$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a49d16ec-d7c9-39db-8fb6-2b873410c2e1.roa File: a49d16ec-d7c9-39db-8fb6-2b873410c2e1.roa (raw, json) Hash identifier: N8E+9993/3zzOQ265XJdxTg0Om1w23kkb0FqOnALm9c= Subject key identifier: A7:C7:B2:1A:9B:E3:D5:94:58:F8:F2:5A:5F:E1:01:4B:8A:24:9B:C1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431B03DCC6F71C609920200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a49d16ec-d7c9-39db-8fb6-2b873410c2e1.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 73.238.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:b0:3d:cc:6f:71:c6:09:92:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=35d7bcca-485c-4ad9-92be-890891118ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b4:82:db:d1:ad:33:87:bc:44:96:b8:9e:84: cd:b8:14:0d:a0:c8:c1:2a:c7:aa:cb:ae:7d:5b:5a: 14:68:62:c8:a8:25:82:20:ff:85:0e:da:18:84:48: 1b:ba:19:74:fd:d9:63:84:e1:65:ee:d2:f5:d1:2c: 2d:a3:f7:6b:c5:d9:3c:2b:43:8f:15:b6:29:84:90: 5a:62:df:68:71:fd:52:9f:af:8c:bb:84:dd:3d:05: a5:5d:a7:16:f9:3b:c4:d7:e1:65:05:9f:f4:33:cc: 8b:b5:91:dd:91:80:f6:7c:ba:91:61:43:6a:03:5f: 7e:94:ed:d5:9c:a3:9c:cc:31:51:68:46:97:e9:58: 60:da:d4:a8:58:d6:96:de:23:58:93:98:af:f3:1b: 35:f2:ac:a3:97:e3:1c:0a:63:fb:83:62:42:a3:c9: 62:74:61:41:69:3a:68:c6:a7:e6:79:81:8d:c2:06: d8:8d:d2:ca:e6:95:53:a8:d2:9f:de:22:3a:ae:a9: 38:74:f5:e7:3a:f0:0b:47:42:39:6e:af:94:a3:0a: 6c:78:58:13:8e:ad:22:60:cf:5e:b9:86:11:6f:a3: f4:a0:a1:53:3c:83:c2:48:b3:80:69:d1:ed:46:84: 8a:07:23:74:b8:06:e2:44:42:59:5f:8f:d9:73:19: 08:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C7:B2:1A:9B:E3:D5:94:58:F8:F2:5A:5F:E1:01:4B:8A:24:9B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a49d16ec-d7c9-39db-8fb6-2b873410c2e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.238.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:64:16:5c:be:fa:fa:62:7f:c2:89:40:0f:20:d1:cf:6e:c5: 74:e0:98:89:65:8a:83:b6:a5:b4:73:03:66:18:d6:19:36:bc: 9b:9d:24:b5:e0:99:89:36:ed:b3:ad:86:dc:13:c4:0a:e8:96: 2f:77:99:ee:e6:ec:04:9b:3e:43:a1:d7:33:c9:fd:4f:7c:c1: 1f:d3:f6:94:14:45:09:3c:ca:1e:01:2b:a7:12:67:6e:c8:52: 10:b8:b4:83:44:08:3e:bc:fa:b3:72:fc:ba:9c:c1:ed:97:12: a2:27:34:1e:21:fe:ac:27:d2:bf:70:21:dd:2c:02:76:98:77: d5:97:9b:3b:1e:82:ba:80:2a:e7:90:1a:f8:4c:ba:72:44:e3: 49:f2:71:1d:cd:a9:3e:fd:24:c9:25:04:d6:dc:1c:a7:41:af: 80:49:3b:67:17:a0:41:e7:d5:21:91:13:bf:8e:db:2a:71:20: 3c:dc:48:cb:39:89:69:f8:ff:79:68:ae:3b:05:2c:07:b0:65: 59:7c:f3:8a:d5:56:1f:06:4b:38:95:78:5e:2e:78:64:09:1a: 1f:08:48:1c:90:a3:d8:15:93:4c:15:20:65:bc:a9:f4:d9:69: 03:61:3b:98:57:4d:8e:66:87:70:0b:b1:bc:5d:28:2f:00:24: 38:39:fb:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMbA9zG9xxgmSAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MzVkN2JjY2EtNDg1Yy00YWQ5LTkyYmUtODkwODkxMTE4ZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLSC29GtM4e8RJa4noTNuBQNoMjBKseqy659 W1oUaGLIqCWCIP+FDtoYhEgbuhl0/dljhOFl7tL10Swto/drxdk8K0OPFbYphJBa Yt9ocf1Sn6+Mu4TdPQWlXacW+TvE1+FlBZ/0M8yLtZHdkYD2fLqRYUNqA19+lO3V nKOczDFRaEaX6Vhg2tSoWNaW3iNYk5iv8xs18qyjl+McCmP7g2JCo8lidGFBaTpo xqfmeYGNwgbYjdLK5pVTqNKf3iI6rqk4dPXnOvALR0I5bq+UowpseFgTjq0iYM9e uYYRb6P0oKFTPIPCSLOAadHtRoSKByN0uAbiREJZX4/ZcxkI1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfHshqb49WUWPjyWl/hAUuKJJvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQ5ZDE2ZWMtZDdjOS0z OWRiLThmYjYtMmI4NzM0MTBjMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASe5fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJkFly++vpif8KJQA8g0c9uxXTgmIllioO2pbRzA2YY1hk2vJudJLXg mYk27bOthtwTxAroli93me7m7ASbPkOh1zPJ/U98wR/T9pQURQk8yh4BK6cSZ27I UhC4tINECD68+rNy/Lqcwe2XEqInNB4h/qwn0r9wId0sAnaYd9WXmzsegrqAKueQ GvhMunJE40nycR3NqT79JMklBNbcHKdBr4BJO2cXoEHn1SGRE7+O2ypxIDzcSMs5 iWn4/3lorjsFLAewZVl884rVVh8GSziVeF4ueGQJGh8ISByQo9gVk0wVIGW8qfTZ aQNhO5hXTY5mh3ALsbxdKC8AJDg5+6Q= -----END CERTIFICATE-----Generated at Tue Jun 3 04:47:09 2025 by rpki-client