$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/572d0c1b-b937-3501-bd67-b5d5dba40820.roa File: 572d0c1b-b937-3501-bd67-b5d5dba40820.roa (raw, json) Hash identifier: 1C7pxQMeRZJz7Oq3L8SeaERQtJlYoUHHxEwng2XnEQI= Subject key identifier: C8:14:10:5A:1B:2E:13:A7:1B:2F:A8:66:E3:AF:DD:DE:29:F6:73:5C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431404A8B6E7FD63FE8B280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/572d0c1b-b937-3501-bd67-b5d5dba40820.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 73.157.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:40:4a:8b:6e:7f:d6:3f:e8:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=1808e6c9-b4a5-4db2-aab4-a2c2ae4f7ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3b:36:2f:ad:a6:ed:5b:58:cb:6d:88:58:4a: a7:46:11:67:fb:da:10:41:9d:b9:eb:e7:3b:31:87: 19:bc:1a:5a:fb:53:0f:24:f1:7e:85:b4:2f:5c:a6: 40:aa:c0:11:e7:f9:b2:a0:c7:47:61:d1:f5:d7:b7: 09:ab:2a:12:f0:70:16:d9:68:aa:e4:f4:cc:b8:b5: 7e:3b:3b:f9:ff:04:35:fd:80:ae:7e:33:df:dc:c6: 6f:f5:e7:6c:24:4f:4e:a0:7a:a3:c0:ea:02:91:cd: f4:7a:93:cd:a9:56:f9:3b:33:33:ce:ee:0b:2f:46: d0:8a:0c:6b:69:b0:4e:b5:e8:be:80:09:6d:e8:ef: fc:16:51:43:37:70:6e:7a:2b:50:63:2c:a8:ea:0f: b5:1e:a7:67:b8:19:4f:9e:b5:27:15:10:b3:29:e5: 78:ee:40:68:24:a6:f1:18:97:fa:c7:86:b8:d6:dd: ea:f5:30:d6:51:fd:da:55:c0:09:47:aa:c0:47:67: 9d:6d:74:d7:53:16:54:fa:34:fd:76:a9:3d:de:2d: 4b:80:fa:e6:78:1e:74:66:c1:d6:31:6c:fb:3b:2c: 96:ec:a0:f1:ba:08:67:cd:78:bb:e9:dc:e7:66:c8: 21:0c:03:ab:c3:44:48:e8:30:05:d5:01:46:8b:39: 1c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:14:10:5A:1B:2E:13:A7:1B:2F:A8:66:E3:AF:DD:DE:29:F6:73:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/572d0c1b-b937-3501-bd67-b5d5dba40820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.157.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:94:56:e2:72:97:05:eb:da:8f:37:83:a3:04:e4:73:cd:c4: be:49:46:de:47:b6:a4:38:f4:a1:d3:76:93:2a:ca:5f:91:f8: 05:f0:e2:9a:ce:23:30:13:96:8c:11:2f:d1:11:a7:c1:ca:08: ac:3a:5b:8b:40:32:8a:c5:ec:23:f9:43:46:db:96:82:f7:a5: 55:31:ea:d5:6a:dc:eb:e7:ab:c9:4c:ba:17:66:66:d9:f9:c3: df:25:88:e6:d7:ae:70:46:0e:d6:8b:9e:73:14:f1:d0:61:7d: 33:30:3e:d8:4d:1d:8f:49:06:cc:cc:67:02:24:c0:50:45:10: bf:c8:b7:68:cb:00:84:0e:6e:f5:c7:08:29:61:49:a0:3c:c9: ac:1f:97:e6:b1:c8:9a:38:d3:24:3b:29:78:bd:08:02:5a:fe: ad:a7:65:24:79:fc:98:fd:80:90:42:06:29:d6:f3:d6:b8:a6: 87:d4:b1:1e:58:b5:19:a4:39:82:a7:2e:c6:dc:c5:3f:fd:68: 86:09:1e:77:86:2f:40:0f:84:93:7f:97:a5:9a:79:8f:33:38: 43:83:e9:b8:f3:d5:4e:af:ad:7e:f4:10:38:70:1a:83:12:ed: b4:8d:f7:c9:ce:5a:60:f3:a9:a0:9a:3b:66:5d:96:5f:15:c5: f5:09:e6:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMUBKi25/1j/osoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MTgwOGU2YzktYjRhNS00ZGIyLWFhYjQtYTJjMmFlNGY3ZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTs2L62m7VtYy22IWEqnRhFn+9oQQZ256+c7 MYcZvBpa+1MPJPF+hbQvXKZAqsAR5/myoMdHYdH117cJqyoS8HAW2Wiq5PTMuLV+ Ozv5/wQ1/YCufjPf3MZv9edsJE9OoHqjwOoCkc30epPNqVb5OzMzzu4LL0bQigxr abBOtei+gAlt6O/8FlFDN3BueitQYyyo6g+1HqdnuBlPnrUnFRCzKeV47kBoJKbx GJf6x4a41t3q9TDWUf3aVcAJR6rAR2edbXTXUxZU+jT9dqk93i1LgPrmeB50ZsHW MWz7OyyW7KDxughnzXi76dznZsghDAOrw0RI6DAF1QFGizkcuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgUEFobLhOnGy+oZuOv3d4p9nNcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTcyZDBjMWItYjkzNy0z NTAxLWJkNjctYjVkNWRiYTQwODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASZ3OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALKUVuJylwXr2o83g6ME5HPNxL5JRt5HtqQ49KHTdpMqyl+R+AXw4prO IzATlowRL9ERp8HKCKw6W4tAMorF7CP5Q0bbloL3pVUx6tVq3Ovnq8lMuhdmZtn5 w98liObXrnBGDtaLnnMU8dBhfTMwPthNHY9JBszMZwIkwFBFEL/It2jLAIQObvXH CClhSaA8yawfl+axyJo40yQ7KXi9CAJa/q2nZSR5/Jj9gJBCBinW89a4pofUsR5Y tRmkOYKnLsbcxT/9aIYJHneGL0APhJN/l6WaeY8zOEOD6bjz1U6vrX70EDhwGoMS 7bSN98nOWmDzqaCaO2Zdll8VxfUJ5kw= -----END CERTIFICATE-----Generated at Mon Jun 16 13:06:20 2025 by rpki-client