$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41e427a5-5d44-3dce-8aee-eaf5ad0cd9b8.roa File: 41e427a5-5d44-3dce-8aee-eaf5ad0cd9b8.roa (raw, json) Hash identifier: x+B1desUVdJmOFL7dkFi5KoiaNJtQT4+z/PwpWefC6I= Subject key identifier: 4A:D5:A1:C7:02:9C:3D:7A:C7:58:39:67:9E:6A:05:2C:E2:A6:6A:A4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4321BE862409CFF78F53080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41e427a5-5d44-3dce-8aee-eaf5ad0cd9b8.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 73.191.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:1b:e8:62:40:9c:ff:78:f5:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=fb2b7000-070f-46ac-b8e8-2ce495b81be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4b:9d:f3:59:05:ef:7d:2f:1b:5b:40:66:e3: e5:30:dc:32:bf:dd:62:0b:84:b9:db:c9:c3:64:40: e2:0b:43:fb:42:a3:1f:9b:29:f1:94:49:7c:e1:ac: 48:bd:3f:e4:8b:4f:c3:23:c6:1b:36:f7:3c:56:5e: 5f:90:cd:ee:db:e3:8e:fc:4c:7e:66:3a:55:a3:f9: eb:f3:30:cf:5a:b2:f0:b2:b0:0f:70:cd:10:10:b7: 1c:62:8a:5c:31:a4:45:6a:77:11:3a:24:fb:2c:d5: 16:24:79:23:03:af:1e:c3:8f:a6:fc:fe:b3:12:f7: 48:70:31:7f:5e:68:74:46:5b:fe:5a:15:c3:b6:55: 58:dc:08:2a:3d:08:7c:36:cc:d6:24:01:1b:96:98: bc:f7:5b:85:e8:3e:e7:f7:1d:0d:25:d2:fb:bc:fe: 17:d0:5a:8a:9c:26:45:80:3e:d9:cf:bf:0c:7d:dd: 81:2b:f5:31:f5:d0:5e:5b:2a:ab:f6:1a:e8:a6:6c: 73:20:e1:cd:98:f9:7d:49:74:f8:5f:81:eb:27:24: fa:5d:b3:5c:b5:ef:89:0a:6c:e1:67:c5:03:c2:74: 7c:73:db:29:a9:69:da:8a:df:02:04:a3:d8:e7:ad: dd:07:3f:20:bf:7f:4f:0c:43:a8:2d:8b:58:51:35: ae:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D5:A1:C7:02:9C:3D:7A:C7:58:39:67:9E:6A:05:2C:E2:A6:6A:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41e427a5-5d44-3dce-8aee-eaf5ad0cd9b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.191.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:9d:c5:e5:0e:62:b3:01:08:50:e2:6a:38:eb:91:39:7d:d3: c8:f2:a2:16:a8:c2:e7:92:56:d1:56:b7:e4:c9:4b:34:49:db: 4e:00:bb:9a:eb:76:7e:8b:a9:98:9e:74:d4:35:5d:fe:c9:2c: a2:f4:b9:2f:8c:40:1a:c7:52:fc:3d:24:5c:0c:17:84:c9:fc: f4:b3:f6:e9:ae:55:96:10:2d:37:11:e3:87:83:c6:7f:c2:b4: c5:a8:88:cd:86:e1:aa:10:09:b1:00:26:70:e5:7d:42:a0:6f: 52:64:6c:1b:d5:d1:72:14:39:fa:da:9a:dd:6a:f2:01:7a:27: 18:c1:70:4e:a4:62:36:d2:3f:34:8d:49:f1:cf:c2:4a:7b:9c: 57:0c:50:bb:68:58:76:8f:d6:fa:4d:3a:09:26:12:73:67:d2: 44:a1:6b:8c:7b:b4:07:d8:22:6d:42:1c:23:87:22:1d:16:a8: a3:91:94:e0:2b:19:17:21:24:83:22:4b:43:b9:ec:75:47:a9: 7f:71:94:0a:be:6b:3c:3a:a7:5b:4d:54:ed:f6:ca:63:7e:c5: d3:14:67:8b:dc:c1:7b:ce:0d:66:a1:79:e8:4a:c7:e0:86:64: 98:29:7b:b2:a2:b0:14:55:fe:5a:5e:a7:88:1c:24:5d:e1:81: 92:9f:54:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMhvoYkCc/3j1MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZmIyYjcwMDAtMDcwZi00NmFjLWI4ZTgtMmNlNDk1YjgxYmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkud81kF730vG1tAZuPlMNwyv91iC4S528nD ZEDiC0P7QqMfmynxlEl84axIvT/ki0/DI8YbNvc8Vl5fkM3u2+OO/Ex+ZjpVo/nr 8zDPWrLwsrAPcM0QELccYopcMaRFancROiT7LNUWJHkjA68ew4+m/P6zEvdIcDF/ Xmh0Rlv+WhXDtlVY3AgqPQh8NszWJAEblpi891uF6D7n9x0NJdL7vP4X0FqKnCZF gD7Zz78Mfd2BK/Ux9dBeWyqr9hropmxzIOHNmPl9SXT4X4HrJyT6XbNcte+JCmzh Z8UDwnR8c9spqWnait8CBKPY563dBz8gv39PDEOoLYtYUTWu+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErVoccCnD16x1g5Z55qBSzipmqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDFlNDI3YTUtNWQ0NC0z ZGNlLThhZWUtZWFmNWFkMGNkOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASb/RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIadxeUOYrMBCFDiajjrkTl908jyohaowueSVtFWt+TJSzRJ204Au5rr dn6LqZiedNQ1Xf7JLKL0uS+MQBrHUvw9JFwMF4TJ/PSz9umuVZYQLTcR44eDxn/C tMWoiM2G4aoQCbEAJnDlfUKgb1JkbBvV0XIUOframt1q8gF6JxjBcE6kYjbSPzSN SfHPwkp7nFcMULtoWHaP1vpNOgkmEnNn0kSha4x7tAfYIm1CHCOHIh0WqKORlOAr GRchJIMiS0O57HVHqX9xlAq+azw6p1tNVO32ymN+xdMUZ4vcwXvODWaheehKx+CG ZJgpe7KisBRV/lpep4gcJF3hgZKfVL4= -----END CERTIFICATE-----Generated at Tue Jul 1 02:39:00 2025 by rpki-client