$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/44d9b378-6e98-34ab-8c8c-aa3a0bc86f70.roa File: 44d9b378-6e98-34ab-8c8c-aa3a0bc86f70.roa (raw, json) Hash identifier: BYn4o8i1GEACmKjft8/JUsKgGM6kShUnQSxI8DUKdbs= Subject key identifier: 24:D8:CD:C9:38:C7:07:F5:9F:C2:07:6E:7E:7B:40:5D:EC:1D:EA:80 Certificate issuer: /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Certificate serial: 010D0C9F4328584A29556D8599CB6A5BBB223300 Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/44d9b378-6e98-34ab-8c8c-aa3a0bc86f70.roa Signing time: Thu 12 Jun 2025 01:00:51 +0000 ROA not before: Thu 12 Jun 2025 01:00:51 +0000 ROA not after: Wed 10 Sep 2025 01:00:51 +0000 asID: 1273 IP address blocks: 47.73.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:29:55:6d:85:99:cb:6a:5b:bb:22:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Validity Not Before: Jun 12 01:00:51 2025 GMT Not After : Sep 10 01:00:51 2025 GMT Subject: CN=e3d3ca40-887e-4965-8aca-bd862ea80dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:50:61:9d:cd:e9:c1:df:2a:af:6a:25:ec:b9: ce:67:0a:57:15:d3:87:a1:7a:fb:79:53:97:9b:67: 5e:97:3a:5c:a4:d8:26:6a:01:29:f0:d0:ac:44:5b: 85:c2:8e:4c:89:12:84:7a:09:31:2a:4b:b2:9f:3b: b4:57:4b:31:dc:38:cd:b4:8f:f6:af:46:2a:56:72: dc:0a:5a:8c:1a:45:cc:d4:25:fd:64:8e:1f:39:05: d2:ff:07:2b:26:e8:de:b5:80:2c:f0:f6:43:f0:c1: 37:ed:8a:f9:a4:dd:76:de:5a:76:f3:ff:c5:cd:e1: 77:f3:d7:f7:69:08:68:3e:ef:18:e3:5d:87:df:07: a5:07:2f:ce:fb:e8:52:21:11:77:6d:70:10:42:cc: fa:29:16:cd:1a:51:fd:0a:46:b2:52:fc:2f:5b:d8: 4d:94:7d:f2:ea:b3:56:7c:39:47:60:d9:91:02:d9: 56:19:1d:b0:e2:e4:5d:fd:64:ec:78:82:4b:a8:5f: f2:c2:ad:64:8a:82:6f:ac:c9:d3:f6:a1:80:68:8f: b3:a5:3a:f0:69:61:c4:ea:3b:00:37:45:2d:5f:13: 92:e3:a4:4f:dc:2f:fe:93:97:90:7a:a3:2c:72:ee: 1c:0c:fe:1a:fa:b1:9e:a4:07:db:ab:ff:ed:af:6f: a5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D8:CD:C9:38:C7:07:F5:9F:C2:07:6E:7E:7B:40:5D:EC:1D:EA:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/44d9b378-6e98-34ab-8c8c-aa3a0bc86f70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl X509v3 Authority Key Identifier: keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer sbgp-ipAddrBlock: critical IPv4: 47.73.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:3e:87:ba:2f:c5:24:75:37:78:8f:97:ed:f1:3f:e7:cd:14: 3f:e9:1f:7c:10:11:0a:f2:39:23:58:4e:23:69:97:ca:d6:e8: 79:25:d1:a7:f9:9c:cf:1f:59:d8:46:0d:a5:da:03:36:05:38: 84:14:f9:62:40:24:42:ca:90:e1:a5:97:00:15:b7:48:2c:7c: 0c:38:8c:06:dd:21:04:0b:05:68:83:4d:6d:44:8e:bc:8a:ef: aa:0b:4e:09:2c:c8:47:3d:d0:64:8e:33:fc:9a:02:b6:37:50: 8a:ea:a3:a8:0d:79:00:b1:a9:20:98:bf:0f:59:41:c3:8f:fd: e8:ae:b5:42:85:a6:10:1a:8b:f8:e0:9b:ce:ae:f3:61:bf:20: 96:fa:0e:f8:e4:20:dd:23:a5:75:7a:eb:9a:ce:3f:fb:b1:32: 99:9e:34:63:06:9d:13:6f:0b:d9:84:db:00:fd:33:11:89:8d: 02:e4:44:67:9e:7c:85:42:8f:f0:02:e7:80:30:9a:80:b0:b2: 0c:ee:99:2b:5a:3d:10:61:b0:ff:88:e0:e7:17:02:87:7a:64: ef:33:e3:b4:60:58:ce:4f:4b:fb:c4:44:92:fe:df:36:6c:42: 14:b8:66:5f:4d:22:e0:e7:a1:eb:95:eb:e8:0c:1e:fd:2a:d1: 24:5e:c0:6c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEopVW2FmctqW7siMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWYxNjAtOWNlOC00ODhjLThhZjUtZTI5MmI3YTU0 NWMxMB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk ZTNkM2NhNDAtODg3ZS00OTY1LThhY2EtYmQ4NjJlYTgwZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlBhnc3pwd8qr2ol7LnOZwpXFdOHoXr7eVOX m2delzpcpNgmagEp8NCsRFuFwo5MiRKEegkxKkuynzu0V0sx3DjNtI/2r0YqVnLc ClqMGkXM1CX9ZI4fOQXS/wcrJujetYAs8PZD8ME37Yr5pN123lp28//FzeF389f3 aQhoPu8Y412H3welBy/O++hSIRF3bXAQQsz6KRbNGlH9CkayUvwvW9hNlH3y6rNW fDlHYNmRAtlWGR2w4uRd/WTseIJLqF/ywq1kioJvrMnT9qGAaI+zpTrwaWHE6jsA N0UtXxOS46RP3C/+k5eQeqMscu4cDP4a+rGepAfbq//tr2+lCQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCTYzck4xwf1n8IHbn57QF3sHeqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5 ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdhNTQ1YzEvNDRkOWIzNzgtNmU5OC0z NGFiLThjOGMtYWEzYTBiYzg2ZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEzOWYxNjAtOWNlOC00ODhjLThh ZjUtZTI5MmI3YTU0NWMxLzRhMzlmMTYwLTljZTgtNDg4Yy04YWY1LWUyOTJiN2E1 NDVjMS5jcmwwHwYDVR0jBBgwFoAUCUkyGsdJIn+Nd17cR6ZdzOc0054wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjky YjdhNTQ1YzEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAL0kwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAvj6Hui/FJHU3eI+X7fE/580UP+kffBARCvI5I1hOI2mXytboeSXRp/mc zx9Z2EYNpdoDNgU4hBT5YkAkQsqQ4aWXABW3SCx8DDiMBt0hBAsFaINNbUSOvIrv qgtOCSzIRz3QZI4z/JoCtjdQiuqjqA15ALGpIJi/D1lBw4/96K61QoWmEBqL+OCb zq7zYb8glvoO+OQg3SOldXrrms4/+7EymZ40YwadE28L2YTbAP0zEYmNAuREZ558 hUKP8ALngDCagLCyDO6ZK1o9EGGw/4jg5xcCh3pk7zPjtGBYzk9L+8REkv7fNmxC FLhmX00i4Oeh65Xr6Awe/SrRJF7AbA== -----END CERTIFICATE-----Generated at Sun Jun 29 16:01:41 2025 by rpki-client