$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20c12c74-8951-3300-b9a2-f49e98b5a2bd.roa File: 20c12c74-8951-3300-b9a2-f49e98b5a2bd.roa (raw, json) Hash identifier: IJrUFWpTfa+mb+gEoceumjqvqbQxsycSOjxc96OqHaA= Subject key identifier: 6A:7F:58:A2:3A:F1:0C:F3:AB:25:7F:A5:D4:43:E7:82:83:C8:34:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C08AE1FA0FA6EFAF8A1E400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20c12c74-8951-3300-b9a2-f49e98b5a2bd.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 73.70.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:ae:1f:a0:fa:6e:fa:f8:a1:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=56007d43-ea26-47bf-89df-a8afe20cf189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:3a:59:10:5b:bf:c8:c0:9e:c2:85:d3:7e: be:55:07:e5:f8:ed:9e:e6:59:a6:f7:13:1b:7d:1b: 0a:b5:08:22:16:5a:95:c5:52:f6:ca:16:52:0e:5f: 3e:53:e3:e3:ed:50:67:4a:12:a5:0f:d9:bb:58:13: c3:85:93:b1:4d:0a:df:ea:70:17:d5:5b:46:45:38: 1c:a7:69:5e:d7:ba:1f:15:40:54:fb:be:e2:c1:17: b4:ac:2f:b6:e7:39:fb:0f:91:62:fb:9c:b2:b4:0f: a3:ff:ca:80:00:dd:38:2a:0c:17:14:d2:e0:ea:ca: e7:53:81:f9:63:4b:da:89:5a:b3:23:d9:eb:ac:2c: 29:49:dd:83:cf:c7:28:d8:83:0e:14:a6:bc:f0:b4: e2:4b:c2:00:27:87:45:20:76:7e:56:1d:9e:55:62: f5:d2:59:3d:42:f9:77:88:b3:4a:19:1f:64:c3:78: 87:45:22:dd:af:85:10:25:9c:65:8d:66:27:44:50: 5f:d1:0a:ef:c8:b0:d6:6d:92:91:43:a5:78:12:f6: 61:a0:a0:64:a3:77:c6:99:9c:3d:b3:8d:1d:77:67: ce:c6:80:49:8e:bc:86:24:5d:55:ee:cf:63:75:03: 11:33:4c:1f:c4:f5:93:82:bc:2f:37:8f:ce:f9:bc: 39:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7F:58:A2:3A:F1:0C:F3:AB:25:7F:A5:D4:43:E7:82:83:C8:34:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20c12c74-8951-3300-b9a2-f49e98b5a2bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.70.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:3d:7f:2a:10:b5:ce:0d:b7:c4:0f:91:40:cf:79:6d:07:88: 25:07:da:6d:c7:62:8b:59:9c:79:a7:d6:4e:88:69:9a:31:34: c9:8c:6f:b1:06:4b:9f:d7:75:eb:35:a5:c8:83:a3:8f:09:f7: 02:90:70:ff:70:d2:dc:11:7c:19:02:97:09:f3:0e:e9:80:30: 65:58:6c:c6:e4:3f:9c:5c:4f:eb:2e:bf:61:54:aa:ea:fd:5d: 8a:e2:cc:21:d3:4b:7c:85:aa:5f:0d:54:ea:61:2c:8a:ab:19: 8f:34:a8:6f:17:76:8c:93:23:2a:6d:b1:d4:81:49:f0:37:28: c7:0b:d6:58:ec:bb:9c:b9:f3:e9:9f:4f:b4:8e:81:96:3b:03: 19:b9:66:56:0f:db:85:ab:6f:42:76:dd:c1:d0:82:5f:98:44: 0c:19:ce:3d:8f:3b:f8:0f:45:65:48:c7:c6:e6:d8:16:50:5f: 6a:14:12:75:12:79:9d:14:b8:57:84:e4:56:4e:69:a8:98:03: 22:09:08:d1:7e:ff:83:96:3f:5e:06:b7:90:2f:ca:28:de:e3: 82:bc:b9:27:88:a8:cf:6c:b0:c0:37:b1:5e:a8:fd:4e:1d:88: 38:cc:0e:5d:0e:0e:38:49:4f:9c:f4:4e:d7:31:8b:cd:1f:70: 3f:66:8f:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCK4foPpu+vih5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NTYwMDdkNDMtZWEyNi00N2JmLTg5ZGYtYThhZmUyMGNmMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznY6WRBbv8jAnsKF036+VQfl+O2e5lmm9xMb fRsKtQgiFlqVxVL2yhZSDl8+U+Pj7VBnShKlD9m7WBPDhZOxTQrf6nAX1VtGRTgc p2le17ofFUBU+77iwRe0rC+25zn7D5Fi+5yytA+j/8qAAN04KgwXFNLg6srnU4H5 Y0vaiVqzI9nrrCwpSd2Dz8co2IMOFKa88LTiS8IAJ4dFIHZ+Vh2eVWL10lk9Qvl3 iLNKGR9kw3iHRSLdr4UQJZxljWYnRFBf0QrvyLDWbZKRQ6V4EvZhoKBko3fGmZw9 s40dd2fOxoBJjryGJF1V7s9jdQMRM0wfxPWTgrwvN4/O+bw5eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGp/WKI68QzzqyV/pdRD54KDyDToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBjMTJjNzQtODk1MS0z MzAwLWI5YTItZjQ5ZTk4YjVhMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSUbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU9fyoQtc4Nt8QPkUDPeW0HiCUH2m3HYotZnHmn1k6IaZoxNMmMb7EG S5/Xdes1pciDo48J9wKQcP9w0twRfBkClwnzDumAMGVYbMbkP5xcT+suv2FUqur9 XYrizCHTS3yFql8NVOphLIqrGY80qG8XdoyTIyptsdSBSfA3KMcL1ljsu5y58+mf T7SOgZY7Axm5ZlYP24Wrb0J23cHQgl+YRAwZzj2PO/gPRWVIx8bm2BZQX2oUEnUS eZ0UuFeE5FZOaaiYAyIJCNF+/4OWP14Gt5Avyije44K8uSeIqM9ssMA3sV6o/U4d iDjMDl0ODjhJT5z0Ttcxi80fcD9mj88= -----END CERTIFICATE-----Generated at Mon Jun 16 23:03:57 2025 by rpki-client