$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8ce407e-0fdb-36dc-8153-1df9f9f99780.roa File: b8ce407e-0fdb-36dc-8153-1df9f9f99780.roa (raw, json) Hash identifier: ZU2d6aEaZ5cn30VwvmcFn3jTB+a3MbzlUfmUyxL6GSE= Subject key identifier: 71:E5:90:C9:65:61:CA:9F:A2:B9:00:2D:1E:42:7E:BC:18:E3:4C:C7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF757C052AECE2CEE5428E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8ce407e-0fdb-36dc-8153-1df9f9f99780.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 33659 IP address blocks: 73.150.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:7c:05:2a:ec:e2:ce:e5:42:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=18a5db1f-0da1-4c77-b0eb-68bb3a8a5f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ba:19:85:df:a2:13:2d:82:60:ab:9b:6f:2b: 86:0d:1d:d6:77:c3:4f:16:be:69:1a:c8:44:a0:be: b4:21:63:ef:86:9d:b7:81:f0:86:78:6e:3b:1e:d2: cf:82:4b:98:e1:2c:af:6e:f6:e7:b6:e0:94:38:ce: 1c:63:ea:6e:20:c3:de:94:ed:07:c7:c6:56:5d:5a: d1:f8:44:3e:a9:a4:84:a9:a8:fa:b8:ed:1f:d1:29: 4a:2f:67:03:42:aa:25:8d:c6:e7:41:27:11:ad:67: 61:51:47:fe:91:73:68:05:ac:db:ad:55:7d:ff:d9: ee:49:16:7e:96:ac:fa:07:84:ee:68:d7:7e:f7:ed: 1a:84:c0:ed:cb:89:44:72:55:6f:c5:78:05:b7:c0: 13:73:6d:65:4d:61:06:bf:ce:8d:0f:a8:9b:7b:5a: 03:25:8e:f7:ed:b5:44:19:e3:fb:b3:5d:30:2f:1e: 6c:fd:f5:40:97:c3:0c:99:8a:6b:00:3b:13:77:c2: 5c:cf:d0:1f:b4:a7:51:e3:9f:a2:23:44:03:8f:35: 21:80:83:bb:54:13:0b:ac:7f:a3:c9:e7:9b:b7:71: 69:33:2f:16:b6:cc:b3:c2:fe:c2:14:be:37:f3:8f: db:93:77:9b:db:0b:8d:3b:ba:95:87:c2:15:50:b1: 4a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E5:90:C9:65:61:CA:9F:A2:B9:00:2D:1E:42:7E:BC:18:E3:4C:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8ce407e-0fdb-36dc-8153-1df9f9f99780.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.150.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:23:56:ed:f7:39:94:d7:86:c0:50:fd:fe:3c:a2:d0:b2:4e: 13:57:69:28:bc:ae:cd:3e:29:68:eb:e2:a8:1e:9b:3e:6d:e5: 78:bb:b9:73:55:6e:29:59:1a:90:74:75:16:b5:6b:c2:0f:5f: 00:a8:bd:06:d3:87:ac:2c:8f:a2:95:08:e3:d1:d0:2b:e1:a7: ac:0b:bc:1b:d4:d5:76:99:80:63:ca:a2:fc:e3:55:c2:ff:94: e8:9f:da:bc:f3:35:11:77:b3:50:db:81:33:03:93:70:a5:76: 77:0f:c7:3e:e1:ce:9b:23:40:e2:d2:11:f3:d9:b3:a3:3d:40: cd:b6:65:b5:f0:a5:16:e1:8e:8d:df:de:ee:d0:fb:0b:f6:68: 8e:23:ca:d7:50:01:63:93:92:ef:bc:90:5e:bb:08:56:d5:b1: 44:01:3e:dd:e1:36:5e:79:e7:9a:36:fe:be:7d:fe:20:ca:4c: 44:69:13:3f:46:f0:08:a2:b8:82:2e:43:5c:56:f6:be:15:d0: 22:00:05:02:74:15:3c:22:ac:af:f3:07:77:de:b8:09:c1:6c: 5d:2c:47:39:f5:1e:04:40:c8:bd:87:8b:aa:6a:64:00:b3:91: ef:e4:27:6e:23:e5:c0:38:d2:73:4b:2a:35:c2:e5:bf:1e:72: e9:e9:f6:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dXwFKuzizuVCjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk MThhNWRiMWYtMGRhMS00Yzc3LWIwZWItNjhiYjNhOGE1ZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLoZhd+iEy2CYKubbyuGDR3Wd8NPFr5pGshE oL60IWPvhp23gfCGeG47HtLPgkuY4SyvbvbntuCUOM4cY+puIMPelO0Hx8ZWXVrR +EQ+qaSEqaj6uO0f0SlKL2cDQqoljcbnQScRrWdhUUf+kXNoBazbrVV9/9nuSRZ+ lqz6B4TuaNd+9+0ahMDty4lEclVvxXgFt8ATc21lTWEGv86ND6ibe1oDJY737bVE GeP7s10wLx5s/fVAl8MMmYprADsTd8Jcz9AftKdR45+iI0QDjzUhgIO7VBMLrH+j yeebt3FpMy8Wtsyzwv7CFL4384/bk3eb2wuNO7qVh8IVULFKkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHlkMllYcqforkALR5CfrwY40zHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjhjZTQwN2UtMGZkYi0z NmRjLTgxNTMtMWRmOWY5Zjk5NzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSZaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEjVu33OZTXhsBQ/f48otCyThNXaSi8rs0+KWjr4qgemz5t5Xi7uXNV bilZGpB0dRa1a8IPXwCovQbTh6wsj6KVCOPR0Cvhp6wLvBvU1XaZgGPKovzjVcL/ lOif2rzzNRF3s1DbgTMDk3CldncPxz7hzpsjQOLSEfPZs6M9QM22ZbXwpRbhjo3f 3u7Q+wv2aI4jytdQAWOTku+8kF67CFbVsUQBPt3hNl5555o2/r59/iDKTERpEz9G 8AiiuIIuQ1xW9r4V0CIABQJ0FTwirK/zB3feuAnBbF0sRzn1HgRAyL2Hi6pqZACz ke/kJ24j5cA40nNLKjXC5b8ecunp9pY= -----END CERTIFICATE-----Generated at Tue Jun 3 04:53:39 2025 by rpki-client