPX2GsfeGMeY+J9QGZiR4EGYsE+tgYfhotm9S/sfrMTu X9PdQIO0HCsC2NV041UdCHbAMVkJrI5qsnDv2pVkuc6rgT20HxgG6/+qRM6t7IzV iAQ5+9eIddvXL6vREBvIWUwLLZj2YZUu1LoTcP6zPCkMsBTbnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3CN0qm/Hi8nuGkvWzJN6qQ6BvZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk4NzNkYTMtODg4MS0z NDU5LWFkNzEtMzNkYTIwZDNkYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCScp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJezOznFtt4xBNZVIMhDJxTG+U7s5QZP2m4s7hEEwUP0grLd8VbpEg3+ jYUwt3vrIwLkRA2gB/Xx2pA+HOuUQxSDJTU6PrYUSvngoNnn7azTAtXdWVJzZ3Q9 eQtfns0a/ZgMCWvETnufYXo2+TPPQa2AjRypsgfAV9VnYDd9chBNB59c+o3mFSeD DTeESEwtK5IbqAxePPsjMMwkWLLKpM/fspKiz4WS4reqmJrMCpSaHqH/7z9I4SPT 5eB5EC+xzdD/DF7cURUeWbDxbsZxRkeDAA5oO1pstfMShjLpfDXCzqIyzyd1ko+N 6VBEMVKaSkr+PYO1kbNeDQ/lvOlztnk= -----END CERTIFICATE-----Generated at Tue Jun 3 07:01:04 2025 by rpki-client