$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecdf59cc-e346-3e8d-a2a7-3cc7a7f23b12.roa File: ecdf59cc-e346-3e8d-a2a7-3cc7a7f23b12.roa (raw, json) Hash identifier: W0c46YZpg/HK9vA2gwqfwbfM+dcgh90ibHS5LJ6cDcg= Subject key identifier: 95:7C:AC:91:19:A2:F1:39:AC:58:D9:7D:AB:D1:46:CA:99:B0:CF:B4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4304F7793AA69D699B3FE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecdf59cc-e346-3e8d-a2a7-3cc7a7f23b12.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 73.238.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:4f:77:93:aa:69:d6:99:b3:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=49fdf8c3-a9a9-485f-9e07-b790dd4e08a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2b:d9:b6:d6:ff:b1:11:04:40:a7:cf:60:7b: 29:b9:df:29:37:05:ca:e2:f8:c3:13:36:1f:5b:f0: c9:fc:18:dc:dc:12:a0:ab:b3:a5:20:53:6f:c5:7d: 82:a6:89:f7:a8:20:6e:1e:95:2a:a2:69:bb:03:83: 4c:a7:4e:8f:ae:e6:3d:83:16:23:42:02:0c:dc:b8: 61:2c:b8:3a:d6:aa:22:ae:64:a0:35:90:bd:e9:4a: 1a:21:75:80:3f:24:77:6d:e2:53:ff:bb:e6:87:47: 62:81:92:9a:3f:81:99:4e:4a:89:56:31:48:2f:9c: 94:58:99:f0:b1:d0:e3:c4:ac:2a:5d:6c:cf:67:d9: b7:22:62:13:ca:aa:47:f8:1c:7c:42:b0:12:68:35: f1:28:9a:49:fd:8b:e7:fc:cc:85:c9:37:fe:0d:71: 93:ac:22:f9:8a:42:10:bf:20:5b:72:db:17:99:41: 13:be:f8:57:c5:58:3c:22:ca:7e:3e:f0:d9:0e:42: 3e:94:e9:1f:a2:b2:90:74:b2:aa:3a:3a:09:33:7c: 64:d9:e1:7f:ab:b1:72:dc:cc:05:36:97:bb:26:9f: 66:2b:69:46:a0:80:c1:97:f7:44:c3:57:76:09:f9: 24:4c:e4:29:c7:e2:cd:5c:c9:ad:51:59:f7:9e:b9: c0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7C:AC:91:19:A2:F1:39:AC:58:D9:7D:AB:D1:46:CA:99:B0:CF:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecdf59cc-e346-3e8d-a2a7-3cc7a7f23b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.238.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f7:43:32:50:87:c4:d5:30:df:51:9b:ad:ba:a7:2a:b7:3c: d8:82:da:63:e8:99:e9:d5:27:6d:14:5b:00:40:7d:3f:1a:ee: ad:55:63:77:2e:6c:16:35:6c:ab:f1:a9:76:7b:e3:ac:a8:1b: d5:00:08:59:a9:fd:70:53:65:ec:ae:7a:83:65:7e:0e:f6:9e: 89:18:ea:d6:35:72:f9:d5:cb:32:f7:3b:44:9c:54:a8:83:f6: 89:7c:63:9c:7f:b0:1e:5b:79:ac:8b:4a:5e:0e:5c:c8:5f:d8: ce:7a:d0:af:fe:99:81:22:54:97:86:dc:0f:cc:c6:88:97:92: 50:17:07:d0:3d:97:0e:a9:a4:db:17:76:1d:1b:05:fc:58:52: 4b:d8:e7:09:5a:30:5b:2d:75:56:0a:24:f0:39:07:5d:77:76: 76:e3:14:b0:76:09:2d:23:85:33:1d:33:3c:f3:4c:ba:7c:03: a0:68:78:b5:ee:9f:1d:08:ad:47:e8:41:d2:81:f8:24:18:82: 87:f9:80:19:55:b3:68:3c:76:16:99:77:ba:3e:49:c7:15:c3: e4:93:90:93:53:bc:c4:94:de:02:70:c2:43:55:cc:cf:32:d6: 56:9f:e5:08:cd:79:e2:99:04:16:d1:52:b1:8a:a5:e8:7a:bd: 0d:1e:8a:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUME93k6pp1pmz/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NDlmZGY4YzMtYTlhOS00ODVmLTllMDctYjc5MGRkNGUwOGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSvZttb/sREEQKfPYHspud8pNwXK4vjDEzYf W/DJ/Bjc3BKgq7OlIFNvxX2Cpon3qCBuHpUqomm7A4NMp06PruY9gxYjQgIM3Lhh LLg61qoirmSgNZC96UoaIXWAPyR3beJT/7vmh0digZKaP4GZTkqJVjFIL5yUWJnw sdDjxKwqXWzPZ9m3ImITyqpH+Bx8QrASaDXxKJpJ/Yvn/MyFyTf+DXGTrCL5ikIQ vyBbctsXmUETvvhXxVg8Isp+PvDZDkI+lOkforKQdLKqOjoJM3xk2eF/q7Fy3MwF Npe7Jp9mK2lGoIDBl/dEw1d2CfkkTOQpx+LNXMmtUVn3nrnAIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV8rJEZovE5rFjZfavRRsqZsM+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWNkZjU5Y2MtZTM0Ni0z ZThkLWEyYTctM2NjN2E3ZjIzYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSe4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf3QzJQh8TVMN9Rm626pyq3PNiC2mPomenVJ20UWwBAfT8a7q1VY3cu bBY1bKvxqXZ746yoG9UACFmp/XBTZeyueoNlfg72nokY6tY1cvnVyzL3O0ScVKiD 9ol8Y5x/sB5beayLSl4OXMhf2M560K/+mYEiVJeG3A/MxoiXklAXB9A9lw6ppNsX dh0bBfxYUkvY5wlaMFstdVYKJPA5B113dnbjFLB2CS0jhTMdMzzzTLp8A6BoeLXu nx0IrUfoQdKB+CQYgof5gBlVs2g8dhaZd7o+SccVw+STkJNTvMSU3gJwwkNVzM8y 1laf5QjNeeKZBBbRUrGKpeh6vQ0eioY= -----END CERTIFICATE-----Generated at Tue Jun 3 04:46:37 2025 by rpki-client