$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c32d586-8bf5-39e5-b58a-daed27fdd1c9.roa File: 7c32d586-8bf5-39e5-b58a-daed27fdd1c9.roa (raw, json) Hash identifier: +hZg+hOYF7hdBkoTLZGgv6fZ/Tc+rdfXwoIbUmOi5kI= Subject key identifier: 4E:2D:65:2B:3A:E5:D9:BC:00:C7:A1:52:24:9E:94:C5:4C:A5:6B:04 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430389DBBB09588548AD380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c32d586-8bf5-39e5-b58a-daed27fdd1c9.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 73.167.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:38:9d:bb:b0:95:88:54:8a:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=8e0e36a7-0191-4012-9693-af2b2d33f974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:03:08:a4:91:e4:61:9c:9f:a8:c1:4b:cf:cc: 42:74:38:b3:51:e7:aa:05:4d:42:9f:9d:14:06:c3: 6d:62:62:79:d9:27:2f:c7:7c:56:30:8a:a7:d6:4e: e8:64:67:f4:6c:8e:eb:d3:42:e3:b1:6c:95:a0:b1: 4b:bc:6f:e3:5f:7b:94:48:52:50:09:bc:b2:3e:3f: f7:dc:e5:2d:9e:43:85:37:1f:6b:5e:ea:d7:10:1b: d7:8a:ba:9d:19:e5:87:11:df:15:36:f2:57:b2:0f: 22:a9:15:41:9e:58:d0:b8:b8:e7:90:d3:5d:17:fb: 97:10:fc:42:7b:30:28:cf:7a:52:d3:f3:19:d0:6c: 3f:76:5e:d1:85:17:fd:aa:d7:f6:80:49:08:aa:20: b6:07:c6:19:68:ee:6b:b6:86:64:24:43:3e:ce:da: 23:9b:75:d0:26:cc:bd:67:ca:61:e1:9e:13:64:b0: 56:f9:95:00:22:a7:74:09:87:cb:ca:ec:53:de:c0: a4:66:f7:11:66:f1:2c:4b:05:02:26:f8:aa:e1:40: ec:90:21:e8:a6:04:a2:c2:b7:19:7c:aa:a2:36:44: 9d:ef:f5:71:5a:cd:dd:26:ef:dc:b3:0a:6e:60:f0: 89:d1:74:2e:65:4b:15:51:ea:5a:f0:b8:62:15:01: 19:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2D:65:2B:3A:E5:D9:BC:00:C7:A1:52:24:9E:94:C5:4C:A5:6B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c32d586-8bf5-39e5-b58a-daed27fdd1c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.167.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:0c:d1:6c:3e:83:39:20:b5:d6:81:c7:7e:96:67:d0:fe:47: e3:9c:09:e3:86:28:f5:35:9d:03:24:e5:83:f2:02:ac:4a:cf: f3:b8:65:2f:5f:c2:36:2d:c7:93:c4:cb:3e:e7:e5:76:29:0b: 95:cc:08:b4:c9:65:3c:00:10:33:89:d6:8e:b5:b2:b5:f5:43: bf:83:80:22:f8:14:b2:31:76:43:f0:68:3e:cf:d7:0f:6a:e0: 88:f1:a9:76:c1:cc:83:a4:33:13:79:35:39:9e:88:0d:4f:d0: e2:1e:be:b5:89:8a:9f:36:40:79:13:94:6c:c6:4e:68:e7:a3: 54:64:05:a7:89:7a:6c:7c:c4:41:55:38:95:64:59:b0:4b:20: e2:7a:0f:de:03:f9:43:c0:37:57:a4:a9:21:32:bc:84:6e:3a: c8:6f:73:29:ac:39:5a:ff:9a:5d:bf:be:f2:06:1d:2e:51:ab: 75:63:07:cc:27:3b:f4:31:df:57:6b:77:4a:fa:ce:7c:68:42: 4e:ac:70:78:1e:9c:74:b3:26:1f:ad:3f:dc:41:8e:ca:02:c2: 8f:29:2f:5d:4e:3e:6f:c0:1d:9b:13:88:cd:b2:0c:5e:82:4a: 0a:f5:98:de:34:a2:d7:dc:23:34:af:44:ff:66:b8:30:8a:2e: b1:42:a0:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMDidu7CViFSK04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OGUwZTM2YTctMDE5MS00MDEyLTk2OTMtYWYyYjJkMzNmOTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQMIpJHkYZyfqMFLz8xCdDizUeeqBU1Cn50U BsNtYmJ52Scvx3xWMIqn1k7oZGf0bI7r00LjsWyVoLFLvG/jX3uUSFJQCbyyPj/3 3OUtnkOFNx9rXurXEBvXirqdGeWHEd8VNvJXsg8iqRVBnljQuLjnkNNdF/uXEPxC ezAoz3pS0/MZ0Gw/dl7RhRf9qtf2gEkIqiC2B8YZaO5rtoZkJEM+ztojm3XQJsy9 Z8ph4Z4TZLBW+ZUAIqd0CYfLyuxT3sCkZvcRZvEsSwUCJviq4UDskCHopgSiwrcZ fKqiNkSd7/VxWs3dJu/cswpuYPCJ0XQuZUsVUepa8LhiFQEZ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4tZSs65dm8AMehUiSelMVMpWsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2MzMmQ1ODYtOGJmNS0z OWU1LWI1OGEtZGFlZDI3ZmRkMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSafuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYM0Ww+gzkgtdaBx36WZ9D+R+OcCeOGKPU1nQMk5YPyAqxKz/O4ZS9f wjYtx5PEyz7n5XYpC5XMCLTJZTwAEDOJ1o61srX1Q7+DgCL4FLIxdkPwaD7P1w9q 4IjxqXbBzIOkMxN5NTmeiA1P0OIevrWJip82QHkTlGzGTmjno1RkBaeJemx8xEFV OJVkWbBLIOJ6D94D+UPAN1ekqSEyvIRuOshvcymsOVr/ml2/vvIGHS5Rq3VjB8wn O/Qx31drd0r6znxoQk6scHgenHSzJh+tP9xBjsoCwo8pL11OPm/AHZsTiM2yDF6C Sgr1mN40otfcIzSvRP9muDCKLrFCoEQ= -----END CERTIFICATE-----Generated at Tue Jun 3 05:37:42 2025 by rpki-client