$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db403a0a-8503-351f-ae9a-f2224931f792.roa File: db403a0a-8503-351f-ae9a-f2224931f792.roa (raw, json) Hash identifier: C8mXRNxXt5NwCG1VsIwpn/7Tv+J/turBdF6rciKsqkg= Subject key identifier: 00:25:98:D3:E8:85:DF:7C:3A:51:78:B2:D5:E4:92:2E:72:6E:A2:5D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C066CD74B69CFE82B8E7400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db403a0a-8503-351f-ae9a-f2224931f792.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 73.209.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:6c:d7:4b:69:cf:e8:2b:8e:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=7a75df6e-a96b-4938-8a61-7e8de730b6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7c:f8:d7:fb:64:74:c5:00:b8:d5:72:4b:36: b4:2a:97:cc:b2:9a:40:4e:a6:9d:59:a8:05:54:33: 57:ba:42:ba:f7:c4:52:c2:44:4f:5c:73:1b:e5:fb: 26:96:68:db:a7:fc:7f:e7:c7:8c:d4:5f:3a:b5:d7: 1c:74:fd:d8:ee:f2:31:f6:2e:68:e3:2b:92:34:a4: 63:eb:eb:3f:e4:08:8a:eb:ee:c5:ce:8d:87:de:e1: c9:23:ef:d6:fd:84:6d:ad:90:e5:c7:ec:79:c7:38: 15:96:e0:54:55:8e:d8:b4:a6:03:9a:97:9c:d3:6e: 4c:6d:23:4c:7e:8b:91:5d:a0:88:1c:ec:9d:08:b9: 91:78:87:a9:30:b4:ac:2b:67:1e:9c:b4:ba:1e:1d: 1f:88:0a:11:eb:b2:ec:d2:31:08:56:41:f2:d5:f5: b6:10:a5:f7:f8:f7:54:40:06:d9:f0:3f:ac:65:b7: c6:9e:7f:e4:0b:4a:6c:ea:79:18:a8:a5:fd:ed:0e: 1e:92:b9:23:a0:a3:88:2a:84:1b:4e:d0:db:64:1e: a6:bb:d7:84:b7:a6:94:49:ff:4b:06:5e:70:fc:3c: 4c:27:9f:ac:be:78:15:60:7a:0f:02:99:a2:12:9a: 36:3a:8f:37:a2:85:1e:df:c1:ab:91:6f:16:67:b8: da:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:25:98:D3:E8:85:DF:7C:3A:51:78:B2:D5:E4:92:2E:72:6E:A2:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db403a0a-8503-351f-ae9a-f2224931f792.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.209.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5b:8d:66:a3:cc:6d:5b:d1:a9:26:fa:46:44:53:ee:fd:d4: 34:23:8e:47:d6:0b:a9:07:0c:f7:05:64:56:d0:ea:44:0c:5d: 3a:43:4e:ab:c5:2d:fd:27:4b:f0:37:1e:f2:f3:95:e2:98:60: ec:3c:d4:08:04:0f:74:b2:ae:0a:94:82:97:aa:c6:d0:b2:99: 8a:87:39:ed:aa:2a:cf:ce:ed:29:13:c8:6c:f3:31:24:ec:f6: 6f:99:79:a6:bb:3e:47:d4:4e:6d:69:f2:ec:17:96:48:ad:ec: e8:35:85:1b:cb:e1:ec:9a:b3:1c:08:36:bc:63:3d:76:bc:70: 66:43:6a:89:43:45:58:86:43:d6:53:5c:69:74:1f:31:20:95: 67:a0:67:1a:2a:d5:38:fe:5e:c1:9e:4d:dd:bf:e2:af:f8:22: 90:8e:71:97:76:31:ae:a6:b6:a5:b5:0f:68:1e:e1:24:01:6a: 8e:ca:43:91:58:8a:aa:38:c0:37:9d:c0:3f:a3:fe:bf:7a:e8: bd:85:2e:33:87:30:40:44:a4:de:ab:bb:7d:5a:07:55:92:c9: a8:e7:47:53:03:3a:be:df:30:d1:88:60:9d:82:d9:eb:8c:70: 17:5c:75:ae:fd:30:22:30:20:ab:d5:ce:45:05:63:b9:72:33: 7e:34:42:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBmzXS2nP6CuOdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk N2E3NWRmNmUtYTk2Yi00OTM4LThhNjEtN2U4ZGU3MzBiNmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHz41/tkdMUAuNVySza0KpfMsppATqadWagF VDNXukK698RSwkRPXHMb5fsmlmjbp/x/58eM1F86tdccdP3Y7vIx9i5o4yuSNKRj 6+s/5AiK6+7Fzo2H3uHJI+/W/YRtrZDlx+x5xzgVluBUVY7YtKYDmpec025MbSNM fouRXaCIHOydCLmReIepMLSsK2cenLS6Hh0fiAoR67Ls0jEIVkHy1fW2EKX3+PdU QAbZ8D+sZbfGnn/kC0ps6nkYqKX97Q4ekrkjoKOIKoQbTtDbZB6mu9eEt6aUSf9L Bl5w/DxMJ5+svngVYHoPApmiEpo2Oo83ooUe38GrkW8WZ7jajwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAlmNPohd98OlF4stXkki5ybqJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGI0MDNhMGEtODUwMy0z NTFmLWFlOWEtZjIyMjQ5MzFmNzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSdHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpbjWajzG1b0akm+kZEU+791DQjjkfWC6kHDPcFZFbQ6kQMXTpDTqvF Lf0nS/A3HvLzleKYYOw81AgED3SyrgqUgpeqxtCymYqHOe2qKs/O7SkTyGzzMSTs 9m+Zeaa7PkfUTm1p8uwXlkit7Og1hRvL4eyasxwINrxjPXa8cGZDaolDRViGQ9ZT XGl0HzEglWegZxoq1Tj+XsGeTd2/4q/4IpCOcZd2Ma6mtqW1D2ge4SQBao7KQ5FY iqo4wDedwD+j/r966L2FLjOHMEBEpN6ru31aB1WSyajnR1MDOr7fMNGIYJ2C2euM cBdcda79MCIwIKvVzkUFY7lyM340Qi0= -----END CERTIFICATE-----Generated at Tue Jul 1 09:20:52 2025 by rpki-client