$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40fc7c99-5001-3346-b71a-dacf1a4ddd41.roa File: 40fc7c99-5001-3346-b71a-dacf1a4ddd41.roa (raw, json) Hash identifier: TX6MCtGNqBT8XALYN8l2LZRb+gDhCXgNL6ojVuNvjNU= Subject key identifier: 17:29:27:DE:05:75:1F:BE:F4:21:A2:E5:19:78:44:D3:CD:5A:5B:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C08ABF5113D1F2CDB637680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40fc7c99-5001-3346-b71a-dacf1a4ddd41.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 73.252.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:ab:f5:11:3d:1f:2c:db:63:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=6cd71bfb-1939-4b37-8812-572cefdef70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:85:e0:6a:49:da:3c:c8:ed:a3:93:c9:73: ba:0c:e7:bb:30:d7:75:75:3d:11:87:84:c8:65:0c: ad:4b:57:5d:55:da:86:f0:cb:1e:c2:5a:d4:1b:57: 11:9b:f1:6c:ca:4f:03:c0:06:31:ac:95:41:f1:ea: c7:fb:2e:fa:34:df:c0:36:5d:f2:7e:9d:11:d8:26: c0:dd:be:3f:e5:41:bf:31:f2:6b:db:3d:aa:15:3c: e1:a2:ee:88:0c:df:e3:73:30:8a:83:85:55:3d:40: 36:9c:3b:51:bd:21:88:31:48:29:87:cc:87:eb:75: d1:5c:36:4c:15:bd:2d:d6:c4:79:de:e2:5e:ab:95: 63:e0:85:54:19:0e:f7:c0:b0:a9:ed:8a:91:20:ba: f0:b3:84:ea:12:30:48:3f:da:c1:59:e8:c7:9f:6a: 3f:2c:e0:cb:ec:a2:c5:60:63:b2:f0:97:4b:c6:31: 2f:a8:53:15:d5:04:48:b5:59:b0:53:33:18:f1:22: c9:c7:44:e1:a1:29:77:71:b4:67:da:57:24:88:71: a7:1d:be:b5:01:52:f6:61:9f:26:de:c7:0a:98:02: af:39:05:25:7e:85:da:5a:f4:63:26:e4:f4:f9:06: 91:20:e5:36:d1:e9:1e:e9:76:3d:a3:8e:8a:69:c9: 60:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:29:27:DE:05:75:1F:BE:F4:21:A2:E5:19:78:44:D3:CD:5A:5B:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40fc7c99-5001-3346-b71a-dacf1a4ddd41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.252.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:57:66:ff:a9:06:bc:87:dc:36:21:76:3b:aa:57:e1:ee:94: 3f:0c:87:d8:4a:66:c7:49:3b:0c:2e:8b:2e:db:06:13:91:eb: b8:bc:f3:97:52:35:c1:70:d5:a6:81:22:cb:48:f1:55:8e:a8: c6:72:57:c9:55:08:c6:25:dc:ad:8f:5c:6d:57:79:52:51:9c: ec:06:5d:a5:3a:f6:80:76:60:78:41:e4:c1:4d:f9:41:51:83: e7:cb:ad:85:e6:85:a9:ea:bb:30:c0:05:b1:42:ad:87:ca:dc: a0:bd:2f:62:5a:29:f6:98:00:d0:05:98:66:1a:4d:30:0f:d4: e7:f6:03:14:e2:ed:a8:b6:c8:aa:50:3f:a0:50:40:cd:02:1c: af:e6:f8:c5:43:98:d5:66:01:9a:27:91:43:fe:53:ee:b2:93: 85:5a:73:cd:72:3e:7b:5e:3a:a3:7f:07:bb:d6:16:8b:64:82: 51:91:dc:a8:2a:d3:0f:2d:ba:92:ea:a4:aa:45:0f:5c:1a:50: 70:f8:b5:66:0f:53:3b:96:cf:57:15:8a:63:0b:9b:6a:da:6d: 70:ce:ea:ab:c7:89:9e:b0:5b:9e:40:c6:0b:5a:d3:0f:5d:05: e4:bc:12:03:ec:aa:c6:28:aa:36:1e:20:17:4a:83:e4:23:05: cd:d7:6f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCKv1ET0fLNtjdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NmNkNzFiZmItMTkzOS00YjM3LTg4MTItNTcyY2VmZGVmNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov6F4GpJ2jzI7aOTyXO6DOe7MNd1dT0Rh4TI ZQytS1ddVdqG8MsewlrUG1cRm/Fsyk8DwAYxrJVB8erH+y76NN/ANl3yfp0R2CbA 3b4/5UG/MfJr2z2qFTzhou6IDN/jczCKg4VVPUA2nDtRvSGIMUgph8yH63XRXDZM Fb0t1sR53uJeq5Vj4IVUGQ73wLCp7YqRILrws4TqEjBIP9rBWejHn2o/LODL7KLF YGOy8JdLxjEvqFMV1QRItVmwUzMY8SLJx0ThoSl3cbRn2lckiHGnHb61AVL2YZ8m 3scKmAKvOQUlfoXaWvRjJuT0+QaRIOU20eke6XY9o46KaclgPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcpJ94FdR++9CGi5Rl4RNPNWluHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBmYzdjOTktNTAwMS0z MzQ2LWI3MWEtZGFjZjFhNGRkZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBXZv+pBryH3DYhdjuqV+HulD8Mh9hKZsdJOwwuiy7bBhOR67i885dS NcFw1aaBIstI8VWOqMZyV8lVCMYl3K2PXG1XeVJRnOwGXaU69oB2YHhB5MFN+UFR g+fLrYXmhanquzDABbFCrYfK3KC9L2JaKfaYANAFmGYaTTAP1Of2AxTi7ai2yKpQ P6BQQM0CHK/m+MVDmNVmAZonkUP+U+6yk4Vac81yPnteOqN/B7vWFotkglGR3Kgq 0w8tupLqpKpFD1waUHD4tWYPUzuWz1cVimMLm2rabXDO6qvHiZ6wW55Axgta0w9d BeS8EgPsqsYoqjYeIBdKg+QjBc3Xbyc= -----END CERTIFICATE-----Generated at Tue Jun 3 06:12:52 2025 by rpki-client