$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3af5a49-2b7e-3b69-9176-ec1d250ecdc5.roa File: a3af5a49-2b7e-3b69-9176-ec1d250ecdc5.roa (raw, json) Hash identifier: X4v2jkKUGeytiUwJg79rBSv077qIi5pyKOlMSF5QOOI= Subject key identifier: A3:F1:22:D9:43:34:49:DC:93:DA:48:53:27:45:5E:DA:81:2D:6C:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C07A1AABCAC5372F3E55AF0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3af5a49-2b7e-3b69-9176-ec1d250ecdc5.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33287 IP address blocks: 73.188.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:a1:aa:bc:ac:53:72:f3:e5:5a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=742ac5fa-d8fe-4c16-97f5-6a608366e0df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:db:e6:4b:aa:9f:14:59:3e:90:7e:0f:65: 3b:4c:a1:31:19:c8:87:a3:dd:13:57:65:50:ad:4b: 8b:1d:df:4a:82:c4:3a:5d:fc:77:8a:d7:01:78:92: 9d:cc:e8:fa:29:50:0b:04:0f:1d:2f:2b:d4:a3:3a: 24:41:be:01:a5:fa:ef:ef:57:95:6e:bd:aa:ed:90: 23:31:86:4e:7e:c6:38:45:a3:af:71:44:d5:17:d2: 5b:92:3c:ae:37:b3:9f:13:6c:e8:e3:a2:19:1e:dc: ed:45:09:13:02:fe:d9:bb:10:12:1a:42:f5:92:26: 89:39:94:7c:2a:86:49:4b:78:b8:cf:d2:44:85:59: f0:61:29:34:6f:42:36:f4:6a:34:7d:60:16:60:76: ea:6c:a3:bc:b2:1f:a9:51:b9:2b:7c:34:c5:b9:b7: 87:df:0e:90:81:0a:80:0d:2e:74:9c:12:d1:d7:fe: 9e:15:e6:ef:e9:85:e7:78:59:c1:ad:d3:88:64:7d: 44:52:83:5f:b3:aa:fd:1d:a8:61:41:27:47:63:d6: 39:62:d4:99:83:4d:80:24:1c:d4:25:ca:92:be:d3: b5:16:79:9f:7f:2e:32:dc:ad:01:e1:58:61:b1:81: c7:e6:f6:82:b5:d2:19:49:81:c2:04:56:0c:c3:64: b5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F1:22:D9:43:34:49:DC:93:DA:48:53:27:45:5E:DA:81:2D:6C:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3af5a49-2b7e-3b69-9176-ec1d250ecdc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.188.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:a0:d3:18:e8:af:1a:1d:b2:a8:07:48:55:3a:b0:db:e4:95: 5e:a7:a8:44:5f:c8:f9:34:74:64:f2:b8:1a:67:79:a2:b1:09: a8:9e:52:27:8c:d9:f6:55:a5:d5:71:26:c8:3a:8c:4a:05:af: 78:36:67:d7:44:c8:cf:28:6d:f7:be:ec:9a:f1:eb:38:6f:14: 62:c2:c7:1c:5c:10:08:60:2e:07:70:71:97:24:40:eb:c8:aa: 26:07:9c:fc:0b:e7:32:5c:02:bb:c7:68:b8:ed:58:5c:0c:07: 1f:a4:3d:d7:f2:97:b6:3e:dd:94:d3:35:34:1d:ee:f0:81:0e: 6d:61:17:d3:d4:0e:c9:c1:a3:42:6a:9c:15:50:0c:35:57:c8: e3:2d:95:b0:ab:46:c4:cf:ae:7e:42:5f:d7:d0:8b:d9:d3:6f: 29:06:b2:a8:90:c7:9b:59:26:4f:43:dc:23:ed:96:0b:06:56: 58:d1:4c:bc:d7:1e:d5:3d:f1:2c:b0:94:12:27:ea:7f:9f:bb: 39:cf:b3:5e:a3:1b:70:f9:d0:9f:e7:d4:7b:ab:3b:a2:d1:0a: db:5a:74:3c:eb:dc:bc:7e:37:c8:d0:f1:42:b2:38:98:4e:f2: d4:32:9a:03:fd:07:79:0b:d5:6f:92:33:1a:07:7a:e5:5b:3f: f8:f3:66:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB6GqvKxTcvPlWvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NzQyYWM1ZmEtZDhmZS00YzE2LTk3ZjUtNmE2MDgzNjZlMGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKzb5kuqnxRZPpB+D2U7TKExGciHo90TV2VQ rUuLHd9KgsQ6Xfx3itcBeJKdzOj6KVALBA8dLyvUozokQb4Bpfrv71eVbr2q7ZAj MYZOfsY4RaOvcUTVF9JbkjyuN7OfE2zo46IZHtztRQkTAv7ZuxASGkL1kiaJOZR8 KoZJS3i4z9JEhVnwYSk0b0I29Go0fWAWYHbqbKO8sh+pUbkrfDTFubeH3w6QgQqA DS50nBLR1/6eFebv6YXneFnBrdOIZH1EUoNfs6r9HahhQSdHY9Y5YtSZg02AJBzU JcqSvtO1Fnmffy4y3K0B4VhhsYHH5vaCtdIZSYHCBFYMw2S1gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPxItlDNEnck9pIUydFXtqBLWxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTNhZjVhNDktMmI3ZS0z YjY5LTkxNzYtZWMxZDI1MGVjZGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSbyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyg0xjorxodsqgHSFU6sNvklV6nqERfyPk0dGTyuBpneaKxCaieUieM 2fZVpdVxJsg6jEoFr3g2Z9dEyM8obfe+7Jrx6zhvFGLCxxxcEAhgLgdwcZckQOvI qiYHnPwL5zJcArvHaLjtWFwMBx+kPdfyl7Y+3ZTTNTQd7vCBDm1hF9PUDsnBo0Jq nBVQDDVXyOMtlbCrRsTPrn5CX9fQi9nTbykGsqiQx5tZJk9D3CPtlgsGVljRTLzX HtU98SywlBIn6n+fuznPs16jG3D50J/n1HurO6LRCttadDzr3Lx+N8jQ8UKyOJhO 8tQymgP9B3kL1W+SMxoHeuVbP/jzZlw= -----END CERTIFICATE-----Generated at Mon Jun 30 08:59:41 2025 by rpki-client