$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22d2d89b-fb9a-30f4-b1c3-3851308331a3.roa File: 22d2d89b-fb9a-30f4-b1c3-3851308331a3.roa (raw, json) Hash identifier: DaM8pumD45+edZrbZWohE5rXWE8lIwqd+pURQceNDes= Subject key identifier: 03:28:0D:C6:2C:F0:68:F7:EF:10:0C:0A:D8:B9:F2:4B:79:A7:86:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C08A7680E45A99AFCB0EE48 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22d2d89b-fb9a-30f4-b1c3-3851308331a3.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 73.231.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:a7:68:0e:45:a9:9a:fc:b0:ee:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=5588e2f8-d6d6-4144-b599-33af64542fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dd:98:a2:6d:05:13:ff:74:00:af:d1:6e:00: 6b:4e:b5:9a:f0:d3:55:e8:bf:3c:d2:78:66:ea:ba: 23:6c:c5:7e:05:cf:0f:c7:c4:f4:fa:9f:59:9e:cc: d7:f3:43:71:1a:e3:6e:38:4f:ec:53:80:89:2b:90: a0:ef:31:4e:7e:3e:a2:3a:41:32:4c:a7:6c:2d:a8: 69:d7:76:d8:91:37:ae:21:b2:26:12:2a:b4:ad:3c: cc:6d:ae:f8:30:e8:9c:0a:42:6c:e4:e1:10:97:fd: 6d:d4:e7:d1:0f:be:15:51:e6:73:0d:e2:e4:36:3d: 88:48:1f:c7:ff:96:cd:5e:fc:82:98:f4:c9:bc:95: 18:d3:99:05:30:43:f3:04:1b:19:cf:6f:a5:47:5a: 07:a1:1b:2d:e5:73:16:b0:ea:c5:2c:ba:29:0f:c8: 7a:21:aa:05:ad:19:09:c1:c2:bd:f2:ab:e4:5a:f0: b8:f3:d1:83:22:d1:69:49:77:27:b4:53:64:b5:bb: 3c:61:fc:af:cc:d1:f1:93:a3:90:8b:a2:cf:20:98: ac:a0:c4:14:e5:5f:b7:17:f2:90:f1:47:09:01:a5: 6c:cc:51:d2:b6:3a:b3:f5:71:41:3d:75:66:56:ed: d2:cf:20:bc:e1:fa:fe:35:0f:7f:b6:8f:6e:81:00: 3b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:28:0D:C6:2C:F0:68:F7:EF:10:0C:0A:D8:B9:F2:4B:79:A7:86:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22d2d89b-fb9a-30f4-b1c3-3851308331a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.231.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8e:a0:95:74:a6:0d:58:61:2b:88:e6:46:c1:d0:c8:3b:94: f7:e0:03:f4:66:93:22:f7:da:3f:7c:b4:fe:21:ca:2e:dc:23: 11:0e:fa:ef:37:da:51:8d:3b:81:74:e9:73:a1:a1:fd:84:cf: 9d:86:39:12:0d:81:e4:c4:bc:3b:b5:4f:cd:80:61:b6:6f:79: ef:71:6b:df:05:83:e8:93:af:e4:cf:01:88:78:96:bc:63:ed: d7:4f:43:99:e1:16:48:fe:59:0b:cd:cc:51:7a:49:f7:da:6b: 8b:66:73:7f:69:0a:60:a5:1e:2a:9d:70:4d:1b:63:4c:7a:0c: de:ca:9f:ce:59:6d:65:15:61:80:68:be:16:3e:ad:6d:71:a0: 83:f2:30:77:d2:b1:90:b6:0a:81:63:06:7f:03:2a:d2:8d:6d: e0:80:a6:24:2c:6e:7d:a5:de:b9:94:e2:2b:22:46:44:f8:a6: eb:38:1d:a1:60:d6:5f:41:54:a6:dd:03:f6:ce:5c:ba:5c:3e: e6:44:1e:da:3b:4f:f1:37:82:85:27:65:5b:c6:3d:16:fc:ba: f8:75:69:46:7b:cc:81:b3:25:74:74:fd:a1:cd:b9:53:0c:f3: e1:89:4e:80:fc:12:af:20:d4:fb:7b:44:bc:e9:ff:22:2d:90: fb:52:67:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCKdoDkWpmvyw7kgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NTU4OGUyZjgtZDZkNi00MTQ0LWI1OTktMzNhZjY0NTQyZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN2Yom0FE/90AK/RbgBrTrWa8NNV6L880nhm 6rojbMV+Bc8Px8T0+p9ZnszX80NxGuNuOE/sU4CJK5Cg7zFOfj6iOkEyTKdsLahp 13bYkTeuIbImEiq0rTzMba74MOicCkJs5OEQl/1t1OfRD74VUeZzDeLkNj2ISB/H /5bNXvyCmPTJvJUY05kFMEPzBBsZz2+lR1oHoRst5XMWsOrFLLopD8h6IaoFrRkJ wcK98qvkWvC489GDItFpSXcntFNktbs8YfyvzNHxk6OQi6LPIJisoMQU5V+3F/KQ 8UcJAaVszFHStjqz9XFBPXVmVu3SzyC84fr+NQ9/to9ugQA7FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMoDcYs8Gj37xAMCti58kt5p4bxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjJkMmQ4OWItZmI5YS0z MGY0LWIxYzMtMzg1MTMwODMzMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSefwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6OoJV0pg1YYSuI5kbB0Mg7lPfgA/RmkyL32j98tP4hyi7cIxEO+u83 2lGNO4F06XOhof2Ez52GORINgeTEvDu1T82AYbZvee9xa98Fg+iTr+TPAYh4lrxj 7ddPQ5nhFkj+WQvNzFF6Sffaa4tmc39pCmClHiqdcE0bY0x6DN7Kn85ZbWUVYYBo vhY+rW1xoIPyMHfSsZC2CoFjBn8DKtKNbeCApiQsbn2l3rmU4isiRkT4pus4HaFg 1l9BVKbdA/bOXLpcPuZEHto7T/E3goUnZVvGPRb8uvh1aUZ7zIGzJXR0/aHNuVMM 8+GJToD8Eq8g1Pt7RLzp/yItkPtSZ/s= -----END CERTIFICATE-----Generated at Mon Jun 16 23:39:31 2025 by rpki-client