$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/728a6a50-65a2-3763-909a-d4633aa4d33d.roa File: 728a6a50-65a2-3763-909a-d4633aa4d33d.roa (raw, json) Hash identifier: kykkmpt1xyVwfEvFg05T2uaDE8OjP6Z3I0Hjsv0UPrI= Subject key identifier: 17:15:28:C4:EE:88:7E:D5:AF:BD:8D:28:9F:94:25:F0:B3:01:57:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430FC1E2711E8D95DD44000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/728a6a50-65a2-3763-909a-d4633aa4d33d.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 73.32.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:fc:1e:27:11:e8:d9:5d:d4:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=71d47bb9-41a7-4aeb-a02e-59daa2d6897a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c1:21:3a:31:fa:f2:78:bf:54:20:c4:26:d8: 38:ed:77:59:5d:f1:cd:e7:07:e8:af:4d:d7:d1:47: d2:73:10:ce:23:25:2d:79:b4:85:cd:f8:7e:3b:1a: d1:63:af:44:7d:5e:11:70:cc:1d:a3:d7:1c:08:01: 49:56:3d:32:27:2c:87:0b:8c:9e:64:6f:85:01:5a: c9:47:26:e0:34:f3:f6:4f:4a:f5:2c:4f:5c:7e:58: b7:75:8f:54:12:6e:e6:8f:d9:b6:84:fd:73:d9:7d: c0:e6:a9:a4:1a:bd:55:c5:71:b3:2c:39:62:c4:58: 58:61:64:99:87:de:c8:3a:d1:df:79:19:ae:a2:d3: d2:c5:c9:ff:82:49:f0:84:49:d9:ea:5c:4d:fc:1f: eb:a7:91:d8:b8:c2:92:fb:26:a8:3f:0e:42:f4:8b: 45:04:bf:b3:1e:f5:8d:12:56:2a:59:85:90:65:7e: ae:40:4b:c1:58:6a:20:29:9e:ff:b0:d9:e4:06:0d: 54:a1:2d:2e:ae:81:05:b2:0d:c2:e4:c4:e8:85:2d: 62:41:df:e7:01:af:61:ee:fd:2f:d5:1b:c9:01:c8: 6b:4d:bd:01:e1:db:6c:0f:fc:98:44:be:9f:80:c9: 56:0f:49:39:e0:8b:51:2c:f5:44:fe:4c:73:2b:b7: 24:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:15:28:C4:EE:88:7E:D5:AF:BD:8D:28:9F:94:25:F0:B3:01:57:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/728a6a50-65a2-3763-909a-d4633aa4d33d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.32.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:4e:df:44:c9:6c:0a:04:a9:93:b6:2d:c4:3e:2e:60:38:d4: 12:3a:bf:be:06:58:8a:f4:fa:e3:c9:43:80:f2:ca:be:f6:86: 01:a8:2a:34:94:dc:cb:e0:b1:7d:eb:a7:cc:4c:fe:70:6c:0d: 20:e2:b8:d8:5a:ac:41:df:08:c1:a5:6b:b6:be:67:7e:7a:e9: dc:92:2e:9d:95:30:45:81:ab:ec:13:b6:5c:7d:65:af:69:78: 74:91:28:bd:01:84:0a:e0:98:e1:4a:0e:0b:f4:99:45:e5:f9: 74:cb:3f:8a:66:22:a6:a4:ef:d2:c3:95:d1:a0:53:cb:2c:3a: 16:8e:3c:c1:76:0e:47:b0:00:55:01:f4:eb:5e:63:40:42:14: d2:0f:87:c7:c0:cf:14:dc:e6:9a:73:69:ab:89:5a:ab:3e:d6: 15:7c:b0:b9:aa:63:d8:18:0f:72:d7:14:d7:ad:96:27:4d:2f: 22:bd:82:8c:0c:66:02:e7:09:fc:6a:f3:92:6d:d3:a0:38:59: 84:83:39:03:91:64:b5:15:00:10:44:49:f7:c3:1f:fe:7e:6a: 38:ef:97:5f:14:11:7e:b3:11:a8:31:2a:09:44:f6:02:e2:bf: 9e:7a:7e:87:4d:7e:1a:26:9d:0c:da:5e:31:d9:69:f7:b6:80: 21:de:70:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMPweJxHo2V3UQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NzFkNDdiYjktNDFhNy00YWViLWEwMmUtNTlkYWEyZDY4OTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMEhOjH68ni/VCDEJtg47XdZXfHN5wfor03X 0UfScxDOIyUtebSFzfh+OxrRY69EfV4RcMwdo9ccCAFJVj0yJyyHC4yeZG+FAVrJ RybgNPP2T0r1LE9cfli3dY9UEm7mj9m2hP1z2X3A5qmkGr1VxXGzLDlixFhYYWSZ h97IOtHfeRmuotPSxcn/gknwhEnZ6lxN/B/rp5HYuMKS+yaoPw5C9ItFBL+zHvWN ElYqWYWQZX6uQEvBWGogKZ7/sNnkBg1UoS0uroEFsg3C5MTohS1iQd/nAa9h7v0v 1RvJAchrTb0B4dtsD/yYRL6fgMlWD0k54ItRLPVE/kxzK7ck2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcVKMTuiH7Vr72NKJ+UJfCzAVeHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzI4YTZhNTAtNjVhMi0z NzYzLTkwOWEtZDQ2MzNhYTRkMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANFO30TJbAoEqZO2LcQ+LmA41BI6v74GWIr0+uPJQ4Dyyr72hgGoKjSU 3MvgsX3rp8xM/nBsDSDiuNharEHfCMGla7a+Z3566dySLp2VMEWBq+wTtlx9Za9p eHSRKL0BhArgmOFKDgv0mUXl+XTLP4pmIqak79LDldGgU8ssOhaOPMF2DkewAFUB 9OteY0BCFNIPh8fAzxTc5ppzaauJWqs+1hV8sLmqY9gYD3LXFNetlidNLyK9gowM ZgLnCfxq85Jt06A4WYSDOQORZLUVABBESffDH/5+ajjvl18UEX6zEagxKglE9gLi v556fodNfhomnQzaXjHZafe2gCHecOU= -----END CERTIFICATE-----Generated at Tue Jun 3 07:34:28 2025 by rpki-client