$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5e21453-aca1-3e03-8cda-3daab37f7461.roa File: e5e21453-aca1-3e03-8cda-3daab37f7461.roa (raw, json) Hash identifier: MfXRkf6Fq7r69v6BSSyQTGQx5dzQvBTuOO21tes4owI= Subject key identifier: 25:41:ED:21:8F:8B:E8:B4:17:AB:ED:58:D2:21:B8:CA:99:01:25:27 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06EE81C1D11AA431A22C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5e21453-aca1-3e03-8cda-3daab37f7461.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 73.202.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:ee:81:c1:d1:1a:a4:31:a2:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=37757bc9-52a5-4e91-8b70-7dd2f9a7341b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e1:89:76:77:aa:4a:bb:c5:47:f3:fd:d3:ce: 83:b4:70:e0:69:15:77:27:26:4a:74:a7:61:dc:27: cd:9a:38:28:5e:4d:04:60:0a:08:be:46:88:67:65: 9b:1a:d5:d9:67:92:8a:df:e7:f0:b1:a6:77:6b:9b: b3:b7:4a:bb:e0:ba:fe:09:eb:6e:68:9d:f7:e2:77: 02:0b:c7:9f:c9:40:be:c6:e8:61:11:b6:6f:54:75: 33:8c:ee:27:03:88:a6:be:85:61:02:a9:ca:54:e1: cc:33:eb:a9:c4:34:eb:61:da:0d:e0:ff:76:51:c8: af:10:dc:cf:f2:37:f5:5a:54:94:f3:06:8d:47:ad: 9f:69:ba:3e:af:58:06:07:98:13:db:93:e1:74:b2: 3b:45:c2:97:dc:32:80:1d:54:f5:c5:f9:b9:ee:58: 21:08:ee:a8:bf:e0:24:1c:d4:80:0f:74:dc:e5:9a: 76:a1:ba:2e:91:5a:72:d1:0f:17:1b:9c:63:e2:6f: 23:6a:92:d0:8a:c0:8e:dc:af:8a:01:f2:57:da:e1: 63:f8:be:d0:e7:0c:1e:2a:55:dc:2c:58:97:15:2c: b6:f0:64:f8:06:cc:33:db:7c:21:c1:cf:d2:b7:b9: 44:d1:e0:9a:75:af:49:d8:f9:1b:9d:e9:f3:11:a9: 7b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:41:ED:21:8F:8B:E8:B4:17:AB:ED:58:D2:21:B8:CA:99:01:25:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5e21453-aca1-3e03-8cda-3daab37f7461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.202.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:50:a2:cf:49:d2:6f:c3:47:29:43:57:e3:ec:11:73:c6:6b: f4:ca:46:89:c6:d3:c1:cf:48:b8:d7:9c:4b:92:c4:b3:6d:eb: fc:0c:40:da:5c:b3:47:0f:39:f4:af:d1:4a:70:2f:55:00:ce: 15:76:90:b4:d6:b3:87:f1:ff:00:83:81:f2:e2:58:07:a1:5a: b7:f8:ba:27:9e:ed:a6:79:cc:8a:f4:59:ee:d0:04:99:0f:c8: 91:de:de:7a:30:5d:42:d2:91:b5:46:5e:ff:bc:fd:30:84:73: 93:68:2e:c0:90:4e:c0:84:9e:18:8e:ee:e2:59:a3:ba:e4:0d: d7:c6:26:58:08:84:3f:a5:67:6f:d5:c5:37:2d:19:4c:77:13: 58:d0:fd:c6:4a:cc:34:1f:c2:89:bf:3a:a6:93:4b:62:f0:01: b4:c5:14:04:4d:2d:d2:99:3e:26:24:d8:2b:4b:b7:0a:77:98: d7:9f:3a:2b:df:37:32:fc:2f:13:85:dd:53:99:6c:be:0f:83: 07:15:ac:6f:10:c8:fb:d6:99:13:11:ad:85:37:06:cc:a4:f9: 8b:39:b6:28:d7:b5:63:ad:ab:5a:57:1d:da:4e:db:8b:e0:41: 44:2d:aa:ab:6b:ee:f8:19:d9:59:79:d6:53:cd:2a:2c:8e:10: 77:6f:54:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBu6BwdEapDGiLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk Mzc3NTdiYzktNTJhNS00ZTkxLThiNzAtN2RkMmY5YTczNDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouGJdneqSrvFR/P9086DtHDgaRV3JyZKdKdh 3CfNmjgoXk0EYAoIvkaIZ2WbGtXZZ5KK3+fwsaZ3a5uzt0q74Lr+CetuaJ334ncC C8efyUC+xuhhEbZvVHUzjO4nA4imvoVhAqnKVOHMM+upxDTrYdoN4P92UcivENzP 8jf1WlSU8waNR62fabo+r1gGB5gT25PhdLI7RcKX3DKAHVT1xfm57lghCO6ov+Ak HNSAD3Tc5Zp2oboukVpy0Q8XG5xj4m8japLQisCO3K+KAfJX2uFj+L7Q5wweKlXc LFiXFSy28GT4Bswz23whwc/St7lE0eCada9J2PkbnenzEal7YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVB7SGPi+i0F6vtWNIhuMqZASUnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTVlMjE0NTMtYWNhMS0z ZTAzLThjZGEtM2RhYWIzN2Y3NDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScr+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlQos9J0m/DRylDV+PsEXPGa/TKRonG08HPSLjXnEuSxLNt6/wMQNpc s0cPOfSv0UpwL1UAzhV2kLTWs4fx/wCDgfLiWAehWrf4uiee7aZ5zIr0We7QBJkP yJHe3nowXULSkbVGXv+8/TCEc5NoLsCQTsCEnhiO7uJZo7rkDdfGJlgIhD+lZ2/V xTctGUx3E1jQ/cZKzDQfwom/OqaTS2LwAbTFFARNLdKZPiYk2CtLtwp3mNefOivf NzL8LxOF3VOZbL4PgwcVrG8QyPvWmRMRrYU3Bsyk+Ys5tijXtWOtq1pXHdpO24vg QUQtqqtr7vgZ2Vl51lPNKiyOEHdvVBE= -----END CERTIFICATE-----Generated at Wed Jun 4 22:55:57 2025 by rpki-client