$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3edc85a7-3cd1-3375-9cd0-4af4c903eac1.roa File: 3edc85a7-3cd1-3375-9cd0-4af4c903eac1.roa (raw, json) Hash identifier: Pzk1y8Hig8FTTGab3jTB3PzwCWxalCNNfoEcNI2avdc= Subject key identifier: F2:3E:BE:37:FF:43:9E:9F:CB:E9:8E:8B:E2:57:1D:E0:2D:01:B3:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431A3E787E7652BFC94E480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3edc85a7-3cd1-3375-9cd0-4af4c903eac1.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 73.219.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:a3:e7:87:e7:65:2b:fc:94:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=2439c29e-9315-464f-9060-9288f2033764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5c:42:ef:21:1d:57:62:0c:bc:2a:93:c1:5e: 0e:f5:35:5c:06:56:a2:3a:d1:21:94:3f:08:38:e8: 03:8b:03:38:43:29:da:7f:3a:80:e6:3b:ae:a4:14: 1d:26:43:d7:ad:26:14:b1:d3:40:74:79:06:92:88: 3f:5b:ee:ef:a5:0c:25:90:e0:e7:17:fb:15:83:74: 25:a1:aa:30:3e:a4:bd:24:ac:4e:69:0a:80:76:fb: 2e:c5:8f:cf:47:6d:b4:ac:e0:e3:99:68:f5:04:0f: 00:63:8e:9a:be:20:bf:b6:48:e1:a4:fc:29:79:6a: fc:6e:fa:32:19:01:a7:23:b6:78:26:ae:e8:83:4b: 34:43:bd:0e:ef:49:24:01:fd:27:4c:e9:95:bb:a5: 06:1e:bd:cd:57:e7:92:a8:17:49:cb:7f:04:ac:96: b3:74:bb:73:b8:a1:f8:21:c6:e7:fc:de:dc:76:00: d0:5f:60:40:7a:b1:ae:f6:85:eb:cf:b5:d9:df:3c: 5b:19:83:6f:70:f0:e6:5b:5e:a3:50:15:3d:8e:8e: 12:e2:9d:34:c5:3f:59:54:67:f8:d1:37:5e:04:2c: 19:cb:e3:83:c2:9a:07:97:ca:db:8a:91:b4:16:c3: 35:22:34:d8:93:4b:e4:68:4a:9e:08:24:8b:73:32: de:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3E:BE:37:FF:43:9E:9F:CB:E9:8E:8B:E2:57:1D:E0:2D:01:B3:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3edc85a7-3cd1-3375-9cd0-4af4c903eac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.219.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:2e:e2:11:f9:9c:8c:96:73:7b:d5:c2:cc:39:8d:b8:28:0c: 26:b9:61:95:1d:6b:f6:aa:29:15:4b:e8:19:77:27:f6:e1:05: 0a:a2:e0:24:88:69:5a:05:da:4b:22:16:de:7c:4d:1f:c6:14: 3c:15:9d:b6:52:63:51:e5:1d:e0:e0:b9:08:0e:d1:df:6c:0b: 6e:3e:16:df:14:7b:8a:44:69:cb:5e:36:07:72:6f:32:4e:bc: 91:a7:49:79:57:3c:4c:b1:02:32:32:68:49:8e:1f:33:cf:a7: 8f:5a:45:ef:f5:06:76:64:05:00:a8:5b:f6:05:fe:0e:85:bd: 34:4c:39:18:ef:1e:65:2f:78:7f:d1:1c:14:10:ac:07:bd:b0: 27:5b:94:86:df:4f:87:e0:e7:c8:38:6a:30:6e:26:4a:c7:eb: 31:b3:d4:06:ee:e1:d1:c2:60:c9:e1:41:1a:35:ee:c3:87:33: 9d:c4:e1:11:89:cd:9a:a8:ed:f0:b9:37:d9:14:46:81:e8:b2: ca:d0:28:ca:0f:90:36:23:09:da:cc:4c:4e:dc:61:3d:d5:cd: a4:7f:34:d2:b9:f8:b6:53:28:e3:0f:76:fc:86:dd:4e:87:74: f2:34:bf:69:14:dd:89:67:c8:8c:e9:c3:3f:c3:80:ed:7f:fe: 67:aa:d2:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMaPnh+dlK/yU5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjQzOWMyOWUtOTMxNS00NjRmLTkwNjAtOTI4OGYyMDMzNzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlxC7yEdV2IMvCqTwV4O9TVcBlaiOtEhlD8I OOgDiwM4QynafzqA5juupBQdJkPXrSYUsdNAdHkGkog/W+7vpQwlkODnF/sVg3Ql oaowPqS9JKxOaQqAdvsuxY/PR220rODjmWj1BA8AY46aviC/tkjhpPwpeWr8bvoy GQGnI7Z4Jq7og0s0Q70O70kkAf0nTOmVu6UGHr3NV+eSqBdJy38ErJazdLtzuKH4 Icbn/N7cdgDQX2BAerGu9oXrz7XZ3zxbGYNvcPDmW16jUBU9jo4S4p00xT9ZVGf4 0TdeBCwZy+ODwpoHl8rbipG0FsM1IjTYk0vkaEqeCCSLczLeLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI+vjf/Q56fy+mOi+JXHeAtAbNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2VkYzg1YTctM2NkMS0z Mzc1LTljZDAtNGFmNGM5MDNlYWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIu4hH5nIyWc3vVwsw5jbgoDCa5YZUda/aqKRVL6Bl3J/bhBQqi4CSI aVoF2ksiFt58TR/GFDwVnbZSY1HlHeDguQgO0d9sC24+Ft8Ue4pEacteNgdybzJO vJGnSXlXPEyxAjIyaEmOHzPPp49aRe/1BnZkBQCoW/YF/g6FvTRMORjvHmUveH/R HBQQrAe9sCdblIbfT4fg58g4ajBuJkrH6zGz1Abu4dHCYMnhQRo17sOHM53E4RGJ zZqo7fC5N9kURoHossrQKMoPkDYjCdrMTE7cYT3VzaR/NNK5+LZTKOMPdvyG3U6H dPI0v2kU3YlnyIzpwz/DgO1//meq0mI= -----END CERTIFICATE-----Generated at Tue Jun 3 06:25:44 2025 by rpki-client