$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e54690d4-f094-3abe-9b07-0b2664744589.roa File: e54690d4-f094-3abe-9b07-0b2664744589.roa (raw, json) Hash identifier: 7pddhQKaBBW2f4gYwFOa/DE+qu2Rrp6Cw2bP4TAsrm4= Subject key identifier: E4:99:3F:E7:90:FB:A0:5C:7A:4B:95:CD:D2:BA:0A:61:36:A8:9B:C3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430FB865CBBBF6808ED5300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e54690d4-f094-3abe-9b07-0b2664744589.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 73.32.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:fb:86:5c:bb:bf:68:08:ed:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=8a776e8e-89c9-4a36-8e9b-22a6ea1a6ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ff:36:8c:33:d4:f9:cd:b5:5c:16:13:13:ad: fc:84:02:d4:b1:54:d4:2b:3b:bd:b1:55:a5:51:c7: 80:25:c2:77:59:a7:15:2e:ab:d9:5b:ea:d0:e3:cf: 0f:e9:ee:e0:f7:3a:bc:24:0d:22:c4:72:9b:f2:60: ad:e0:6e:ae:b5:3a:6f:49:19:86:98:48:ca:15:25: ae:83:07:e0:7b:99:9a:ce:4a:af:85:85:77:86:90: 2c:c5:e5:34:ac:27:5d:39:0c:70:1d:19:27:a5:8b: 56:b0:58:3d:78:6e:bb:35:54:4a:c8:e1:18:df:3e: a2:6e:d5:72:cf:84:ec:48:05:22:bb:4f:a3:b8:d1: d3:cc:f5:0e:f1:41:4a:7c:ef:6f:cf:12:1c:3b:97: 08:b7:18:e6:c7:a5:07:6f:8d:7d:ac:a0:23:d1:af: 3d:cc:92:c4:24:03:14:75:66:5c:18:aa:67:95:a3: 92:00:4b:e5:06:a5:25:22:82:b3:cb:fa:3f:5f:61: 9f:ea:1a:03:5a:d0:29:91:29:5e:fc:5b:23:83:36: f0:a8:0c:10:0c:bd:12:e8:72:d0:4d:03:45:cf:23: cc:a3:6f:7a:39:88:81:6e:af:f4:9d:1b:dc:69:fa: 27:17:ac:f7:3d:97:c3:ed:89:e7:30:ac:b1:c0:88: fd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:99:3F:E7:90:FB:A0:5C:7A:4B:95:CD:D2:BA:0A:61:36:A8:9B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e54690d4-f094-3abe-9b07-0b2664744589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.32.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:54:f7:d6:11:3a:b1:6a:49:13:9a:58:a1:e4:dd:af:9e:0f: fa:60:da:56:16:0f:88:0a:fc:40:45:7b:ce:d3:2b:6d:13:17: f3:75:d7:e0:05:57:d9:e5:cc:57:43:c1:d4:f6:dd:33:7d:14: 44:46:33:ee:52:f4:d6:1c:c9:24:4c:ed:27:4b:f3:21:c3:b6: 01:0c:2f:4b:43:e9:90:2c:de:5b:8b:3d:42:63:e8:67:e9:ff: 70:13:36:f6:b6:c6:5c:d4:53:63:ac:e0:79:91:86:e6:3b:80: da:fe:bb:3c:43:08:c1:f0:b2:ad:05:68:69:b4:fc:47:fe:96: b0:af:5b:16:27:6c:34:af:12:ad:ba:1c:73:44:48:cc:69:30: 69:62:d7:76:e1:28:d0:67:68:2e:a7:01:a1:17:5f:2c:e5:88: 6b:01:cd:30:1e:8c:b3:9c:6c:67:a3:4b:19:be:ed:03:28:2c: 1b:87:a6:60:d6:39:31:44:7f:27:a2:ee:b7:67:07:ab:ee:4f: bd:a8:88:4d:e2:24:15:d9:d4:4d:18:65:b2:e8:5f:c1:f4:35: 19:27:c3:23:9a:8f:b5:93:a5:e5:fb:42:cf:9f:ff:cb:46:ac: 0f:11:fa:25:e9:98:bf:47:d3:b0:d5:90:33:1c:67:f3:29:c2: a4:44:3d:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMPuGXLu/aAjtUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OGE3NzZlOGUtODljOS00YTM2LThlOWItMjJhNmVhMWE2Y2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5P82jDPU+c21XBYTE638hALUsVTUKzu9sVWl UceAJcJ3WacVLqvZW+rQ488P6e7g9zq8JA0ixHKb8mCt4G6utTpvSRmGmEjKFSWu gwfge5mazkqvhYV3hpAsxeU0rCddOQxwHRknpYtWsFg9eG67NVRKyOEY3z6ibtVy z4TsSAUiu0+juNHTzPUO8UFKfO9vzxIcO5cItxjmx6UHb419rKAj0a89zJLEJAMU dWZcGKpnlaOSAEvlBqUlIoKzy/o/X2Gf6hoDWtApkSle/FsjgzbwqAwQDL0S6HLQ TQNFzyPMo296OYiBbq/0nRvcafonF6z3PZfD7YnnMKyxwIj9lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSZP+eQ+6BcekuVzdK6CmE2qJvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTU0NjkwZDQtZjA5NC0z YWJlLTliMDctMGIyNjY0NzQ0NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSSAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpU99YROrFqSROaWKHk3a+eD/pg2lYWD4gK/EBFe87TK20TF/N11+AF V9nlzFdDwdT23TN9FERGM+5S9NYcySRM7SdL8yHDtgEML0tD6ZAs3luLPUJj6Gfp /3ATNva2xlzUU2Os4HmRhuY7gNr+uzxDCMHwsq0FaGm0/Ef+lrCvWxYnbDSvEq26 HHNESMxpMGli13bhKNBnaC6nAaEXXyzliGsBzTAejLOcbGejSxm+7QMoLBuHpmDW OTFEfyei7rdnB6vuT72oiE3iJBXZ1E0YZbLoX8H0NRknwyOaj7WTpeX7Qs+f/8tG rA8R+iXpmL9H07DVkDMcZ/MpwqREPfY= -----END CERTIFICATE-----Generated at Tue Jun 3 06:06:14 2025 by rpki-client