$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/907d7c6a-d2a0-3eae-855d-2e3bb3a3c70e.roa File: 907d7c6a-d2a0-3eae-855d-2e3bb3a3c70e.roa (raw, json) Hash identifier: vMCP7rsCR5CaaPN7Qy1/hMcwLSZPFHxk9CtQM930gOo= Subject key identifier: 3F:5A:81:93:17:CB:CC:8D:D6:D9:6D:B2:C8:25:10:96:AE:6C:36:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0816E2C77A4DD950A04A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/907d7c6a-d2a0-3eae-855d-2e3bb3a3c70e.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 73.210.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:16:e2:c7:7a:4d:d9:50:a0:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=d6a53e31-bb55-4a30-be4a-e13b930aaf29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:48:0c:b2:37:03:81:db:a0:c8:11:78:11:f6: 97:ad:a1:b2:e2:66:e2:34:33:f4:93:06:31:63:2e: d6:20:15:34:49:a6:e7:03:5b:d7:f5:62:27:98:70: 6d:d8:ff:2b:a1:3d:d7:4f:93:4f:e0:8c:ec:50:eb: c2:af:15:9a:3f:04:36:18:a7:58:67:80:03:12:75: 49:c5:6e:b8:11:c1:c4:d7:4a:78:58:9d:1e:15:37: 44:87:70:dc:1c:5c:93:d6:5c:32:3f:c9:b6:4c:71: 1b:c8:02:67:ba:f0:2f:5a:5c:57:07:cc:66:38:7a: f6:92:a4:a1:37:b6:53:55:12:97:83:54:de:d8:83: 1e:98:86:8d:8b:ad:21:a5:f8:74:25:cb:2e:77:40: 92:55:b0:91:b8:fd:7d:fd:16:72:c2:c0:f1:e4:b3: 2a:e8:d5:6a:b3:98:bb:10:68:b9:b0:cb:8b:9e:75: 27:dc:55:0e:a8:c2:5f:94:13:be:1f:a6:52:a8:67: 60:1d:51:33:89:4b:5c:4d:cf:f0:0b:62:66:14:0e: d0:d5:b6:73:39:f3:a0:8b:55:08:9f:48:77:84:1a: 70:f3:9b:7d:da:dc:38:ad:75:25:0a:64:c8:bc:67: f2:2a:43:35:4c:f3:91:36:33:27:8b:5a:49:df:ae: a3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5A:81:93:17:CB:CC:8D:D6:D9:6D:B2:C8:25:10:96:AE:6C:36:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/907d7c6a-d2a0-3eae-855d-2e3bb3a3c70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.210.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d2:2e:79:bb:b2:a5:16:e8:60:d8:a2:3e:cc:13:de:1d:9b: 3a:23:2b:ea:36:36:25:6b:bd:1c:e7:c3:96:4c:da:50:ab:f1: 12:6b:9d:33:15:3f:35:2e:a6:5a:c4:5d:ab:5f:d6:41:93:2b: 03:14:31:f0:da:7e:77:ba:67:e1:ab:a8:ae:7e:e8:3c:25:75: d4:a4:b3:12:9a:66:8f:11:57:6d:1b:c1:54:ed:48:a4:0d:32: 4d:07:3e:bf:47:56:44:fa:83:39:27:24:05:e2:80:3d:e8:93: 63:df:27:5a:10:c4:72:38:96:88:c5:ab:f1:95:e9:96:e4:6b: 05:c7:4c:69:6b:06:ad:f5:fc:39:7e:d8:af:7d:05:ac:80:9a: 79:d5:b8:10:fc:4d:e2:86:ca:15:21:11:83:1b:6a:8a:10:b7: f3:1e:a1:32:aa:a3:33:ba:ac:3b:45:91:eb:d8:57:81:51:7e: d5:b9:46:f7:ca:a4:8f:8b:27:8c:d2:fa:8d:23:36:cc:83:08: c5:aa:0b:e5:8c:b3:37:6b:a3:e1:30:0f:f3:df:32:fd:e1:82: 43:33:db:0a:f4:d9:21:46:86:c0:b4:28:8f:4b:ed:22:fb:bc: dc:77:4b:2c:8b:f7:61:f0:93:a6:b1:73:99:9f:46:ce:00:f6: d9:ce:5f:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCBbix3pN2VCgSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZDZhNTNlMzEtYmI1NS00YTMwLWJlNGEtZTEzYjkzMGFhZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUgMsjcDgdugyBF4EfaXraGy4mbiNDP0kwYx Yy7WIBU0SabnA1vX9WInmHBt2P8roT3XT5NP4IzsUOvCrxWaPwQ2GKdYZ4ADEnVJ xW64EcHE10p4WJ0eFTdEh3DcHFyT1lwyP8m2THEbyAJnuvAvWlxXB8xmOHr2kqSh N7ZTVRKXg1Te2IMemIaNi60hpfh0Jcsud0CSVbCRuP19/RZywsDx5LMq6NVqs5i7 EGi5sMuLnnUn3FUOqMJflBO+H6ZSqGdgHVEziUtcTc/wC2JmFA7Q1bZzOfOgi1UI n0h3hBpw85t92tw4rXUlCmTIvGfyKkM1TPORNjMni1pJ366jXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9agZMXy8yN1tltssglEJaubDbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTA3ZDdjNmEtZDJhMC0z ZWFlLTg1NWQtMmUzYmIzYTNjNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrSLnm7sqUW6GDYoj7ME94dmzojK+o2NiVrvRznw5ZM2lCr8RJrnTMV PzUuplrEXatf1kGTKwMUMfDafne6Z+GrqK5+6DwlddSksxKaZo8RV20bwVTtSKQN Mk0HPr9HVkT6gzknJAXigD3ok2PfJ1oQxHI4lojFq/GV6ZbkawXHTGlrBq31/Dl+ 2K99BayAmnnVuBD8TeKGyhUhEYMbaooQt/MeoTKqozO6rDtFkevYV4FRftW5RvfK pI+LJ4zS+o0jNsyDCMWqC+WMszdro+EwD/PfMv3hgkMz2wr02SFGhsC0KI9L7SL7 vNx3SyyL92Hwk6axc5mfRs4A9tnOX2U= -----END CERTIFICATE-----Generated at Tue Jun 3 05:50:14 2025 by rpki-client