$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6be40e1-7768-37b8-a517-66d03f40b198.roa File: a6be40e1-7768-37b8-a517-66d03f40b198.roa (raw, json) Hash identifier: INMppSrpvtCj898JVBxVM3H1c2QWqKqv2g2EMxmjVXE= Subject key identifier: 73:0B:C9:E2:C4:F8:4A:06:5C:07:62:08:D0:82:1E:69:CF:DC:34:1C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCB76874367F2C8C953480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6be40e1-7768-37b8-a517-66d03f40b198.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 73.88.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:b7:68:74:36:7f:2c:8c:95:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=00d56f66-4f39-4863-9836-25e965777afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:c3:25:24:bf:73:40:10:a5:ad:2c:c1:c8: e8:5f:b7:21:46:13:3d:1a:00:c3:c6:1d:4a:fa:6e: 92:76:88:e1:2f:70:99:d6:41:bc:84:cb:70:2b:0f: df:60:9d:5c:0e:cf:84:1f:90:70:25:e9:a3:72:26: d8:96:99:06:9a:a9:0e:7e:3a:d4:d1:7e:33:08:11: 8f:4e:06:91:cf:2d:18:78:f9:70:16:8e:5e:e1:d3: ef:77:bd:c0:bd:06:ca:7e:d0:94:59:da:a7:b2:00: 46:6c:44:cb:8e:b4:58:43:b7:59:07:7d:a2:87:d4: 63:de:41:0e:7e:28:9e:ac:bb:7f:c8:a2:20:93:ad: 81:e9:9a:81:e5:9e:d0:1d:2d:c9:d5:73:0d:9a:dc: 29:de:78:89:78:8b:d9:00:56:f6:0c:6c:19:8a:0a: 3e:48:45:d8:d1:6d:fc:48:84:46:3e:ca:c9:ba:2d: df:93:1e:eb:84:81:45:f6:65:c9:4d:6c:eb:36:e5: 20:79:b7:02:bc:e6:2a:7c:cd:13:91:dd:82:c6:2a: a1:c2:52:e2:fa:c3:20:a2:01:76:5c:f9:c9:e0:d1: 6a:d5:fd:98:a6:69:a0:95:d4:2b:ae:f7:e3:d2:92: f0:60:66:72:12:ef:40:2e:da:ed:01:7b:ec:75:a9: 4a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0B:C9:E2:C4:F8:4A:06:5C:07:62:08:D0:82:1E:69:CF:DC:34:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6be40e1-7768-37b8-a517-66d03f40b198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.88.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6c:8c:8f:ae:da:e2:63:7b:a7:e7:bf:02:29:98:7f:67:fe: ef:f4:8f:8f:bb:d5:e7:c1:8c:9a:d2:aa:2b:8e:af:21:e1:10: 5d:02:1c:c4:9a:ee:fd:c7:55:a8:a0:e0:26:84:da:90:bf:a0: 65:f0:6f:67:db:77:40:3b:82:d5:8d:b9:00:e5:4e:c7:0e:d4: 11:fd:9a:45:60:19:c3:66:dc:73:20:68:35:63:59:f2:81:8c: 66:77:e9:a4:75:cb:a3:06:34:9a:4a:6b:4b:1f:d8:89:d6:7a: d5:b7:8b:b5:8d:dd:16:3d:88:0a:22:b2:d3:34:0c:77:71:b5: af:92:55:df:e4:70:37:ee:8b:29:18:8f:6b:26:8e:54:10:09: 6d:a8:5a:92:f6:b0:8b:f5:b8:92:cc:69:46:75:5e:3b:87:5c: 8f:e8:9f:6f:2b:38:ce:2c:01:cd:cb:c3:99:a7:d5:6b:25:a1: e4:36:27:28:00:b7:6c:10:f3:43:8d:44:55:4a:a9:c6:0b:bc: 4d:2b:1a:e3:10:d3:c9:e8:a6:c5:79:5b:d0:1a:66:98:e2:d6: d0:3e:e4:6e:9b:35:50:14:9b:0a:47:e3:26:86:a3:da:aa:a7: 5f:7a:6e:f3:ba:a0:2f:83:cf:56:78:45:8e:53:36:35:52:12: a2:c7:f6:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/LdodDZ/LIyVNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MDBkNTZmNjYtNGYzOS00ODYzLTk4MzYtMjVlOTY1Nzc3YWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV7DJSS/c0AQpa0swcjoX7chRhM9GgDDxh1K +m6SdojhL3CZ1kG8hMtwKw/fYJ1cDs+EH5BwJemjcibYlpkGmqkOfjrU0X4zCBGP TgaRzy0YePlwFo5e4dPvd73AvQbKftCUWdqnsgBGbETLjrRYQ7dZB32ih9Rj3kEO fiierLt/yKIgk62B6ZqB5Z7QHS3J1XMNmtwp3niJeIvZAFb2DGwZigo+SEXY0W38 SIRGPsrJui3fkx7rhIFF9mXJTWzrNuUgebcCvOYqfM0Tkd2CxiqhwlLi+sMgogF2 XPnJ4NFq1f2YpmmgldQrrvfj0pLwYGZyEu9ALtrtAXvsdalKzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMLyeLE+EoGXAdiCNCCHmnP3DQcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTZiZTQwZTEtNzc2OC0z N2I4LWE1MTctNjZkMDNmNDBiMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSVisMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhsjI+u2uJje6fnvwIpmH9n/u/0j4+71efBjJrSqiuOryHhEF0CHMSa 7v3HVaig4CaE2pC/oGXwb2fbd0A7gtWNuQDlTscO1BH9mkVgGcNm3HMgaDVjWfKB jGZ36aR1y6MGNJpKa0sf2InWetW3i7WN3RY9iAoistM0DHdxta+SVd/kcDfuiykY j2smjlQQCW2oWpL2sIv1uJLMaUZ1XjuHXI/on28rOM4sAc3Lw5mn1WsloeQ2JygA t2wQ80ONRFVKqcYLvE0rGuMQ08nopsV5W9AaZpji1tA+5G6bNVAUmwpH4yaGo9qq p196bvO6oC+Dz1Z4RY5TNjVSEqLH9rE= -----END CERTIFICATE-----Generated at Mon Jun 30 17:36:10 2025 by rpki-client