$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/604d42d7-d56e-38e6-a5e2-7b6ac5a8104a.roa File: 604d42d7-d56e-38e6-a5e2-7b6ac5a8104a.roa (raw, json) Hash identifier: ZYaONOh+9uVkVMWfTfPsN9aG4FIxmcjQpoyF9i3zVeo= Subject key identifier: A3:E4:8C:65:6C:19:39:BD:82:37:E7:86:B4:64:23:97:5B:9D:FE:6D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43248B9F6D88661B6B3C780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/604d42d7-d56e-38e6-a5e2-7b6ac5a8104a.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 73.166.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:48:b9:f6:d8:86:61:b6:b3:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=555907f9-5d09-4cb8-b489-8821f23561dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6d:82:5a:73:5d:84:e6:0c:62:62:8e:e1:b1: d8:9e:16:85:0c:71:98:bd:9d:e3:47:3b:af:99:bc: cf:02:51:ed:52:c5:c8:be:10:b0:7b:21:d7:6b:00: d4:53:03:f5:f0:8c:71:fd:d1:70:c5:4d:9a:59:31: ee:d9:7c:61:b3:51:df:f9:8b:5b:57:cd:3b:3b:6e: 2e:b9:3a:a4:2e:9c:44:f9:f2:0a:f1:03:cc:94:91: 88:af:03:4c:2c:86:74:ec:82:a5:b0:42:9a:95:45: 52:a0:74:8e:3b:78:fd:eb:58:a4:4e:5a:09:a8:f4: fe:e1:6e:02:f0:14:dc:9b:c3:02:d5:80:bc:76:a0: 81:15:36:1e:5d:9e:90:3c:0e:18:e2:d2:66:f3:97: b8:74:61:7a:31:08:ce:1e:50:ab:8d:7d:2b:f9:ff: 91:56:9e:61:86:7c:c9:22:10:d9:f3:d9:8a:17:c2: 36:e2:22:6e:57:d8:2c:55:10:46:ae:8a:d0:04:b7: eb:41:a8:7a:75:82:c3:a0:7a:20:6d:bd:f7:76:56: 0b:7f:67:df:ed:a2:ea:5e:94:cd:f2:56:90:ac:15: 52:56:b8:7f:f2:5b:7b:af:27:7a:19:d3:62:79:e8: bf:da:8e:8b:a1:2a:de:87:3c:91:02:2e:32:7d:2c: 6d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E4:8C:65:6C:19:39:BD:82:37:E7:86:B4:64:23:97:5B:9D:FE:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/604d42d7-d56e-38e6-a5e2-7b6ac5a8104a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.166.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:7a:6f:a1:01:ab:30:59:ab:01:c5:a1:33:ec:de:7c:0e:7c: 3c:de:4e:4f:4a:a1:8f:2f:fc:18:58:bb:fd:d2:a7:99:61:5b: af:d4:b9:bd:58:d6:e0:01:22:8f:94:4a:47:c6:22:55:ca:f3: bc:45:fd:8e:72:0a:ec:ff:64:21:ab:04:56:4e:aa:18:24:a1: 09:e8:a8:4b:98:57:5c:ab:41:24:69:97:6f:00:81:96:3a:65: fe:ff:ba:4d:d2:92:0b:f2:95:a9:91:d9:c4:a4:c9:52:b3:6a: 04:c4:34:d3:a4:ec:1b:0d:e5:37:c0:f3:81:42:dc:7a:91:7d: 91:48:f2:46:09:6e:cd:2f:26:15:d4:ab:a8:81:94:7d:8c:17: 58:fb:e9:3b:fa:e5:15:a0:13:ee:bd:dc:8b:eb:c2:20:53:63: f1:ae:25:1f:07:14:99:bf:61:c1:2e:72:c9:9e:38:d8:8b:d2: 34:5d:5a:41:4c:99:30:72:43:eb:ad:11:e4:1b:c8:5e:4a:eb: bd:84:55:09:50:c2:ab:43:cb:16:9d:c3:e7:1f:e9:44:00:88: 87:d9:2e:c5:aa:10:59:e8:39:8d:d6:36:c0:13:1b:73:03:1d: e8:18:9a:ba:d8:e1:ed:fa:f7:cb:b3:b5:02:11:99:17:eb:3a: 69:58:d4:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMki59tiGYbazx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NTU1OTA3ZjktNWQwOS00Y2I4LWI0ODktODgyMWYyMzU2MWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG2CWnNdhOYMYmKO4bHYnhaFDHGYvZ3jRzuv mbzPAlHtUsXIvhCweyHXawDUUwP18Ixx/dFwxU2aWTHu2Xxhs1Hf+YtbV807O24u uTqkLpxE+fIK8QPMlJGIrwNMLIZ07IKlsEKalUVSoHSOO3j961ikTloJqPT+4W4C 8BTcm8MC1YC8dqCBFTYeXZ6QPA4Y4tJm85e4dGF6MQjOHlCrjX0r+f+RVp5hhnzJ IhDZ89mKF8I24iJuV9gsVRBGrorQBLfrQah6dYLDoHogbb33dlYLf2ff7aLqXpTN 8laQrBVSVrh/8lt7ryd6GdNieei/2o6LoSrehzyRAi4yfSxt7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPkjGVsGTm9gjfnhrRkI5dbnf5tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjA0ZDQyZDctZDU2ZS0z OGU2LWE1ZTItN2I2YWM1YTgxMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSabgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJ6b6EBqzBZqwHFoTPs3nwOfDzeTk9KoY8v/BhYu/3Sp5lhW6/Uub1Y 1uABIo+USkfGIlXK87xF/Y5yCuz/ZCGrBFZOqhgkoQnoqEuYV1yrQSRpl28AgZY6 Zf7/uk3SkgvylamR2cSkyVKzagTENNOk7BsN5TfA84FC3HqRfZFI8kYJbs0vJhXU q6iBlH2MF1j76Tv65RWgE+693IvrwiBTY/GuJR8HFJm/YcEucsmeONiL0jRdWkFM mTByQ+utEeQbyF5K672EVQlQwqtDyxadw+cf6UQAiIfZLsWqEFnoOY3WNsATG3MD HegYmrrY4e3698uztQIRmRfrOmlY1GE= -----END CERTIFICATE-----Generated at Tue Jun 3 04:57:49 2025 by rpki-client