$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3e23f57-ef76-3cfe-91cb-3e5b4a5edf4d.roa File: a3e23f57-ef76-3cfe-91cb-3e5b4a5edf4d.roa (raw, json) Hash identifier: izCa0iITi5eDCm8dM/4TN/QTZ7SxJA7cWVSz7pDFlNA= Subject key identifier: 09:FC:7B:F5:19:31:5E:44:67:C3:47:73:5A:4B:D1:0B:2A:B8:02:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43025F0654D9233B13E0640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3e23f57-ef76-3cfe-91cb-3e5b4a5edf4d.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 73.123.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:25:f0:65:4d:92:33:b1:3e:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=1921b9b3-19d7-4b1b-a386-afa1c3533a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c5:52:c9:db:91:f3:75:10:b5:d2:02:e5:80: 37:c4:04:f0:e3:42:e0:82:e3:29:2f:3a:04:a5:68: 44:d4:82:cc:ad:2a:4a:2e:2c:1b:7d:a0:57:67:64: cf:fb:c4:09:eb:51:21:42:cc:e6:9b:43:01:4e:9f: ad:be:5e:05:49:d7:1f:86:22:c4:df:f0:bd:87:82: 04:5c:b3:b7:5d:8e:10:09:88:bf:d2:98:a0:55:a1: c9:2e:19:51:1c:fd:f2:d3:db:1f:99:8e:64:b8:0d: 44:17:e7:67:49:1e:b3:4b:1e:6b:c3:63:26:ad:32: 21:f5:eb:3a:10:d7:ea:11:ea:91:98:83:66:f4:3a: 15:a7:ff:44:25:ca:2b:f9:74:24:9d:25:56:4f:e6: 33:d8:84:36:88:54:5b:55:4b:a0:00:c8:f3:b9:f1: 98:c3:30:bd:11:2e:52:9f:8c:c8:6f:27:57:4d:fe: 1e:02:2f:62:64:27:57:35:25:d2:1e:ca:5f:70:05: 47:57:6f:cd:6a:51:3a:f5:e8:53:ab:2b:70:f9:fa: 2e:bc:5f:e1:87:09:ad:72:3a:b7:f2:bf:de:6c:83: a6:52:2f:26:a2:6f:7f:f3:b7:d4:32:4c:09:97:65: 24:57:cc:e6:dd:9d:92:c8:a0:3e:a9:af:f5:14:9a: c2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FC:7B:F5:19:31:5E:44:67:C3:47:73:5A:4B:D1:0B:2A:B8:02:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3e23f57-ef76-3cfe-91cb-3e5b4a5edf4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.123.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:c6:a5:ea:f7:0f:28:45:4a:a0:aa:58:de:f9:57:e3:23:b6: 8a:60:91:9d:2b:59:28:77:56:cf:ff:8a:4d:b9:88:a9:97:44: cd:fb:3d:c4:2f:89:fa:69:53:37:c5:2d:d6:48:41:8d:5d:cc: e1:1b:f7:f4:55:a0:11:f3:43:e0:d9:98:4f:a1:79:50:75:2e: 0e:8d:96:17:1a:08:05:d2:e0:66:c6:11:be:51:b7:10:e7:e4: b9:f5:e4:ac:b1:c9:7c:15:83:61:70:9a:16:96:8c:bc:58:fa: bd:87:bc:72:96:2c:cf:e4:e6:75:2d:52:ae:92:c0:45:87:c3: 4f:b8:d2:e9:c5:ff:6b:ec:a5:a8:fd:e3:98:d8:0f:1f:40:d0: 37:2a:e0:b1:b1:1f:5c:d7:82:e6:4b:a6:36:95:10:bb:15:e3: a6:9c:ec:df:01:3f:ba:0c:6e:40:72:f4:99:96:2e:27:01:23: 53:39:29:bf:f5:f8:a1:1d:65:7d:34:47:a0:93:69:ab:e3:8e: 5f:70:31:02:53:59:8b:bf:39:9c:71:91:2e:3d:06:fd:3b:36: af:c5:aa:47:4f:b3:55:8c:be:ed:4a:d3:58:bd:52:c6:57:36: 3d:c9:0c:88:b7:c8:9a:9d:2e:06:5d:a0:f1:24:bc:1d:25:f4: d9:fa:93:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMCXwZU2SM7E+BkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MTkyMWI5YjMtMTlkNy00YjFiLWEzODYtYWZhMWMzNTMzYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocVSyduR83UQtdIC5YA3xATw40LgguMpLzoE pWhE1ILMrSpKLiwbfaBXZ2TP+8QJ61EhQszmm0MBTp+tvl4FSdcfhiLE3/C9h4IE XLO3XY4QCYi/0pigVaHJLhlRHP3y09sfmY5kuA1EF+dnSR6zSx5rw2MmrTIh9es6 ENfqEeqRmINm9DoVp/9EJcor+XQknSVWT+Yz2IQ2iFRbVUugAMjzufGYwzC9ES5S n4zIbydXTf4eAi9iZCdXNSXSHspfcAVHV2/NalE69ehTqytw+fouvF/hhwmtcjq3 8r/ebIOmUi8mom9/87fUMkwJl2UkV8zm3Z2SyKA+qa/1FJrC6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAn8e/UZMV5EZ8NHc1pL0QsquALKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTNlMjNmNTctZWY3Ni0z Y2ZlLTkxY2ItM2U1YjRhNWVkZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSXtIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPGper3DyhFSqCqWN75V+MjtopgkZ0rWSh3Vs//ik25iKmXRM37PcQv ifppUzfFLdZIQY1dzOEb9/RVoBHzQ+DZmE+heVB1Lg6NlhcaCAXS4GbGEb5RtxDn 5Ln15KyxyXwVg2FwmhaWjLxY+r2HvHKWLM/k5nUtUq6SwEWHw0+40unF/2vspaj9 45jYDx9A0Dcq4LGxH1zXguZLpjaVELsV46ac7N8BP7oMbkBy9JmWLicBI1M5Kb/1 +KEdZX00R6CTaavjjl9wMQJTWYu/OZxxkS49Bv07Nq/FqkdPs1WMvu1K01i9UsZX Nj3JDIi3yJqdLgZdoPEkvB0l9Nn6kw8= -----END CERTIFICATE-----Generated at Tue Jun 3 04:55:23 2025 by rpki-client