$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88a8fc64-fc6a-3f8e-a917-6a66f342ff12.roa File: 88a8fc64-fc6a-3f8e-a917-6a66f342ff12.roa (raw, json) Hash identifier: QOS9h9MSvUKSMc/hkXW9t1BPO/ig/oOfu7euFoJGgs8= Subject key identifier: DE:92:9E:97:B4:BF:E8:1B:85:68:84:FA:BD:56:44:B8:A6:9E:5F:E2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430EFA38787B63E75799080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88a8fc64-fc6a-3f8e-a917-6a66f342ff12.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 73.166.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:ef:a3:87:87:b6:3e:75:79:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=dded9ce0-e539-44d7-aab4-30b06b7a9ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:70:5f:7f:1d:33:1e:dd:55:21:07:6f:0c:b8: 8c:27:28:d6:7d:78:3f:b6:98:9c:4c:51:8a:1d:c1: e3:bb:11:c9:c3:8f:87:c4:f7:fb:35:10:5b:c3:87: 49:b0:a3:ec:22:f0:98:2d:36:23:b1:2e:d0:8d:de: 22:cd:4c:f8:d6:c3:cc:64:09:f9:d5:c8:8e:f8:c2: 3e:0a:b4:db:f3:d8:58:ab:52:52:2f:26:54:66:db: b9:55:fc:0c:63:f4:f5:49:8a:b0:1f:e7:a3:74:95: e8:cc:d4:e9:56:27:f0:53:64:21:4e:7e:e0:5d:63: cd:c7:51:75:7c:62:50:1b:84:6b:3c:8e:83:30:63: 97:e2:97:02:bd:db:13:8c:be:c6:07:2e:1d:34:27: 71:ca:b9:cc:23:32:d9:97:e0:0b:ad:74:7d:c4:aa: 1b:d5:66:54:a7:3b:e6:38:be:4c:82:bb:66:d0:cb: 3e:7d:9a:21:a0:df:7c:fb:67:60:78:96:03:20:ed: fb:e7:28:4b:c3:d8:ec:df:5e:a6:f3:5f:9e:b1:83: b5:f9:75:cd:8b:a5:92:b0:43:88:3e:16:f2:ab:88: fa:a3:ec:3d:55:a1:57:de:45:c0:b4:44:14:2d:11: 2e:c2:16:75:c9:9c:60:15:c3:9b:e9:f2:ee:d8:95: c3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:92:9E:97:B4:BF:E8:1B:85:68:84:FA:BD:56:44:B8:A6:9E:5F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88a8fc64-fc6a-3f8e-a917-6a66f342ff12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.166.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:3e:fe:f2:cc:33:58:dc:2b:a9:4b:ff:34:00:b6:a8:6f:0a: 39:ba:e3:f8:60:49:08:e8:94:ee:3a:92:bd:11:f9:9a:d4:2d: f1:e2:72:41:c1:01:e2:0e:40:40:44:14:25:08:94:32:dc:7d: c8:4a:57:2b:7e:67:24:93:a7:ce:66:32:90:83:76:0b:22:75: 9a:18:40:77:f7:3d:92:5f:0b:8f:2e:2f:0d:48:fb:33:34:f6: 98:51:ca:76:dc:e7:71:21:51:0a:38:ee:85:16:ac:75:b3:21: d9:1d:e7:c6:85:a1:15:de:44:66:3a:3c:de:78:e3:8b:dc:2d: ba:df:ff:fd:11:dc:69:72:8a:f7:f2:59:4c:89:e2:b8:b5:95: 66:62:11:7b:fd:53:12:9b:b8:3f:84:59:fd:28:c9:76:30:09: 39:0d:bd:dd:d3:b9:c5:5b:31:1a:c5:26:f3:8f:56:cf:73:d5: 43:38:bd:e3:aa:63:f2:aa:06:ce:bd:0f:d3:4d:67:a1:2c:71: 56:68:9e:73:ef:ff:bc:42:21:0e:d1:f9:7a:5a:7c:49:59:39: 3d:54:b3:f0:3c:fc:03:79:2d:75:18:fb:36:ed:4d:e2:44:40: 43:c9:4d:92:c7:4f:1a:a8:2a:ea:79:d6:87:41:db:84:cf:25: f0:29:d7:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMO+jh4e2PnV5kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZGRlZDljZTAtZTUzOS00NGQ3LWFhYjQtMzBiMDZiN2E5YmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHBffx0zHt1VIQdvDLiMJyjWfXg/tpicTFGK HcHjuxHJw4+HxPf7NRBbw4dJsKPsIvCYLTYjsS7Qjd4izUz41sPMZAn51ciO+MI+ CrTb89hYq1JSLyZUZtu5VfwMY/T1SYqwH+ejdJXozNTpVifwU2QhTn7gXWPNx1F1 fGJQG4RrPI6DMGOX4pcCvdsTjL7GBy4dNCdxyrnMIzLZl+ALrXR9xKob1WZUpzvm OL5Mgrtm0Ms+fZohoN98+2dgeJYDIO375yhLw9js316m81+esYO1+XXNi6WSsEOI Phbyq4j6o+w9VaFX3kXAtEQULREuwhZ1yZxgFcOb6fLu2JXD7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6Snpe0v+gbhWiE+r1WRLimnl/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODhhOGZjNjQtZmM2YS0z ZjhlLWE5MTctNmE2NmYzNDJmZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSabcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0+/vLMM1jcK6lL/zQAtqhvCjm64/hgSQjolO46kr0R+ZrULfHickHB AeIOQEBEFCUIlDLcfchKVyt+ZySTp85mMpCDdgsidZoYQHf3PZJfC48uLw1I+zM0 9phRynbc53EhUQo47oUWrHWzIdkd58aFoRXeRGY6PN5444vcLbrf//0R3Glyivfy WUyJ4ri1lWZiEXv9UxKbuD+EWf0oyXYwCTkNvd3TucVbMRrFJvOPVs9z1UM4veOq Y/KqBs69D9NNZ6EscVZonnPv/7xCIQ7R+XpafElZOT1Us/A8/AN5LXUY+zbtTeJE QEPJTZLHTxqoKup51odB24TPJfAp19o= -----END CERTIFICATE-----Generated at Tue Jun 3 04:55:20 2025 by rpki-client