$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/476a98a1-0ea0-35b2-bf11-fbcd8839b991.roa File: 476a98a1-0ea0-35b2-bf11-fbcd8839b991.roa (raw, json) Hash identifier: +oCOb+RBk5sbvcIvEAMB9LcdYCxKDB6PNlLL41aGugg= Subject key identifier: A6:6B:F6:74:DA:58:12:BB:39:F0:ED:59:83:3D:45:AA:0F:F3:C1:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C065D6415FE31A93F534C98 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/476a98a1-0ea0-35b2-bf11-fbcd8839b991.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 73.168.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:5d:64:15:fe:31:a9:3f:53:4c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=f81b4104-242b-4548-b4e3-c0443db5fbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c3:fb:1b:0e:b8:2d:b7:3b:30:7f:e5:69:2c: 6d:f6:44:6c:fe:cb:bc:42:70:18:bb:88:31:36:dc: 92:fb:8d:38:da:f0:f1:23:6c:c0:05:01:89:44:73: 0f:c5:bd:a8:3a:ab:bb:98:7b:d1:62:21:e7:ee:28: b8:55:e6:ed:dc:df:1b:c6:05:f5:70:f0:d8:a3:9e: 4b:86:53:45:b7:6b:37:30:83:21:16:2b:e9:29:ad: db:51:90:c0:81:7f:af:3c:03:5c:c5:21:c8:4e:98: 65:b7:04:7f:a9:96:c9:04:4b:ff:d6:2f:33:6f:c8: 0d:ed:7e:57:76:af:6d:57:61:b9:3d:47:94:98:c2: 3b:89:25:87:97:6e:13:bd:1c:ef:47:76:bc:24:bb: e4:32:e9:07:28:94:11:25:f8:91:5c:13:a9:48:e0: 1d:a8:dc:05:6b:47:80:2e:20:26:5d:49:18:30:21: 69:ae:6f:70:1b:5a:0b:87:25:5e:b0:b2:25:cb:71: 04:17:d3:1f:0d:a4:15:2e:a8:e2:4b:ed:ce:a6:d7: fc:67:86:cd:6a:0c:fa:a9:38:34:e1:c7:49:40:cc: e6:d4:a5:94:92:63:14:60:01:2d:af:16:f9:41:f3: 75:e2:28:d4:23:5c:b7:4b:89:2b:7e:b1:ef:25:2a: ac:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6B:F6:74:DA:58:12:BB:39:F0:ED:59:83:3D:45:AA:0F:F3:C1:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/476a98a1-0ea0-35b2-bf11-fbcd8839b991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.168.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:4e:3a:30:40:ac:3e:34:cc:01:78:e9:c2:a0:b7:51:19:4b: df:ba:21:54:59:f0:58:5c:b3:5c:dd:44:cb:03:89:37:dc:63: 65:19:f9:b7:5c:11:06:b6:13:25:5c:b1:84:a7:6c:e4:f7:c6: 1f:ae:8e:b0:de:14:6a:5b:8e:9f:d8:bb:38:0d:74:52:cc:35: 4d:c6:40:31:ea:29:32:a7:1b:60:f2:48:d7:a6:71:b2:cd:70: 3e:46:97:25:d3:04:bd:c7:13:8e:cf:e3:29:d9:c8:86:5e:dc: 97:1a:35:b4:65:88:3e:cb:ec:6f:cf:d7:37:86:6a:45:3c:f9: e0:85:ae:22:be:d0:fa:5a:4c:37:18:4c:72:08:e7:ac:31:39: 65:26:e8:12:a7:f2:1c:28:e4:e2:d2:15:3d:69:a7:cb:9f:fc: d8:29:50:f0:db:0f:00:fe:7a:b2:ab:59:1d:68:9f:2d:3f:5c: 38:70:95:23:00:7a:d7:dc:ca:56:a1:f8:06:ee:44:bf:07:a8: 92:02:f3:1f:54:32:39:d6:c2:3f:1a:8b:76:33:68:dc:66:b2: 4f:e8:55:45:0c:5a:1e:78:0e:f3:20:4a:72:ad:ec:24:cf:f3: 61:f3:7e:84:eb:9a:6f:68:4a:51:85:01:c6:09:3b:9c:8f:be: 84:d5:68:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBl1kFf4xqT9TTJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZjgxYjQxMDQtMjQyYi00NTQ4LWI0ZTMtYzA0NDNkYjVmYmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMP7Gw64Lbc7MH/laSxt9kRs/su8QnAYu4gx NtyS+4042vDxI2zABQGJRHMPxb2oOqu7mHvRYiHn7ii4Vebt3N8bxgX1cPDYo55L hlNFt2s3MIMhFivpKa3bUZDAgX+vPANcxSHITphltwR/qZbJBEv/1i8zb8gN7X5X dq9tV2G5PUeUmMI7iSWHl24TvRzvR3a8JLvkMukHKJQRJfiRXBOpSOAdqNwFa0eA LiAmXUkYMCFprm9wG1oLhyVesLIly3EEF9MfDaQVLqjiS+3Optf8Z4bNagz6qTg0 4cdJQMzm1KWUkmMUYAEtrxb5QfN14ijUI1y3S4krfrHvJSqsrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZr9nTaWBK7OfDtWYM9RaoP88EpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDc2YTk4YTEtMGVhMC0z NWIyLWJmMTEtZmJjZDg4MzliOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSaioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1OOjBArD40zAF46cKgt1EZS9+6IVRZ8Fhcs1zdRMsDiTfcY2UZ+bdc EQa2EyVcsYSnbOT3xh+ujrDeFGpbjp/YuzgNdFLMNU3GQDHqKTKnG2DySNemcbLN cD5GlyXTBL3HE47P4ynZyIZe3JcaNbRliD7L7G/P1zeGakU8+eCFriK+0PpaTDcY THII56wxOWUm6BKn8hwo5OLSFT1pp8uf/NgpUPDbDwD+erKrWR1ony0/XDhwlSMA etfcylah+AbuRL8HqJIC8x9UMjnWwj8ai3YzaNxmsk/oVUUMWh54DvMgSnKt7CTP 82HzfoTrmm9oSlGFAcYJO5yPvoTVaLg= -----END CERTIFICATE-----Generated at Tue Jun 3 06:09:06 2025 by rpki-client