$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d857ef15-20b4-3077-8402-a4e4e7cf51f5.roa File: d857ef15-20b4-3077-8402-a4e4e7cf51f5.roa (raw, json) Hash identifier: s6St+9cUc+rWTbM5X9HB2jifZ/UDtcxOMX5b3qdponI= Subject key identifier: E8:73:3B:F3:5F:25:A3:45:D4:8B:F9:1C:88:71:5A:1E:D6:16:9A:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06F1A49D68A6B9EA589380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d857ef15-20b4-3077-8402-a4e4e7cf51f5.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 73.222.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:f1:a4:9d:68:a6:b9:ea:58:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=f3cb6d10-0df9-4ca0-a90f-6f67f8672378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1b:1d:f1:e1:91:b0:a2:52:82:1b:6a:f3:2d: 7c:d6:e3:4d:eb:14:94:4a:9d:66:5b:f6:26:6a:27: f7:99:20:38:ac:b3:92:c2:a1:97:4f:9c:f3:42:c0: ec:d5:66:f2:2c:d5:f7:96:cd:73:3f:b8:e6:9d:13: e5:0e:54:0e:51:d5:7a:f8:f5:0f:37:5f:e3:d7:88: f5:08:59:6b:2f:b6:19:ad:00:71:23:1e:e1:d7:8e: 47:84:77:ad:ee:19:77:0f:9f:e8:7a:40:ab:ee:33: ac:fe:3b:24:08:10:cd:61:ad:e7:2d:55:1f:bc:03: 76:a8:1e:a4:80:5a:94:c2:d2:ff:2d:98:e3:26:46: ef:85:2a:ea:b3:ae:39:7f:f6:72:e6:db:9c:69:56: f5:81:e2:da:65:31:5e:65:d6:2f:65:5c:d8:a7:2c: 7d:83:80:1a:26:2d:80:06:5b:ef:5e:3e:5a:27:24: f7:31:04:da:a1:8a:78:5a:30:10:50:6a:e6:02:76: be:41:48:34:ce:05:ef:89:d4:f7:55:20:e9:73:dd: 85:cf:c5:60:13:78:3b:da:9f:07:a4:5c:44:18:f9: 11:34:86:c0:c6:47:02:c9:b2:ef:cd:67:75:d3:ae: dd:ce:94:3e:b8:f3:6a:f4:53:13:8f:97:e8:50:a9: d3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:73:3B:F3:5F:25:A3:45:D4:8B:F9:1C:88:71:5A:1E:D6:16:9A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d857ef15-20b4-3077-8402-a4e4e7cf51f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.222.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f3:19:c7:b9:7a:5b:fd:22:f4:8d:6a:60:0b:fe:47:46:f6: 24:bf:3d:8c:72:61:38:d4:ea:c5:f9:d2:94:97:aa:72:07:e9: 0a:36:40:88:41:af:3d:b6:af:78:2c:f0:fe:be:78:6f:b3:6d: 9d:2a:9f:da:e1:41:f7:23:c9:1d:e2:bd:d7:24:a9:1d:98:bc: 7e:ee:30:bc:e7:c5:da:a4:20:dd:ff:a3:71:b9:ce:09:f0:8b: 00:a6:54:ad:70:73:61:b2:f4:09:82:e4:01:34:7d:71:fa:11: ee:7a:a6:41:29:05:3c:09:da:8a:33:6a:dd:d9:23:3a:43:7f: 00:5a:39:d5:b3:7e:21:25:28:d5:da:d7:ac:85:4c:ae:f3:ef: 40:db:ac:c2:a3:67:30:1b:fe:bf:b4:78:97:bd:a5:ef:91:e2: 70:87:ee:02:3f:8e:ca:2b:88:0f:7d:af:c6:e1:3d:47:12:40: d5:a5:ba:9e:f8:c6:46:ad:67:b6:fa:a5:95:77:21:0f:d7:ed: 88:c7:c6:53:e0:4c:0e:de:fc:04:05:ce:a9:79:b2:3b:02:77: a1:6c:e0:a3:80:a2:6d:1e:a1:18:d5:85:3e:57:c1:c5:20:b0: d0:14:d2:02:2d:e7:42:4a:9e:39:12:4e:ef:45:dc:67:c9:ee: 18:32:09:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBvGknWimuepYk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZjNjYjZkMTAtMGRmOS00Y2EwLWE5MGYtNmY2N2Y4NjcyMzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhsd8eGRsKJSghtq8y181uNN6xSUSp1mW/Ym aif3mSA4rLOSwqGXT5zzQsDs1WbyLNX3ls1zP7jmnRPlDlQOUdV6+PUPN1/j14j1 CFlrL7YZrQBxIx7h145HhHet7hl3D5/oekCr7jOs/jskCBDNYa3nLVUfvAN2qB6k gFqUwtL/LZjjJkbvhSrqs645f/Zy5tucaVb1geLaZTFeZdYvZVzYpyx9g4AaJi2A BlvvXj5aJyT3MQTaoYp4WjAQUGrmAna+QUg0zgXvidT3VSDpc92Fz8VgE3g72p8H pFxEGPkRNIbAxkcCybLvzWd1067dzpQ+uPNq9FMTj5foUKnTQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhzO/NfJaNF1Iv5HIhxWh7WFprAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDg1N2VmMTUtMjBiNC0z MDc3LTg0MDItYTRlNGU3Y2Y1MWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASd77MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnzGce5elv9IvSNamAL/kdG9iS/PYxyYTjU6sX50pSXqnIH6Qo2QIhB rz22r3gs8P6+eG+zbZ0qn9rhQfcjyR3ivdckqR2YvH7uMLznxdqkIN3/o3G5zgnw iwCmVK1wc2Gy9AmC5AE0fXH6Ee56pkEpBTwJ2oozat3ZIzpDfwBaOdWzfiElKNXa 16yFTK7z70DbrMKjZzAb/r+0eJe9pe+R4nCH7gI/jsoriA99r8bhPUcSQNWlup74 xkatZ7b6pZV3IQ/X7YjHxlPgTA7e/AQFzql5sjsCd6Fs4KOAom0eoRjVhT5XwcUg sNAU0gIt50JKnjkSTu9F3GfJ7hgyCeA= -----END CERTIFICATE-----Generated at Tue Jun 3 06:10:38 2025 by rpki-client