$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0ff047a-dd0a-346a-9bfe-c072dd8cf4ab.roa File: d0ff047a-dd0a-346a-9bfe-c072dd8cf4ab.roa (raw, json) Hash identifier: gUb59IjfM/+bRS/lDSVPX8es1HyopLSjkVfwpCcqxOI= Subject key identifier: 23:C6:F7:70:75:21:F2:83:6C:C2:18:1A:03:C2:C1:41:26:5A:96:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C082AA6B7F02E0D4C456E40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0ff047a-dd0a-346a-9bfe-c072dd8cf4ab.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 73.44.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:2a:a6:b7:f0:2e:0d:4c:45:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=59f08c5a-eebd-40c1-a19e-945aad81147c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:17:4e:df:1c:38:6c:4e:0e:4c:cb:20:c5:3b: 8e:bb:ee:3f:3e:cd:b2:e8:1e:a0:32:7d:b0:b8:14: fd:a1:b7:81:89:8e:5b:7a:06:7a:89:a6:cf:76:84: 13:66:55:d0:f2:17:bc:e2:3b:a5:35:d8:fe:fc:ba: 0d:00:7f:21:e1:fe:52:ed:c7:b3:4a:c5:b3:75:73: 38:f9:75:8f:56:94:10:37:71:6d:1b:29:05:b8:49: 6e:bb:46:81:a4:dc:74:dc:b0:92:c4:3e:b6:73:f3: ef:68:23:11:bd:8e:bc:99:61:ee:d0:f5:61:5f:bf: d3:3f:b7:24:0f:c8:a4:c8:d0:4e:d2:c4:14:0f:10: 2e:27:f3:ec:f8:19:fa:6b:04:96:59:34:c8:76:94: b5:4f:ad:bb:74:6b:d6:48:63:35:ff:b3:ce:71:69: e2:48:9d:02:05:74:15:25:8a:98:71:1e:14:51:71: 41:40:60:11:3c:c3:06:06:02:55:05:43:e9:16:a6: 10:e9:a5:49:24:7d:08:2e:a1:74:75:51:aa:d3:7c: 88:37:0c:9d:c9:c6:05:54:62:c5:b1:e9:d6:5d:13: e6:bd:a1:d3:5b:98:e6:fc:f5:10:e1:b1:4a:38:7c: bf:56:86:e1:08:51:13:ea:3a:50:de:1c:db:5c:d5: ad:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C6:F7:70:75:21:F2:83:6C:C2:18:1A:03:C2:C1:41:26:5A:96:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0ff047a-dd0a-346a-9bfe-c072dd8cf4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.44.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:6b:0f:e6:70:2a:10:1d:57:5c:4e:ad:7a:c5:b4:37:18:e4: 5a:80:e2:7f:be:10:c3:9b:4e:c2:f1:c8:e1:2a:38:c9:06:3b: 26:ce:76:a6:78:dc:cf:1d:55:05:40:98:4e:50:d9:67:52:f6: f8:72:e8:ba:7d:e2:ad:cb:f1:d4:ae:a2:1b:00:3c:87:1f:96: 9b:14:ba:67:b1:a2:3e:a4:b2:bc:03:60:ee:8e:96:1b:30:18: 06:ba:3c:50:da:6d:f5:e5:d6:68:eb:51:0e:d2:c5:79:be:8f: a3:4a:c6:00:20:27:93:7c:25:4b:67:73:2e:2b:de:df:d2:ad: bb:ef:23:28:34:b6:a3:66:53:d8:9c:a5:e2:26:cc:77:e3:3d: 71:b5:17:e8:5f:16:96:8b:26:a4:2b:16:8c:10:6e:80:93:b2: e7:1a:3b:48:7c:aa:24:77:b3:47:62:84:b8:7c:a6:20:ff:cc: 35:a0:72:d4:5e:67:90:0d:bd:cd:1d:78:d6:30:68:bf:da:9f: d1:b7:32:b3:6c:ac:d9:58:55:10:91:bb:4d:70:f8:da:7b:80: de:bb:ce:d1:90:bb:9a:7c:8f:98:63:56:48:12:67:fe:b3:9d: 2d:64:29:3d:10:0a:e2:91:55:85:f9:41:3f:68:33:09:7e:89: 7b:62:98:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCCqmt/AuDUxFbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NTlmMDhjNWEtZWViZC00MGMxLWExOWUtOTQ1YWFkODExNDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRdO3xw4bE4OTMsgxTuOu+4/Ps2y6B6gMn2w uBT9obeBiY5begZ6iabPdoQTZlXQ8he84julNdj+/LoNAH8h4f5S7cezSsWzdXM4 +XWPVpQQN3FtGykFuEluu0aBpNx03LCSxD62c/PvaCMRvY68mWHu0PVhX7/TP7ck D8ikyNBO0sQUDxAuJ/Ps+Bn6awSWWTTIdpS1T627dGvWSGM1/7POcWniSJ0CBXQV JYqYcR4UUXFBQGARPMMGBgJVBUPpFqYQ6aVJJH0ILqF0dVGq03yINwydycYFVGLF senWXRPmvaHTW5jm/PUQ4bFKOHy/VobhCFET6jpQ3hzbXNWtHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPG93B1IfKDbMIYGgPCwUEmWpa4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDBmZjA0N2EtZGQwYS0z NDZhLTliZmUtYzA3MmRkOGNmNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSxMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRrD+ZwKhAdV1xOrXrFtDcY5FqA4n++EMObTsLxyOEqOMkGOybOdqZ4 3M8dVQVAmE5Q2WdS9vhy6Lp94q3L8dSuohsAPIcflpsUumexoj6ksrwDYO6Olhsw GAa6PFDabfXl1mjrUQ7SxXm+j6NKxgAgJ5N8JUtncy4r3t/SrbvvIyg0tqNmU9ic peImzHfjPXG1F+hfFpaLJqQrFowQboCTsucaO0h8qiR3s0dihLh8piD/zDWgctRe Z5ANvc0deNYwaL/an9G3MrNsrNlYVRCRu01w+Np7gN67ztGQu5p8j5hjVkgSZ/6z nS1kKT0QCuKRVYX5QT9oMwl+iXtimP8= -----END CERTIFICATE-----Generated at Tue Jun 3 04:50:52 2025 by rpki-client