$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d7cf5e-4efa-3557-9b11-5a57d9a0bd3f.roa File: f4d7cf5e-4efa-3557-9b11-5a57d9a0bd3f.roa (raw, json) Hash identifier: yJj7Scj9FihnxUIVuLSWRxX0iH5WIWN90YAzoBkoyYQ= Subject key identifier: 8D:C1:C7:CF:74:43:A7:98:A2:BB:77:F6:A9:66:B4:6E:95:19:8F:AF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4314714826E3DBC1D9E8880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d7cf5e-4efa-3557-9b11-5a57d9a0bd3f.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 73.240.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:47:14:82:6e:3d:bc:1d:9e:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=a56209d5-e005-4918-9ce2-67b166f242af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9a:8c:f7:69:ef:61:0d:ce:d6:f3:0c:ac:fe: b0:42:38:a3:60:bf:c9:be:7b:19:85:b9:cf:21:90: de:f8:11:eb:97:1d:1c:d6:e0:f9:bf:d5:74:61:34: 52:20:43:22:8e:69:24:76:27:31:4e:74:91:e2:37: e7:d0:6c:07:33:a5:fe:24:db:98:6a:4c:de:00:63: b7:8e:23:bb:e6:69:a1:e2:bb:d0:71:94:85:60:d4: 24:48:a4:2a:b1:f0:40:a9:69:3d:b2:bc:7d:7c:69: e5:67:d7:1f:e7:db:6e:49:1c:20:25:0b:0a:a9:4e: 92:2f:63:da:4c:16:b5:69:ab:3e:d5:22:31:5c:73: 07:a5:a1:a8:bf:e4:3d:8f:1e:20:b9:e3:c4:11:55: 5e:84:e0:22:31:f2:9d:76:dc:b0:b9:1f:8d:9b:f7: 8c:4f:0b:a1:35:1b:e6:6b:22:30:55:dd:c0:94:83: 61:a9:69:3c:4e:a5:26:0e:fe:4d:53:cb:8c:8c:45: 08:50:01:e1:41:0a:84:11:41:9d:8d:81:bd:59:72: 7b:93:1a:dd:e5:64:36:84:52:e6:89:8a:5f:5b:27: b9:cd:14:45:96:83:bd:58:a4:ce:c8:bf:46:02:ce: 92:7c:32:63:9b:ff:90:cd:3e:e8:ec:98:06:a9:53: bb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C1:C7:CF:74:43:A7:98:A2:BB:77:F6:A9:66:B4:6E:95:19:8F:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f4d7cf5e-4efa-3557-9b11-5a57d9a0bd3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 73.240.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e4:03:0c:1d:93:5a:01:99:b7:3c:42:06:5a:02:0b:1c:95: 20:2f:c8:42:09:15:28:a3:7c:9d:65:c3:c1:8f:ac:ff:85:45: 2a:0b:46:a3:e4:1a:57:dd:0f:12:86:a6:0f:aa:f6:68:e9:59: 57:83:19:f2:dc:48:f9:d6:aa:f1:84:6b:b6:c9:cc:ff:2d:49: 27:06:80:99:8e:bf:a2:5a:e0:0c:95:91:be:7a:43:a9:75:9f: 43:14:89:32:9b:58:0d:b4:65:cc:75:ae:fb:cc:e3:ee:35:cb: 3c:5c:32:6c:b1:73:b5:da:b4:95:62:3f:9a:4e:11:51:96:eb: 2c:0e:69:19:a0:72:14:ab:1b:84:7e:d8:a1:77:d5:ad:0e:c8: 5c:00:9f:29:e8:58:8b:16:64:f5:f3:29:43:24:f9:76:c9:5a: 12:9e:04:47:89:b3:83:71:5c:0f:d0:44:9b:e9:d1:3c:15:6c: 9b:db:83:16:63:e8:ad:42:96:5b:4f:85:b9:21:66:04:5d:9c: 0f:59:a1:b7:22:b2:0c:60:70:a4:d7:b9:80:22:9d:45:a5:9b: 61:1f:aa:ad:a0:ea:0c:d7:a9:c5:46:96:90:26:35:2c:2c:b5: 6c:bc:0f:84:54:c9:e4:07:03:68:c4:28:03:77:f1:79:8d:11: 7d:54:a1:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMUcUgm49vB2eiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YTU2MjA5ZDUtZTAwNS00OTE4LTljZTItNjdiMTY2ZjI0MmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZqM92nvYQ3O1vMMrP6wQjijYL/JvnsZhbnP IZDe+BHrlx0c1uD5v9V0YTRSIEMijmkkdicxTnSR4jfn0GwHM6X+JNuYakzeAGO3 jiO75mmh4rvQcZSFYNQkSKQqsfBAqWk9srx9fGnlZ9cf59tuSRwgJQsKqU6SL2Pa TBa1aas+1SIxXHMHpaGov+Q9jx4guePEEVVehOAiMfKddtywuR+Nm/eMTwuhNRvm ayIwVd3AlINhqWk8TqUmDv5NU8uMjEUIUAHhQQqEEUGdjYG9WXJ7kxrd5WQ2hFLm iYpfWye5zRRFloO9WKTOyL9GAs6SfDJjm/+QzT7o7JgGqVO72QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3Bx890Q6eYort39qlmtG6VGY+vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjRkN2NmNWUtNGVmYS0z NTU3LTliMTEtNWE1N2Q5YTBiZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSfBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3kAwwdk1oBmbc8QgZaAgsclSAvyEIJFSijfJ1lw8GPrP+FRSoLRqPk GlfdDxKGpg+q9mjpWVeDGfLcSPnWqvGEa7bJzP8tSScGgJmOv6Ja4AyVkb56Q6l1 n0MUiTKbWA20Zcx1rvvM4+41yzxcMmyxc7XatJViP5pOEVGW6ywOaRmgchSrG4R+ 2KF31a0OyFwAnynoWIsWZPXzKUMk+XbJWhKeBEeJs4NxXA/QRJvp0TwVbJvbgxZj 6K1ClltPhbkhZgRdnA9ZobcisgxgcKTXuYAinUWlm2Efqq2g6gzXqcVGlpAmNSws tWy8D4RUyeQHA2jEKAN38XmNEX1UofA= -----END CERTIFICATE-----Generated at Mon Jun 16 13:10:40 2025 by rpki-client