$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3a67fc-0eea-3ff7-95d4-b7f0fd4e56e8.roa File: 8f3a67fc-0eea-3ff7-95d4-b7f0fd4e56e8.roa (raw, json) Hash identifier: pM9hHxctoRcARgSl2lwhYTTGsdiKwdByln8csLVWozE= Subject key identifier: 18:95:9C:D6:BC:2B:30:47:54:51:86:FA:1D:E2:1B:21:C0:9B:44:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF755A8DCA7CDFF6672CF400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3a67fc-0eea-3ff7-95d4-b7f0fd4e56e8.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 7725 IP address blocks: 73.58.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:5a:8d:ca:7c:df:f6:67:2c:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=8bf86899-6899-4b83-b1cd-a6a8d3b7607a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:28:76:fe:17:65:80:2c:39:7c:a5:8e:7b:3f: ae:13:6f:40:43:64:93:03:06:44:a4:0f:47:40:88: 50:f5:5d:08:29:3b:c5:32:05:4d:0f:6d:26:c1:fa: 4e:f8:dd:6b:07:ba:74:62:7e:73:02:cb:21:e5:bd: da:69:f4:1f:39:95:ac:05:ba:a0:41:f3:70:d0:0a: 7a:6c:c7:e2:0d:db:a5:64:ba:f6:93:2d:e6:6f:d2: 0f:2a:98:ac:30:f4:cf:1a:82:da:27:16:41:5c:67: 03:08:80:41:67:15:5d:7f:1b:ea:43:32:87:84:93: 7c:93:28:27:b8:53:1f:63:0d:84:e5:52:25:be:6b: 9d:87:55:12:b6:b6:95:82:2a:99:b8:15:3c:5f:10: 40:a5:18:39:f7:e9:95:3b:f1:33:d1:db:71:07:5e: 7b:6b:79:dc:df:40:32:5b:e5:fe:c8:fb:0f:19:46: 30:be:57:ee:42:c6:0d:26:61:34:5c:57:63:f4:f6: dd:d6:d7:79:8f:50:3c:80:16:d5:bb:f0:27:49:f3: b6:89:2f:e0:90:64:b2:45:68:13:1f:5a:ea:9f:6a: d1:c2:9b:e1:ab:6e:ef:07:45:00:5e:f6:8a:33:1b: f0:de:93:e0:17:19:af:ae:d3:9a:9a:fe:c7:41:79: dd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:95:9C:D6:BC:2B:30:47:54:51:86:FA:1D:E2:1B:21:C0:9B:44:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f3a67fc-0eea-3ff7-95d4-b7f0fd4e56e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.58.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:f0:d5:a5:a8:37:a4:43:95:f3:a0:e5:b7:2b:b5:6a:b2:3c: e4:07:ef:54:ec:c7:c6:57:20:a4:5a:9b:71:30:73:c6:ae:c8: 9d:00:88:3f:b5:a0:4d:18:9b:be:36:80:8e:3f:2f:59:80:b1: 66:2f:02:96:9d:79:f9:8b:0b:1d:70:43:ef:77:4b:13:a3:e4: 36:1c:b0:c2:97:b2:ca:26:da:bc:b9:29:11:5b:7e:6c:c5:4a: 64:8c:7f:25:a8:30:17:b0:9e:82:58:0a:3b:69:61:d5:49:7f: f9:8f:3d:ad:ec:ac:db:c8:68:71:d2:81:2d:96:eb:40:c1:aa: 27:86:f6:93:2a:5a:4d:1d:a8:9e:24:76:a0:f4:c3:28:66:b2: a1:ed:6a:d9:71:45:1d:f0:8d:7e:f6:8b:81:e6:5a:40:ba:de: f0:e1:4c:c5:d6:ed:02:f9:70:14:26:fd:d7:93:06:bc:b1:6f: 51:35:dc:ac:88:15:bf:53:e2:b2:f8:76:db:95:11:e0:e1:89: 77:47:89:a9:d3:2b:8b:d4:86:5c:97:c3:f4:3f:cf:a3:7d:b5: d7:9d:fe:6d:65:c2:1c:8f:37:10:26:72:40:7f:f5:c1:1e:21: 4f:5f:6d:6c:32:45:d3:73:6d:14:39:d9:5b:a4:79:1e:e5:bc: 42:01:24:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dVqNynzf9mcs9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk OGJmODY4OTktNjg5OS00YjgzLWIxY2QtYTZhOGQzYjc2MDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSh2/hdlgCw5fKWOez+uE29AQ2STAwZEpA9H QIhQ9V0IKTvFMgVND20mwfpO+N1rB7p0Yn5zAssh5b3aafQfOZWsBbqgQfNw0Ap6 bMfiDdulZLr2ky3mb9IPKpisMPTPGoLaJxZBXGcDCIBBZxVdfxvqQzKHhJN8kygn uFMfYw2E5VIlvmudh1UStraVgiqZuBU8XxBApRg59+mVO/Ez0dtxB157a3nc30Ay W+X+yPsPGUYwvlfuQsYNJmE0XFdj9Pbd1td5j1A8gBbVu/AnSfO2iS/gkGSyRWgT H1rqn2rRwpvhq27vB0UAXvaKMxvw3pPgFxmvrtOamv7HQXndKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiVnNa8KzBHVFGG+h3iGyHAm0S2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGYzYTY3ZmMtMGVlYS0z ZmY3LTk1ZDQtYjdmMGZkNGU1NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSToQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3w1aWoN6RDlfOg5bcrtWqyPOQH71Tsx8ZXIKRam3Ewc8auyJ0AiD+1 oE0Ym742gI4/L1mAsWYvApadefmLCx1wQ+93SxOj5DYcsMKXssom2ry5KRFbfmzF SmSMfyWoMBewnoJYCjtpYdVJf/mPPa3srNvIaHHSgS2W60DBqieG9pMqWk0dqJ4k dqD0wyhmsqHtatlxRR3wjX72i4HmWkC63vDhTMXW7QL5cBQm/deTBryxb1E13KyI Fb9T4rL4dtuVEeDhiXdHianTK4vUhlyXw/Q/z6N9tded/m1lwhyPNxAmckB/9cEe IU9fbWwyRdNzbRQ52VukeR7lvEIBJL4= -----END CERTIFICATE-----Generated at Tue Jun 3 04:58:25 2025 by rpki-client