$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a4e49b4-fbd4-3d21-895b-1336e045bc40.roa File: 4a4e49b4-fbd4-3d21-895b-1336e045bc40.roa (raw, json) Hash identifier: Iw9Gwq642eeiQNO5P5GZe+bf2x2mmvhYDHqT/HkCStk= Subject key identifier: 1D:8B:EF:FB:A8:79:DA:64:E9:BC:CE:2C:FA:48:E1:AA:38:AF:C3:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430FAF48469B63C0CC62E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a4e49b4-fbd4-3d21-895b-1336e045bc40.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 73.255.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:fa:f4:84:69:b6:3c:0c:c6:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=fb5cb238-0a6f-4430-a3ad-4b9d52591a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:49:07:78:56:f2:d3:21:e5:42:fe:94:d6:eb: 7a:a9:0b:75:4e:42:a1:33:f0:eb:59:00:e9:0f:ee: 60:ef:f6:40:8d:df:4d:0f:b0:ac:03:9a:c0:1a:35: 93:cf:67:2d:03:25:cd:71:31:c5:8b:16:24:d3:13: e1:3d:06:09:24:c0:2f:82:64:8c:21:13:b2:b6:57: 10:cc:15:77:f3:37:60:f1:4e:d3:d3:df:f8:29:8d: b9:55:1d:38:8e:82:92:af:93:16:fd:1a:bf:5a:15: a8:51:0c:e8:dc:66:58:84:c7:92:09:61:85:ec:34: 6b:06:9a:f9:95:df:2c:04:9c:d4:d7:85:af:77:4d: 43:a1:b7:c8:22:df:ed:fc:90:45:69:5e:98:ac:92: bb:a4:15:91:90:f9:46:6f:5c:45:28:5a:c8:b9:ee: 84:a4:f3:32:64:17:4b:b9:3b:80:35:89:58:82:01: 1b:c7:96:3f:7e:1a:1d:1e:d5:c4:e2:db:9c:17:23: 9e:d2:2f:b2:82:85:89:01:dd:10:e0:12:11:36:f8: 51:ed:d3:45:39:e8:e3:0d:fb:42:f0:a6:2f:21:f1: 5f:1d:2d:4d:08:c1:8f:56:e0:b6:86:c4:41:27:7f: 78:0b:3d:ea:74:49:7c:c5:c5:b8:41:d9:67:b1:49: c8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:8B:EF:FB:A8:79:DA:64:E9:BC:CE:2C:FA:48:E1:AA:38:AF:C3:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4a4e49b4-fbd4-3d21-895b-1336e045bc40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.255.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:85:ac:a2:a8:33:98:4d:6c:4d:68:1c:7b:93:cd:95:fe:0d: 73:ac:a9:9d:f2:0f:04:ec:a0:4d:c7:a1:23:58:53:7c:82:c7: ef:25:86:15:9f:5f:4c:20:b2:6d:e3:9e:b2:ba:53:e3:5a:af: a9:12:99:a1:46:ea:49:65:56:fb:ca:92:cb:fd:22:0e:89:d5: 90:ab:25:61:f9:e5:a9:99:5a:3b:37:ca:21:19:88:30:f4:e2: f0:71:af:16:6e:ac:d0:69:f5:fc:16:87:98:50:25:2c:a2:d9: 0e:70:72:c5:08:74:4f:88:57:89:4b:88:ad:b4:a8:f4:40:e7: eb:8c:b7:26:cb:3b:44:39:0d:f2:b7:b3:51:42:96:c7:91:ee: 1b:ba:64:13:e4:54:76:bc:c2:6d:0d:ca:46:30:ee:58:d3:cc: 2f:39:bd:f6:9a:c5:88:bc:1f:f6:91:f2:c0:2b:2f:78:f1:cc: e7:98:e7:4f:12:bd:1c:08:91:89:7f:7f:23:15:5d:67:3d:1e: c2:de:07:4b:c9:4b:c9:2a:99:31:da:1a:40:d2:b0:f5:4f:fc: 4e:bc:2c:64:e6:16:86:51:c5:ee:d8:62:f2:ee:c2:96:78:19: 80:18:a3:8e:9b:34:3f:4b:24:5e:7c:ba:68:1c:42:19:82:19: e2:79:66:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMPr0hGm2PAzGLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZmI1Y2IyMzgtMGE2Zi00NDMwLWEzYWQtNGI5ZDUyNTkxYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0kHeFby0yHlQv6U1ut6qQt1TkKhM/DrWQDp D+5g7/ZAjd9ND7CsA5rAGjWTz2ctAyXNcTHFixYk0xPhPQYJJMAvgmSMIROytlcQ zBV38zdg8U7T09/4KY25VR04joKSr5MW/Rq/WhWoUQzo3GZYhMeSCWGF7DRrBpr5 ld8sBJzU14Wvd01DobfIIt/t/JBFaV6YrJK7pBWRkPlGb1xFKFrIue6EpPMyZBdL uTuANYlYggEbx5Y/fhodHtXE4tucFyOe0i+ygoWJAd0Q4BIRNvhR7dNFOejjDftC 8KYvIfFfHS1NCMGPVuC2hsRBJ394Cz3qdEl8xcW4QdlnsUnIzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2L7/uoedpk6bzOLPpI4ao4r8O2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGE0ZTQ5YjQtZmJkNC0z ZDIxLTg5NWItMTMzNmUwNDViYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSf90MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeFrKKoM5hNbE1oHHuTzZX+DXOsqZ3yDwTsoE3HoSNYU3yCx+8lhhWf X0wgsm3jnrK6U+Nar6kSmaFG6kllVvvKksv9Ig6J1ZCrJWH55amZWjs3yiEZiDD0 4vBxrxZurNBp9fwWh5hQJSyi2Q5wcsUIdE+IV4lLiK20qPRA5+uMtybLO0Q5DfK3 s1FClseR7hu6ZBPkVHa8wm0NykYw7ljTzC85vfaaxYi8H/aR8sArL3jxzOeY508S vRwIkYl/fyMVXWc9HsLeB0vJS8kqmTHaGkDSsPVP/E68LGTmFoZRxe7YYvLuwpZ4 GYAYo46bND9LJF58umgcQhmCGeJ5ZpE= -----END CERTIFICATE-----Generated at Tue Jun 3 05:03:09 2025 by rpki-client