$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5df025e2-d259-3927-beb8-e1ab5299f55c.roa File: 5df025e2-d259-3927-beb8-e1ab5299f55c.roa (raw, json) Hash identifier: FwcyH5PQh2WwVMj7Hvq+PFsFWI+ZSpFZwX2Fpb7pzGs= Subject key identifier: 6C:86:7F:4B:B4:C5:9E:D6:36:57:41:03:55:53:F6:9B:6A:ED:30:00 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C07FE63C26BC617A9883580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5df025e2-d259-3927-beb8-e1ab5299f55c.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 73.102.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:fe:63:c2:6b:c6:17:a9:88:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=f0fff6a2-a417-4b1a-adc9-89bd61703210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:72:f4:32:fd:71:9d:ee:5a:35:95:1a:1f: cb:1a:b6:a7:3f:ba:43:8e:82:f9:aa:e5:91:41:34: a0:37:50:91:61:d6:32:4f:47:7d:87:b6:90:87:35: 1b:d5:1b:8f:2a:5b:b6:70:9a:99:ce:23:4d:ac:05: 9b:a9:9e:7e:01:74:37:b3:14:4d:7f:2a:8a:67:9b: de:34:e0:7c:4d:67:05:fb:9d:e6:44:fe:22:4f:bc: ba:63:d5:51:bf:fa:50:a6:c4:e4:75:74:80:80:73: 3e:34:31:2c:7c:65:df:cc:bf:77:c7:2b:26:f5:92: 37:a1:af:d5:89:2a:b9:8f:36:42:44:23:0e:b9:f8: 90:3f:29:1f:07:7f:45:fa:19:83:69:be:32:9e:59: 43:bd:56:41:ba:00:97:c8:d9:e0:86:57:64:4a:98: e3:ed:9c:08:e0:09:a2:f9:85:c2:24:29:f5:87:bc: fa:29:07:a0:8d:99:94:21:6e:0e:ee:37:4c:48:b5: 66:77:af:0a:2d:11:c3:aa:11:86:b1:da:9f:5b:c0: 0b:cb:93:74:42:bf:5e:3e:53:25:8f:24:9d:b8:89: 65:77:cd:2e:28:c3:12:ae:ad:a2:a3:42:d1:f1:80: 53:8a:12:e3:85:30:1c:14:6b:48:ea:f7:ae:df:b2: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:86:7F:4B:B4:C5:9E:D6:36:57:41:03:55:53:F6:9B:6A:ED:30:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5df025e2-d259-3927-beb8-e1ab5299f55c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.102.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:dc:88:f0:0a:f9:20:04:1a:3f:c1:f1:64:2a:fc:7c:85:60: 11:bd:8d:ac:d7:62:b1:89:73:4e:3c:2c:a5:43:33:48:4f:94: d1:33:a9:1d:3a:c5:c4:eb:55:be:c8:7c:42:dd:02:05:83:c4: d1:ff:64:b0:1e:1d:1a:79:32:84:40:c3:66:e7:3b:5a:04:b1: 61:81:97:60:da:32:3d:2c:72:07:a7:93:56:a6:dc:24:e0:fe: 13:3a:ab:c8:3f:9a:d1:95:b7:fe:f2:fb:a1:d6:7d:1f:3b:a2: a4:18:ee:29:3d:b3:df:3e:37:01:6b:83:23:9c:9f:f2:03:37: 6f:32:68:8f:b8:d3:5e:f9:aa:a0:af:df:4d:90:01:d4:91:4d: bd:60:ed:ff:ed:29:f8:14:81:13:56:9a:de:ea:dc:34:89:ef: 77:b0:56:99:26:73:82:d9:c4:11:78:ac:18:cf:ec:b7:9d:49: a5:86:16:77:2a:62:a0:92:16:50:87:d8:5a:94:86:e6:0f:17: 1d:f9:30:43:a6:5c:77:c9:0f:56:b3:78:19:3b:96:58:32:65: a0:0a:1e:44:87:2f:61:db:35:06:9d:fa:16:44:ed:9d:3d:7d: 2c:01:08:d5:3b:88:a0:ee:ca:c9:42:7e:53:45:85:a3:31:24: f4:b4:c1:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB/5jwmvGF6mINYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZjBmZmY2YTItYTQxNy00YjFhLWFkYzktODliZDYxNzAzMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz19y9DL9cZ3uWjWVGh/LGranP7pDjoL5quWR QTSgN1CRYdYyT0d9h7aQhzUb1RuPKlu2cJqZziNNrAWbqZ5+AXQ3sxRNfyqKZ5ve NOB8TWcF+53mRP4iT7y6Y9VRv/pQpsTkdXSAgHM+NDEsfGXfzL93xysm9ZI3oa/V iSq5jzZCRCMOufiQPykfB39F+hmDab4ynllDvVZBugCXyNnghldkSpjj7ZwI4Ami +YXCJCn1h7z6KQegjZmUIW4O7jdMSLVmd68KLRHDqhGGsdqfW8ALy5N0Qr9ePlMl jySduIlld80uKMMSrq2io0LR8YBTihLjhTAcFGtI6veu37LFfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyGf0u0xZ7WNldBA1VT9ptq7TAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWRmMDI1ZTItZDI1OS0z OTI3LWJlYjgtZTFhYjUyOTlmNTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSWZyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbciPAK+SAEGj/B8WQq/HyFYBG9jazXYrGJc048LKVDM0hPlNEzqR06 xcTrVb7IfELdAgWDxNH/ZLAeHRp5MoRAw2bnO1oEsWGBl2DaMj0scgenk1am3CTg /hM6q8g/mtGVt/7y+6HWfR87oqQY7ik9s98+NwFrgyOcn/IDN28yaI+40175qqCv 302QAdSRTb1g7f/tKfgUgRNWmt7q3DSJ73ewVpkmc4LZxBF4rBjP7LedSaWGFncq YqCSFlCH2FqUhuYPFx35MEOmXHfJD1azeBk7llgyZaAKHkSHL2HbNQad+hZE7Z09 fSwBCNU7iKDuyslCflNFhaMxJPS0wQg= -----END CERTIFICATE-----Generated at Wed Jun 4 23:44:58 2025 by rpki-client