$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cece770-2b57-3cfd-b6a5-93384c7e6a88.roa File: 8cece770-2b57-3cfd-b6a5-93384c7e6a88.roa (raw, json) Hash identifier: vI3UAtB/1E9yS3UHFNDXzP7RFTMFPgGi7DMyWHsl19c= Subject key identifier: C4:AC:AF:69:54:24:D7:A8:AE:86:CE:FF:37:4F:32:E1:1F:7D:10:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C083F2F7AE19F2FA3F3BF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cece770-2b57-3cfd-b6a5-93384c7e6a88.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 73.8.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:3f:2f:7a:e1:9f:2f:a3:f3:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=0595bd1e-4da3-44d1-89d8-96b71a1e319f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:2f:5b:09:88:f8:ac:1e:ee:a4:60:85:4d:ce: 70:04:32:3a:31:50:a0:a8:4a:4e:3d:a6:f0:a0:26: 53:77:cc:ad:0a:ab:41:26:0e:02:2f:ba:32:78:73: 7a:8d:46:5d:10:16:7d:20:c0:b5:36:cf:b2:f8:a7: 73:86:6d:72:7b:f3:c5:93:f9:77:ef:9f:85:98:d4: 8b:ee:d1:9d:65:ab:59:92:c3:3a:9c:6f:24:52:e0: 8b:30:f9:e3:e6:7f:d2:9d:ca:4b:03:b0:92:52:35: d5:8f:80:26:c3:86:11:58:dd:82:9a:2b:3f:33:0b: 9a:96:1c:5d:bf:1a:95:12:22:c7:3a:f0:11:fd:d9: bc:7e:3d:fc:60:aa:d5:21:51:69:95:9f:83:9c:cd: 44:3b:c5:be:27:14:84:ae:4b:ee:80:ae:64:78:b9: 6a:6a:7d:5f:27:4c:c3:8a:d8:d0:77:61:75:da:94: 19:17:f6:53:4a:fc:9a:d3:50:a0:40:49:9b:95:59: 38:14:c5:de:f4:f6:17:89:70:7f:f3:ca:05:79:0a: d4:34:b7:9b:a3:d3:f7:b9:97:97:7f:44:4b:ce:f6: 8c:15:1a:97:f1:e0:95:66:5d:fa:b4:de:2d:14:d5: b8:85:c8:f4:0d:35:e1:e6:e7:4a:46:43:36:32:ef: 4e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AC:AF:69:54:24:D7:A8:AE:86:CE:FF:37:4F:32:E1:1F:7D:10:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cece770-2b57-3cfd-b6a5-93384c7e6a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.8.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d9:3d:7f:ae:bb:7c:19:90:5a:b8:04:48:8f:4f:a5:5a:23: f9:67:f9:08:fb:b5:c1:22:10:4b:a3:ca:df:0a:ca:62:9f:df: f5:89:a9:88:54:62:00:4b:ca:4b:7e:6a:35:ec:41:24:f9:fc: 73:9e:14:96:1b:9f:17:6d:08:53:4b:de:a6:2c:ab:da:89:a3: 29:d9:8d:ce:55:0d:e5:77:4b:72:a2:51:60:48:bd:be:32:02: ee:2b:bd:37:98:b2:7c:6d:0d:ec:3e:51:3c:b2:28:97:32:cd: 03:c9:1c:fc:b9:ee:87:ff:55:33:0f:00:e7:c2:d1:ba:62:7a: 65:93:e7:47:8f:53:03:30:b2:a2:25:b7:54:b1:6a:31:e1:ce: 5a:9f:40:6b:4e:d0:d4:36:4a:de:46:7d:51:f5:02:fe:96:36: a0:2f:d3:48:14:20:1b:16:ed:24:e1:0f:4e:cc:d6:25:06:62: fe:e2:07:fb:9c:07:09:c5:a6:bf:29:80:66:7a:95:67:a2:d8: 27:5e:9b:16:1a:8f:af:cc:cb:4d:8c:34:1b:84:31:02:62:69: 91:fd:f3:09:4a:93:79:d0:55:7e:21:97:70:81:6a:33:52:53: 72:eb:5a:99:de:bf:27:39:4c:3c:eb:ef:61:6e:96:d7:26:ad: 75:40:fa:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCD8veuGfL6PzvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MDU5NWJkMWUtNGRhMy00NGQxLTg5ZDgtOTZiNzFhMWUzMTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+S9bCYj4rB7upGCFTc5wBDI6MVCgqEpOPabw oCZTd8ytCqtBJg4CL7oyeHN6jUZdEBZ9IMC1Ns+y+Kdzhm1ye/PFk/l375+FmNSL 7tGdZatZksM6nG8kUuCLMPnj5n/SncpLA7CSUjXVj4Amw4YRWN2Cmis/Mwualhxd vxqVEiLHOvAR/dm8fj38YKrVIVFplZ+DnM1EO8W+JxSErkvugK5keLlqan1fJ0zD itjQd2F12pQZF/ZTSvya01CgQEmblVk4FMXe9PYXiXB/88oFeQrUNLebo9P3uZeX f0RLzvaMFRqX8eCVZl36tN4tFNW4hcj0DTXh5udKRkM2Mu9OjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSsr2lUJNeorobO/zdPMuEffRA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGNlY2U3NzAtMmI1Ny0z Y2ZkLWI2YTUtOTMzODRjN2U2YTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSQiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7ZPX+uu3wZkFq4BEiPT6VaI/ln+Qj7tcEiEEujyt8KymKf3/WJqYhU YgBLykt+ajXsQST5/HOeFJYbnxdtCFNL3qYsq9qJoynZjc5VDeV3S3KiUWBIvb4y Au4rvTeYsnxtDew+UTyyKJcyzQPJHPy57of/VTMPAOfC0bpiemWT50ePUwMwsqIl t1SxajHhzlqfQGtO0NQ2St5GfVH1Av6WNqAv00gUIBsW7SThD07M1iUGYv7iB/uc BwnFpr8pgGZ6lWei2CdemxYaj6/My02MNBuEMQJiaZH98wlKk3nQVX4hl3CBajNS U3LrWpnevyc5TDzr72FultcmrXVA+rc= -----END CERTIFICATE-----Generated at Tue Jun 3 06:08:38 2025 by rpki-client