$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac254d8d-76d5-3f47-b6b0-3d797877c5a8.roa File: ac254d8d-76d5-3f47-b6b0-3d797877c5a8.roa (raw, json) Hash identifier: WTqZZ15o11npxlfILOeLSFMv+eGFc/hV97iAmDQzevg= Subject key identifier: 89:E7:65:84:DE:78:87:33:41:24:C4:E1:86:7F:2D:00:58:ED:E1:A3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06E2FCB97A82693DC5AF40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac254d8d-76d5-3f47-b6b0-3d797877c5a8.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 73.158.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:e2:fc:b9:7a:82:69:3d:c5:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=b41c78aa-1ca7-4fc3-8c5c-c380565f8f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6f:fb:ca:9f:5b:0e:9f:65:53:15:ac:5b:a7: 86:ae:31:0d:aa:73:7a:a1:48:e3:b9:d5:3d:4e:0e: 2b:fe:0c:2a:d1:5b:f3:61:cf:4a:03:ec:0f:61:cb: 98:6b:88:fb:92:25:58:3d:c1:df:46:be:53:67:21: e3:f1:78:c9:39:76:fc:95:ed:d5:01:3a:15:ec:c4: 5c:6b:e8:15:6e:65:b5:92:d4:4b:e8:cf:e0:ea:e7: 68:b8:2c:5b:5e:f9:78:6a:e0:b4:5d:ee:dc:2e:07: ad:69:75:6f:6f:ae:89:15:ff:46:a4:bc:6f:b4:bd: f3:c2:6a:68:e4:05:ef:09:d3:6f:53:a3:4b:72:a6: b1:7f:15:cc:64:06:25:4c:64:fc:be:2a:ef:c8:12: f8:17:20:59:0e:1a:b3:77:d1:5f:17:2c:14:4b:f9: 43:20:83:c6:27:a0:cf:20:84:f1:56:ae:24:eb:41: 00:e0:5e:53:a8:b5:4c:6d:f8:8f:46:6d:da:7f:d8: b4:f1:4d:0e:79:a1:1c:4a:a6:7f:2c:87:4d:ad:05: 40:27:6d:4c:bc:8e:17:15:c2:6a:c5:73:8e:29:a7: 3a:20:e9:06:2b:6f:49:a7:f9:6d:d7:72:fb:59:e9: 43:59:2e:78:e4:0d:0b:fd:40:39:9e:36:eb:39:dd: 1e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E7:65:84:DE:78:87:33:41:24:C4:E1:86:7F:2D:00:58:ED:E1:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac254d8d-76d5-3f47-b6b0-3d797877c5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.158.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:6e:84:e2:1a:62:33:42:ae:40:31:47:60:86:f0:e3:f5:8b: c7:c9:83:82:18:dc:90:a0:e1:f4:65:73:53:9a:0c:c5:ba:71: 49:72:aa:29:69:4b:85:d2:4b:63:d2:d8:5e:8b:d5:f8:e3:7c: 8d:51:b6:0e:b8:43:78:98:65:8c:19:74:45:37:a5:b9:f7:b0: ca:a4:73:6e:10:07:d2:e1:06:f7:a1:a9:d0:76:c7:a8:88:22: 8d:22:6f:06:fd:0f:7e:84:4b:3c:bb:5d:0d:96:17:89:f3:45: cb:a2:97:97:dc:c7:e7:30:19:14:3b:c2:8e:ab:db:30:cb:bb: e7:ac:59:3c:f9:2b:50:ac:ea:12:17:9f:27:5e:1c:b6:c6:2c: 46:24:ff:8e:87:48:0d:79:e0:1b:39:d0:c4:5b:f8:71:98:fb: 9f:63:b9:55:cb:ba:e9:b8:b3:94:69:2c:3a:2f:ce:5b:d8:be: fe:2c:d6:f1:be:2e:8f:38:05:57:b9:5d:55:57:3f:e8:a0:ec: d7:07:35:03:49:59:14:1b:ca:15:69:a2:b3:aa:f8:38:69:c9: f4:0e:b7:c5:f4:c9:b4:7d:c4:0d:29:12:a3:07:a3:70:31:c1: 55:e0:db:f2:75:6e:1e:e8:b5:4f:de:d5:58:bd:06:e5:29:65: b5:d0:42:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBuL8uXqCaT3Fr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YjQxYzc4YWEtMWNhNy00ZmMzLThjNWMtYzM4MDU2NWY4ZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG/7yp9bDp9lUxWsW6eGrjENqnN6oUjjudU9 Tg4r/gwq0VvzYc9KA+wPYcuYa4j7kiVYPcHfRr5TZyHj8XjJOXb8le3VAToV7MRc a+gVbmW1ktRL6M/g6udouCxbXvl4auC0Xe7cLgetaXVvb66JFf9GpLxvtL3zwmpo 5AXvCdNvU6NLcqaxfxXMZAYlTGT8virvyBL4FyBZDhqzd9FfFywUS/lDIIPGJ6DP IITxVq4k60EA4F5TqLVMbfiPRm3af9i08U0OeaEcSqZ/LIdNrQVAJ21MvI4XFcJq xXOOKac6IOkGK29Jp/lt13L7WelDWS545A0L/UA5njbrOd0e0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInnZYTeeIczQSTE4YZ/LQBY7eGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWMyNTRkOGQtNzZkNS0z ZjQ3LWI2YjAtM2Q3OTc4NzdjNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSZ6KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtuhOIaYjNCrkAxR2CG8OP1i8fJg4IY3JCg4fRlc1OaDMW6cUlyqilp S4XSS2PS2F6L1fjjfI1Rtg64Q3iYZYwZdEU3pbn3sMqkc24QB9LhBvehqdB2x6iI Io0ibwb9D36ESzy7XQ2WF4nzRcuil5fcx+cwGRQ7wo6r2zDLu+esWTz5K1Cs6hIX nydeHLbGLEYk/46HSA154Bs50MRb+HGY+59juVXLuum4s5RpLDovzlvYvv4s1vG+ Lo84BVe5XVVXP+ig7NcHNQNJWRQbyhVporOq+DhpyfQOt8X0ybR9xA0pEqMHo3Ax wVXg2/J1bh7otU/e1Vi9BuUpZbXQQvM= -----END CERTIFICATE-----Generated at Tue Jun 3 05:07:25 2025 by rpki-client