$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f89a1f2e-49c3-3399-be0a-5c4834f047bd.roa File: f89a1f2e-49c3-3399-be0a-5c4834f047bd.roa (raw, json) Hash identifier: y2OYmcDC/rgSx183sOV5pusYDqxDLgOj8LDEreJUHNU= Subject key identifier: 7B:2F:88:6D:93:BC:77:13:21:08:E4:79:25:85:E3:7D:F5:3C:0A:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430D0AB512DD2A43D19CE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f89a1f2e-49c3-3399-be0a-5c4834f047bd.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 73.191.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:d0:ab:51:2d:d2:a4:3d:19:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=9ac95111-c349-4e0a-a6ec-94d3f0f5a87a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c6:dc:f1:c9:74:a4:6c:9d:5f:f4:c8:d2:a1: 82:9c:c1:5e:68:b1:5d:bd:63:6c:dc:01:52:9f:eb: 59:52:96:9b:18:26:c6:c0:a5:b8:2b:40:4d:44:1e: f6:d9:01:70:69:a1:96:6f:64:be:d0:0a:41:0a:db: 75:f0:19:86:01:d1:cd:8b:1c:ed:87:3b:93:35:08: f2:8d:97:38:69:aa:dd:71:10:af:57:1d:5b:66:7c: 90:06:51:45:d9:26:9a:39:6e:22:00:d1:84:ad:62: e7:c6:14:e9:11:0e:3b:5a:0a:c6:9b:a0:00:f2:06: 5e:8f:59:a6:d3:6a:0b:61:b0:f2:4e:75:7f:f7:31: 96:e8:ba:28:13:3b:2e:e5:19:4c:1a:50:95:ad:5e: 59:08:09:7d:a6:79:72:a2:24:2e:9d:48:52:ba:63: 2b:4c:ea:8b:11:06:2e:20:3f:6b:42:92:29:fa:04: 4a:0b:f9:dc:38:07:01:77:a4:32:26:48:3a:0d:83: 08:04:9d:ba:4e:d9:cf:3e:30:64:c2:45:b4:af:84: a8:d9:2b:9b:db:80:4d:12:7e:5d:eb:36:f4:0f:70: 46:96:0c:d7:55:8d:5b:a4:47:99:19:7e:11:64:11: 0c:e6:01:19:65:dd:84:d7:ca:3c:88:19:c1:2d:bb: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2F:88:6D:93:BC:77:13:21:08:E4:79:25:85:E3:7D:F5:3C:0A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f89a1f2e-49c3-3399-be0a-5c4834f047bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.191.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a8:b0:3c:c4:85:6e:d7:02:9c:67:b6:7d:4e:33:d6:69:f5: 98:ee:34:71:41:01:0e:ae:8a:94:cb:83:70:f5:8f:10:cc:54: cf:c9:f9:40:1c:ea:ae:42:dd:5e:3f:1e:05:a3:2b:7c:64:29: 7e:e8:17:0c:07:cf:b9:60:64:6f:01:aa:2b:bd:8e:cb:50:3a: 8e:36:5c:c8:6a:f0:46:58:0e:2f:42:85:f9:ae:55:e5:53:6a: 93:f1:d1:ff:ae:40:f8:b9:3e:52:86:d9:64:82:91:ac:65:f4: 1d:6d:92:b7:ea:5f:77:f7:4f:86:96:22:fe:55:96:3c:fa:f6: d2:31:94:cc:8c:b6:11:07:7f:5f:fa:36:13:2e:d9:62:91:bf: e2:ff:6e:fa:0b:2c:87:3e:cd:1b:f6:80:17:8f:ff:94:6e:2e: 61:1c:91:25:16:86:ab:aa:09:88:f5:ed:c4:6f:54:61:3b:4e: 41:15:02:22:33:e3:32:46:3b:b0:cc:b9:a4:7d:ef:2b:68:62: 68:4d:f3:2d:33:24:f7:28:fd:48:10:a0:ac:f4:5b:89:ab:2f: fa:46:8b:56:22:eb:aa:f3:0c:89:7c:3e:71:92:85:65:b8:fa: 18:2c:c6:39:15:46:ac:34:5a:d3:5d:30:cd:22:2d:c4:ca:e1: 82:62:7f:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMNCrUS3SpD0ZzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OWFjOTUxMTEtYzM0OS00ZTBhLWE2ZWMtOTRkM2YwZjVhODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsbc8cl0pGydX/TI0qGCnMFeaLFdvWNs3AFS n+tZUpabGCbGwKW4K0BNRB722QFwaaGWb2S+0ApBCtt18BmGAdHNixzthzuTNQjy jZc4aardcRCvVx1bZnyQBlFF2SaaOW4iANGErWLnxhTpEQ47WgrGm6AA8gZej1mm 02oLYbDyTnV/9zGW6LooEzsu5RlMGlCVrV5ZCAl9pnlyoiQunUhSumMrTOqLEQYu ID9rQpIp+gRKC/ncOAcBd6QyJkg6DYMIBJ26TtnPPjBkwkW0r4So2Sub24BNEn5d 6zb0D3BGlgzXVY1bpEeZGX4RZBEM5gEZZd2E18o8iBnBLbu4nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsviG2TvHcTIQjkeSWF4331PApfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjg5YTFmMmUtNDljMy0z Mzk5LWJlMGEtNWM0ODM0ZjA0N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSb/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOosDzEhW7XApxntn1OM9Zp9ZjuNHFBAQ6uipTLg3D1jxDMVM/J+UAc 6q5C3V4/HgWjK3xkKX7oFwwHz7lgZG8Bqiu9jstQOo42XMhq8EZYDi9ChfmuVeVT apPx0f+uQPi5PlKG2WSCkaxl9B1tkrfqX3f3T4aWIv5Vljz69tIxlMyMthEHf1/6 NhMu2WKRv+L/bvoLLIc+zRv2gBeP/5RuLmEckSUWhquqCYj17cRvVGE7TkEVAiIz 4zJGO7DMuaR97ytoYmhN8y0zJPco/UgQoKz0W4mrL/pGi1Yi66rzDIl8PnGShWW4 +hgsxjkVRqw0WtNdMM0iLcTK4YJifx8= -----END CERTIFICATE-----Generated at Wed Jun 4 23:14:54 2025 by rpki-client