$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bad45c34-1d8f-3103-9ced-cd1aa90d36de.roa File: bad45c34-1d8f-3103-9ced-cd1aa90d36de.roa (raw, json) Hash identifier: 9EKKepQH35+/CnLP0J9cAOqnNXWnbLhesifF2fnZ9gE= Subject key identifier: 32:5D:9E:9B:E6:11:83:2B:0D:A7:05:F6:F6:AD:23:56:88:BE:FF:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430CB99009D8D7656816D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bad45c34-1d8f-3103-9ced-cd1aa90d36de.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 73.161.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:cb:99:00:9d:8d:76:56:81:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=4423f920-67bd-402b-a007-1fd06f4eb7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:aa:5e:22:89:4d:6c:39:52:9a:7a:ec:eb:87: 4e:13:53:9e:49:54:0b:09:f0:09:73:cd:2e:41:f9: 83:6b:0f:92:10:ca:26:e8:15:33:90:ad:15:e3:dc: ef:9b:47:e1:83:a3:d2:7b:b2:ba:3e:12:ee:b4:7a: 0e:e2:f6:92:25:b4:62:8f:44:d2:26:31:39:be:19: a2:4c:e0:ff:b8:33:17:b2:b3:53:51:ad:0e:24:7f: 4c:7b:62:91:1d:dd:c7:2f:b0:dc:a0:80:56:c7:0f: 68:45:40:4f:a9:9e:95:1f:e4:10:1b:fb:2d:99:06: bc:63:be:fa:0e:57:20:34:0a:22:1e:09:72:a8:73: 8e:a2:45:84:76:6a:f9:ad:92:4c:60:01:d4:7b:5f: c5:ab:1f:78:2f:ef:10:c5:80:1d:24:36:6c:76:a1: 64:49:33:de:c3:08:ec:f5:33:5c:83:79:d5:e0:6c: 14:11:14:cf:87:2f:3f:7a:9e:a7:51:0c:76:0d:28: 90:e6:3d:6e:eb:0b:83:3b:f8:12:f1:ba:d8:fd:3e: bd:14:9a:49:a2:3d:e9:04:78:87:a7:91:f1:79:fc: ee:43:34:28:e7:51:46:94:1f:4d:3d:37:f6:7a:f7: 3a:da:d1:13:74:9a:11:1c:8b:ec:b7:de:94:58:c8: 8d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5D:9E:9B:E6:11:83:2B:0D:A7:05:F6:F6:AD:23:56:88:BE:FF:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bad45c34-1d8f-3103-9ced-cd1aa90d36de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.161.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:17:d1:06:ba:1f:26:38:d3:0f:a4:da:f3:c5:d3:40:99:12: 66:87:33:9d:e6:8e:1d:57:5f:7b:23:9d:8f:54:57:0c:18:0f: a8:a6:c6:52:92:8e:df:71:15:d9:d0:80:e6:15:3e:f2:48:54: b0:d4:52:2c:42:b2:1e:44:98:32:a7:7c:22:a9:90:bc:14:e1: 97:e9:f8:61:a9:a7:2b:c2:8a:aa:15:95:e7:f6:a9:e4:f3:11: 2b:47:07:53:39:10:0f:5e:7d:58:2b:04:6c:5e:80:2e:96:3f: 4a:f7:87:8c:95:7a:b1:58:3b:91:b2:1b:c8:51:6b:52:ef:09: 5e:37:7e:3e:f2:40:97:85:8d:f1:ce:c8:3a:c7:44:5b:62:0f: 92:f8:55:df:0c:d8:06:a0:aa:d3:06:6b:f5:55:b0:9c:72:54: 2f:c4:9f:1d:df:af:db:ee:b7:37:57:a2:ba:0c:45:11:63:3d: 3c:09:0d:94:aa:35:86:70:b7:b6:a1:83:16:05:c6:3a:71:58: 1a:65:f2:41:7f:79:ff:ac:d8:c0:12:f5:85:72:f1:1e:7c:9f: 74:64:24:29:4c:59:33:79:a8:59:4c:6e:50:6d:f9:49:1c:05: 5a:f0:85:88:b9:c5:1c:5f:79:3b:d2:38:0c:27:c9:37:f8:67: 83:37:98:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMMuZAJ2NdlaBbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NDQyM2Y5MjAtNjdiZC00MDJiLWEwMDctMWZkMDZmNGViN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhapeIolNbDlSmnrs64dOE1OeSVQLCfAJc80u QfmDaw+SEMom6BUzkK0V49zvm0fhg6PSe7K6PhLutHoO4vaSJbRij0TSJjE5vhmi TOD/uDMXsrNTUa0OJH9Me2KRHd3HL7DcoIBWxw9oRUBPqZ6VH+QQG/stmQa8Y776 DlcgNAoiHglyqHOOokWEdmr5rZJMYAHUe1/Fqx94L+8QxYAdJDZsdqFkSTPewwjs 9TNcg3nV4GwUERTPhy8/ep6nUQx2DSiQ5j1u6wuDO/gS8brY/T69FJpJoj3pBHiH p5HxefzuQzQo51FGlB9NPTf2evc62tETdJoRHIvst96UWMiNQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJdnpvmEYMrDacF9vatI1aIvv+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFkNDVjMzQtMWQ4Zi0z MTAzLTljZWQtY2QxYWE5MGQzNmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSaEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAX0Qa6HyY40w+k2vPF00CZEmaHM53mjh1XX3sjnY9UVwwYD6imxlKS jt9xFdnQgOYVPvJIVLDUUixCsh5EmDKnfCKpkLwU4Zfp+GGppyvCiqoVlef2qeTz EStHB1M5EA9efVgrBGxegC6WP0r3h4yVerFYO5GyG8hRa1LvCV43fj7yQJeFjfHO yDrHRFtiD5L4Vd8M2AagqtMGa/VVsJxyVC/Enx3fr9vutzdXoroMRRFjPTwJDZSq NYZwt7ahgxYFxjpxWBpl8kF/ef+s2MAS9YVy8R58n3RkJClMWTN5qFlMblBt+Ukc BVrwhYi5xRxfeTvSOAwnyTf4Z4M3mFI= -----END CERTIFICATE-----Generated at Wed Jun 4 23:52:44 2025 by rpki-client