$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39bc413a-7b55-3703-9b1a-051c930192c3.roa File: 39bc413a-7b55-3703-9b1a-051c930192c3.roa (raw, json) Hash identifier: c4gmPWovqz+8cwIiCJMy6uZsJpNmOKy5ZjqOiQ0nyNQ= Subject key identifier: 7D:70:0A:76:3B:46:B6:88:69:31:54:3C:C6:A5:B6:E4:27:2B:93:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C08AB38645F78EEE3801640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39bc413a-7b55-3703-9b1a-051c930192c3.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 73.252.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:ab:38:64:5f:78:ee:e3:80:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=c647f47a-9182-47ea-b0ee-607677d50317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ce:d5:d2:3d:53:d8:79:65:b1:9b:a5:90:9c: fa:0f:99:41:68:6b:42:dd:03:33:75:5d:c3:4c:75: d1:7b:95:48:84:84:00:37:9b:fa:43:7d:a0:14:e4: db:93:4e:2f:7f:17:d0:50:9e:7d:8f:16:6b:36:8e: 82:a0:68:dc:ef:0f:ee:6d:25:e2:c0:29:e5:c0:d1: 73:82:58:9b:40:00:8d:9b:79:8f:00:9f:cb:46:60: 25:e2:a4:18:44:31:9d:b2:0c:55:75:34:f7:31:ee: 1c:96:16:d8:90:9c:3e:63:7e:5d:27:50:7d:37:59: 55:63:ad:57:51:88:38:70:09:56:f7:d4:b9:a2:20: ba:82:b3:84:69:91:ea:95:57:a7:03:22:1b:d8:1e: 28:78:98:25:77:8e:cc:30:13:ea:c0:6e:10:45:88: 7e:08:09:5c:8b:12:89:8b:e0:60:2f:69:73:f5:a9: 80:8c:10:2e:f0:8a:53:c4:41:90:97:41:d9:1d:3c: 20:82:54:a6:02:a2:c0:59:71:a1:04:f5:32:b4:98: bf:74:1d:a6:29:a5:d9:9b:e6:e5:b5:65:37:93:e9: ba:d6:fc:79:08:bc:80:b7:57:ee:54:9c:71:f0:02: 54:cd:6c:7d:1b:84:d5:b9:4a:73:3a:07:da:bb:c8: e7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:70:0A:76:3B:46:B6:88:69:31:54:3C:C6:A5:B6:E4:27:2B:93:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39bc413a-7b55-3703-9b1a-051c930192c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.252.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:9f:5c:b4:bf:0b:e8:16:55:2a:d3:83:c5:f3:34:10:c1:fa: 3f:ce:e5:f8:00:31:67:92:9f:14:14:cc:78:7d:14:5f:90:b6: 3b:ac:2e:67:3a:b4:b9:b6:8d:0f:9b:cf:75:1a:31:87:7b:00: c4:1c:fc:5e:92:c1:aa:f6:36:1a:b0:4b:cc:c9:23:67:07:7a: 49:47:a3:6d:3d:f7:4f:46:64:46:e8:34:4e:6e:67:cd:cc:b3: eb:03:ed:af:d9:46:4d:53:62:bb:db:22:a0:b6:29:de:05:9c: 17:24:52:0a:9b:ab:68:52:3c:6d:49:85:b1:15:d0:e7:b0:21: 27:8e:dd:ca:7b:95:cc:16:64:e5:e7:e8:a0:52:bf:e2:53:e4: ac:f4:53:a5:38:92:50:73:02:87:49:e8:77:a1:7d:f8:5d:ac: f4:7a:8d:93:a4:dc:0e:57:ba:26:b2:6e:ef:5a:e4:d3:45:72: 54:34:ab:a8:b9:d8:27:4b:df:ee:df:4d:06:ef:e3:b0:46:99: 0b:bd:68:b0:b3:18:c3:07:b1:f1:f8:46:31:6c:1e:5e:e5:6d: 11:c0:a1:17:7f:75:b6:21:50:f0:d8:09:64:df:66:d5:14:e4: 79:e6:94:fc:ac:69:3b:42:4c:96:bf:80:41:85:da:c0:ce:ac: 24:6d:75:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCKs4ZF947uOAFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YzY0N2Y0N2EtOTE4Mi00N2VhLWIwZWUtNjA3Njc3ZDUwMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi87V0j1T2HllsZulkJz6D5lBaGtC3QMzdV3D THXRe5VIhIQAN5v6Q32gFOTbk04vfxfQUJ59jxZrNo6CoGjc7w/ubSXiwCnlwNFz glibQACNm3mPAJ/LRmAl4qQYRDGdsgxVdTT3Me4clhbYkJw+Y35dJ1B9N1lVY61X UYg4cAlW99S5oiC6grOEaZHqlVenAyIb2B4oeJgld47MMBPqwG4QRYh+CAlcixKJ i+BgL2lz9amAjBAu8IpTxEGQl0HZHTwgglSmAqLAWXGhBPUytJi/dB2mKaXZm+bl tWU3k+m61vx5CLyAt1fuVJxx8AJUzWx9G4TVuUpzOgfau8jndwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1wCnY7RraIaTFUPMaltuQnK5OEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzliYzQxM2EtN2I1NS0z NzAzLTliMWEtMDUxYzkzMDE5MmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfyaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGfXLS/C+gWVSrTg8XzNBDB+j/O5fgAMWeSnxQUzHh9FF+QtjusLmc6 tLm2jQ+bz3UaMYd7AMQc/F6Swar2NhqwS8zJI2cHeklHo209909GZEboNE5uZ83M s+sD7a/ZRk1TYrvbIqC2Kd4FnBckUgqbq2hSPG1JhbEV0OewISeO3cp7lcwWZOXn 6KBSv+JT5Kz0U6U4klBzAodJ6HehffhdrPR6jZOk3A5Xuiaybu9a5NNFclQ0q6i5 2CdL3+7fTQbv47BGmQu9aLCzGMMHsfH4RjFsHl7lbRHAoRd/dbYhUPDYCWTfZtUU 5HnmlPysaTtCTJa/gEGF2sDOrCRtdcY= -----END CERTIFICATE-----Generated at Tue Jun 3 06:53:09 2025 by rpki-client