$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1abf8c5b-02e6-3384-a50e-01b89c093f1d.roa File: 1abf8c5b-02e6-3384-a50e-01b89c093f1d.roa (raw, json) Hash identifier: dNFVwUqttARTsHASuSA3gTdQVX05toZAm1TB68NYsL4= Subject key identifier: F8:2D:34:3A:63:82:11:C4:45:DB:CE:20:A6:51:EA:7D:46:CD:56:C2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCFF099030585E1A5AE680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1abf8c5b-02e6-3384-a50e-01b89c093f1d.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33489 IP address blocks: 70.89.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:ff:09:90:30:58:5e:1a:5a:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=eb5485ee-5872-4354-8287-8fa62764f83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b3:f0:d3:cf:cf:8e:5a:6b:d4:ea:c4:5c:43: a6:04:19:2b:aa:f8:2b:82:96:24:19:e3:26:c6:6d: f3:75:8f:94:df:85:f7:ed:99:20:46:f7:35:27:02: ad:85:92:68:72:d0:87:5f:80:96:28:be:0a:51:13: 79:f5:05:4f:4e:d3:6d:02:4b:17:82:22:11:2c:fb: cc:19:2e:91:5c:fe:ab:70:79:75:88:21:fb:9b:df: 28:1b:bc:60:f1:db:e7:b0:9c:e0:4f:fe:8a:9f:fa: 6b:bc:9e:97:5f:35:24:85:43:cb:73:b1:d1:97:c3: 82:41:70:47:74:eb:aa:52:e1:7e:cc:fd:9b:ea:4c: cd:30:1e:34:b1:1f:7b:d2:bb:e0:18:01:c7:fe:46: c5:7b:47:42:7d:b3:bf:a9:48:df:11:87:98:a6:fd: 2c:65:23:7e:da:91:82:d3:07:06:53:87:8c:f1:ad: f3:8a:dc:bb:fa:7a:df:d5:8d:52:06:94:f6:e1:c5: 39:bb:4f:a8:d4:ea:fa:d6:d2:ec:fd:6a:00:2a:78: f8:40:7a:c9:15:9a:f6:3e:6e:13:5d:a8:c4:a0:fc: 0e:8f:27:ce:b8:8b:2b:b2:14:f0:23:d1:2f:c9:01: 56:b9:38:20:96:85:4d:54:cc:06:ff:20:29:a8:dd: d7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2D:34:3A:63:82:11:C4:45:DB:CE:20:A6:51:EA:7D:46:CD:56:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1abf8c5b-02e6-3384-a50e-01b89c093f1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 70.89.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e9:56:a5:1c:3c:b7:bd:c9:06:79:72:6f:b0:a3:7c:18:32: e3:0f:e4:59:f4:fb:d1:c2:33:da:57:08:0b:e4:08:0b:81:24: a4:14:c2:c0:4f:48:ea:8f:56:2e:49:92:b8:11:04:af:a2:80: 46:58:69:98:20:f4:55:5a:fd:5a:f3:75:d4:42:11:83:ba:0b: d1:9c:b1:98:e0:3e:d3:6b:9a:28:fc:be:b8:13:43:c9:d5:6c: 90:44:1f:8d:23:8e:0d:e0:23:b8:95:77:9f:13:47:67:23:77: b5:77:0c:2e:05:79:ed:96:4e:d4:2a:2e:95:a1:ec:18:c2:76: 50:a2:61:35:aa:a9:e4:55:3b:2d:95:e3:e6:4d:78:2d:0f:5c: ba:7a:1f:9a:67:68:26:6c:eb:39:f5:41:6b:fc:9c:72:60:4b: fb:83:8b:b3:87:bd:c1:6a:58:14:3f:82:91:ec:61:1d:a9:2b: 26:1d:ff:10:e9:cd:9b:0e:13:ba:51:6b:17:36:71:5c:1d:da: 18:df:67:4f:1b:a4:d9:12:4c:7c:dd:b5:b8:97:c4:0a:2e:3a: 2c:ea:b2:2e:35:89:dc:47:36:3d:c9:2d:3d:ab:97:00:ff:ea: 79:b6:7f:79:af:7c:03:11:e1:cd:dc:f2:6d:fa:40:16:8b:38: 4b:33:f7:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/P8JkDBYXhpa5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZWI1NDg1ZWUtNTg3Mi00MzU0LTgyODctOGZhNjI3NjRmODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7Pw08/Pjlpr1OrEXEOmBBkrqvgrgpYkGeMm xm3zdY+U34X37ZkgRvc1JwKthZJoctCHX4CWKL4KURN59QVPTtNtAksXgiIRLPvM GS6RXP6rcHl1iCH7m98oG7xg8dvnsJzgT/6Kn/prvJ6XXzUkhUPLc7HRl8OCQXBH dOuqUuF+zP2b6kzNMB40sR970rvgGAHH/kbFe0dCfbO/qUjfEYeYpv0sZSN+2pGC 0wcGU4eM8a3zity7+nrf1Y1SBpT24cU5u0+o1Or61tLs/WoAKnj4QHrJFZr2Pm4T XajEoPwOjyfOuIsrshTwI9EvyQFWuTggloVNVMwG/yApqN3XJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgtNDpjghHERdvOIKZR6n1GzVbCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWFiZjhjNWItMDJlNi0z Mzg0LWE1MGUtMDFiODljMDkzZjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRlmUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjpVqUcPLe9yQZ5cm+wo3wYMuMP5Fn0+9HCM9pXCAvkCAuBJKQUwsBP SOqPVi5JkrgRBK+igEZYaZgg9FVa/VrzddRCEYO6C9GcsZjgPtNrmij8vrgTQ8nV bJBEH40jjg3gI7iVd58TR2cjd7V3DC4Fee2WTtQqLpWh7BjCdlCiYTWqqeRVOy2V 4+ZNeC0PXLp6H5pnaCZs6zn1QWv8nHJgS/uDi7OHvcFqWBQ/gpHsYR2pKyYd/xDp zZsOE7pRaxc2cVwd2hjfZ08bpNkSTHzdtbiXxAouOizqsi41idxHNj3JLT2rlwD/ 6nm2f3mvfAMR4c3c8m36QBaLOEsz9/g= -----END CERTIFICATE-----Generated at Sun Jul 20 21:09:02 2025 by rpki-client