$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2aa9cfec-58d6-30ff-a05e-8cddb1a7270f.roa File: 2aa9cfec-58d6-30ff-a05e-8cddb1a7270f.roa (raw, json) Hash identifier: OoptksnI4DVt3OYwLlijWaHTizF+CajcfMAmb6hj3gI= Subject key identifier: 00:D6:34:EE:B9:15:98:C2:40:C7:0A:CE:DE:C8:85:D5:F3:F0:5F:44 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCF46BFA04C1A249839B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2aa9cfec-58d6-30ff-a05e-8cddb1a7270f.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 21508 IP address blocks: 71.56.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:f4:6b:fa:04:c1:a2:49:83:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=c041b5e6-010a-4576-ab4d-09d871a25d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ea:eb:38:d8:ca:df:84:7a:75:83:92:79:fa: e5:0e:54:e0:56:29:e0:ed:04:ce:f1:36:fe:b7:d0: 5b:07:64:12:00:6c:54:ea:0f:3f:f1:5b:7d:e2:4a: 07:df:04:43:12:15:88:dc:1f:f2:54:2f:e1:62:c6: d1:e2:86:ee:ff:9a:44:2a:64:94:ad:71:9f:1a:71: c3:6d:86:76:10:c7:e5:c3:bb:12:12:4d:7a:0e:b1: 74:74:92:38:ed:6d:39:62:e8:ce:30:0d:3c:5d:62: 02:5f:12:05:ab:e6:6d:45:ad:aa:ed:71:70:69:a1: ed:dd:b1:0f:73:d0:3e:c4:09:cc:22:5c:dd:1e:d7: 36:0a:95:40:67:56:e4:c3:e3:23:4f:fc:f5:d5:bb: b1:39:81:cc:1d:9e:fa:41:9e:be:00:54:e8:32:f5: 43:4d:46:1a:43:01:31:e5:af:60:ff:84:e8:84:60: b4:c6:ec:07:6a:a6:03:0f:9f:d4:3d:46:25:7b:97: b8:18:6d:a8:9a:9b:2d:a0:b8:cb:ae:d5:b4:91:d0: 9b:7f:19:c2:c1:e9:24:11:7f:dd:18:c2:74:a8:76: c1:66:43:09:3f:3d:b5:58:b6:6f:16:18:69:2a:c5: 0c:71:4f:b9:86:ad:be:b4:2f:69:d8:5d:c3:5e:25: d6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D6:34:EE:B9:15:98:C2:40:C7:0A:CE:DE:C8:85:D5:F3:F0:5F:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2aa9cfec-58d6-30ff-a05e-8cddb1a7270f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.56.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:bb:f5:91:b8:c4:d5:0e:63:9d:ec:7a:a8:66:c5:b1:ed:e6: 4d:37:57:34:3e:be:06:22:7a:54:49:47:ae:34:33:e4:21:2f: 20:99:6e:f5:33:bc:9f:ed:ec:8d:7f:bf:b0:69:55:5f:c7:67: 78:7c:c2:45:69:ce:cc:47:32:4d:2d:54:e2:fe:b5:31:b4:97: 49:e6:07:48:f0:0b:0a:cf:e0:47:8c:1e:46:2f:73:3c:01:2c: f3:89:c7:fb:b9:17:ec:60:2a:f8:01:0f:e6:08:62:eb:b4:ff: 29:f8:cd:a8:84:cf:40:43:2f:6c:2d:cc:a8:b1:ca:09:36:de: 9a:28:d5:c1:d0:66:11:35:50:30:87:99:c7:36:45:68:2e:83: 7c:c4:ef:22:47:a6:18:b8:75:47:d5:06:5e:b1:35:56:fd:03: c1:ad:6f:b7:d5:e9:59:ef:3a:15:72:52:0c:24:30:04:d0:7d: e9:e4:ff:f0:bb:d5:a8:2b:95:5c:de:f7:0c:14:0f:df:93:80: 36:55:27:d3:43:82:98:22:cd:fe:ab:f9:1e:4a:de:5a:b1:87: af:65:66:47:f7:99:15:a9:b3:7c:13:52:c5:88:36:a4:97:ed: 41:04:53:c0:eb:3d:9c:a5:e5:77:ed:eb:bf:1e:4e:24:66:24: 30:3f:e0:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/PRr+gTBokmDm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YzA0MWI1ZTYtMDEwYS00NTc2LWFiNGQtMDlkODcxYTI1ZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OrrONjK34R6dYOSefrlDlTgVing7QTO8Tb+ t9BbB2QSAGxU6g8/8Vt94koH3wRDEhWI3B/yVC/hYsbR4obu/5pEKmSUrXGfGnHD bYZ2EMflw7sSEk16DrF0dJI47W05YujOMA08XWICXxIFq+ZtRa2q7XFwaaHt3bEP c9A+xAnMIlzdHtc2CpVAZ1bkw+MjT/z11buxOYHMHZ76QZ6+AFToMvVDTUYaQwEx 5a9g/4TohGC0xuwHaqYDD5/UPUYle5e4GG2ompstoLjLrtW0kdCbfxnCwekkEX/d GMJ0qHbBZkMJPz21WLZvFhhpKsUMcU+5hq2+tC9p2F3DXiXWnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADWNO65FZjCQMcKzt7IhdXz8F9EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmFhOWNmZWMtNThkNi0z MGZmLWEwNWUtOGNkZGIxYTcyNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRzigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALO79ZG4xNUOY53seqhmxbHt5k03VzQ+vgYielRJR640M+QhLyCZbvUz vJ/t7I1/v7BpVV/HZ3h8wkVpzsxHMk0tVOL+tTG0l0nmB0jwCwrP4EeMHkYvczwB LPOJx/u5F+xgKvgBD+YIYuu0/yn4zaiEz0BDL2wtzKixygk23poo1cHQZhE1UDCH mcc2RWgug3zE7yJHphi4dUfVBl6xNVb9A8Gtb7fV6VnvOhVyUgwkMATQfenk//C7 1agrlVze9wwUD9+TgDZVJ9NDgpgizf6r+R5K3lqxh69lZkf3mRWps3wTUsWINqSX 7UEEU8DrPZyl5Xft678eTiRmJDA/4NQ= -----END CERTIFICATE-----Generated at Sun Jul 20 17:17:52 2025 by rpki-client