$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1cae273-d14f-3940-82e4-8d4ac5c76b0d.roa File: d1cae273-d14f-3940-82e4-8d4ac5c76b0d.roa (raw, json) Hash identifier: 7xvW3EpVwFP+jQBKiEqSoVpusrynzUh1h6QkotoeAro= Subject key identifier: 1F:3C:1F:D1:B8:64:78:45:F9:61:CA:12:09:B5:F5:ED:7F:AC:8C:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A71EB6FC325857E3CAB1C9080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1cae273-d14f-3940-82e4-8d4ac5c76b0d.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 33491 IP address blocks: 67.178.38.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:6f:c3:25:85:7e:3c:ab:1c:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=7fa60507-c1ed-42e0-9895-cc004e5a8177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:53:70:1d:cb:59:00:2e:e2:a3:1e:70:b6:b4: bf:83:f2:a1:7b:94:26:c4:b8:8c:44:34:1b:73:4f: 19:57:c3:af:90:06:37:4e:8b:ab:bb:6b:87:a0:f2: bc:d0:0c:0d:02:e3:de:ae:7d:b6:56:6b:57:20:f6: e0:a9:01:64:c5:16:b3:33:26:13:28:0c:53:d4:d8: a9:5a:58:ee:26:f8:cd:0b:27:79:b3:e2:2d:0e:d4: e0:ad:70:3d:97:08:9b:a5:39:12:12:37:c0:79:15: 00:e8:fa:5d:a3:90:d9:1f:66:a3:c8:ef:91:dd:f4: 91:8e:ea:81:9d:89:7c:97:73:44:f3:db:c0:cb:0e: 8f:af:9d:41:f2:e8:b6:aa:b7:58:17:85:e4:43:bd: 98:10:8a:14:14:78:1e:60:d6:64:c7:32:13:d5:ff: 10:ce:ed:40:2e:41:dd:24:68:7e:f4:6c:30:04:7a: 3b:0d:2d:4b:49:99:ad:32:c3:29:11:98:cb:ab:18: 2c:d7:95:5b:45:ab:df:1b:34:59:09:1c:84:a0:0d: 05:9a:50:6e:7a:08:eb:b3:2f:46:81:e4:7d:45:f1: d6:28:20:aa:69:2b:93:3b:c3:e2:a3:e7:ee:e9:1a: 18:4d:94:3b:d8:b4:ec:96:16:4e:28:f4:d0:fb:5b: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3C:1F:D1:B8:64:78:45:F9:61:CA:12:09:B5:F5:ED:7F:AC:8C:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1cae273-d14f-3940-82e4-8d4ac5c76b0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.178.38.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:01:0c:7b:35:98:63:39:df:e8:20:fb:b1:3d:37:08:17:5c: d6:f3:b4:e0:26:07:3e:3b:bd:4f:89:44:a4:d4:9f:19:59:21: 88:18:4d:b2:64:b1:ee:c6:a2:7d:82:c3:65:47:8c:c5:69:7b: d8:39:3d:16:4c:9c:39:b7:29:0d:a2:ce:65:b8:92:72:54:6e: 70:8d:7f:b5:d0:91:c3:ae:3a:55:6a:1e:cb:f0:40:86:07:7c: 6b:e2:c7:04:77:cd:8d:50:f4:4c:32:d5:d1:a7:80:f0:cd:67: a3:69:57:18:bb:91:30:98:8f:e5:2a:6a:70:02:53:a3:7f:c4: 17:20:c8:3a:14:2f:8a:ca:e3:0e:a0:ec:29:87:9c:a2:32:95: f6:70:e1:3d:88:ff:64:0c:ce:0d:48:8b:3c:7d:6a:0b:a7:cb: b2:46:4f:b2:55:f4:d8:a1:e3:91:40:38:48:be:7c:cf:3f:f8: 7e:66:62:47:b7:09:68:b1:b9:19:86:79:87:85:d0:74:17:72: ba:7e:a7:50:58:69:a3:30:58:e2:39:50:38:41:e5:0b:41:ff: a8:18:21:5d:ae:76:80:f9:08:3f:93:27:6f:92:57:9a:d7:0f: 6e:f2:04:20:4d:56:5a:b2:8a:4c:60:5e:ad:9f:83:ff:42:45: bd:72:08:d7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpx62/DJYV+PKsckIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk N2ZhNjA1MDctYzFlZC00MmUwLTk4OTUtY2MwMDRlNWE4MTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlNwHctZAC7iox5wtrS/g/Khe5QmxLiMRDQb c08ZV8OvkAY3Touru2uHoPK80AwNAuPern22VmtXIPbgqQFkxRazMyYTKAxT1Nip WljuJvjNCyd5s+ItDtTgrXA9lwibpTkSEjfAeRUA6Ppdo5DZH2ajyO+R3fSRjuqB nYl8l3NE89vAyw6Pr51B8ui2qrdYF4XkQ72YEIoUFHgeYNZkxzIT1f8Qzu1ALkHd JGh+9GwwBHo7DS1LSZmtMsMpEZjLqxgs15VbRavfGzRZCRyEoA0FmlBuegjrsy9G geR9RfHWKCCqaSuTO8Pio+fu6RoYTZQ72LTslhZOKPTQ+1voRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB88H9G4ZHhF+WHKEgm19e1/rIzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFjYWUyNzMtZDE0Zi0z OTQwLTgyZTQtOGQ0YWM1Yzc2YjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEQ7ImgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAOAQx7NZhjOd/oIPuxPTcIF1zW87TgJgc+O71PiUSk1J8ZWSGIGE2y ZLHuxqJ9gsNlR4zFaXvYOT0WTJw5tykNos5luJJyVG5wjX+10JHDrjpVah7L8ECG B3xr4scEd82NUPRMMtXRp4DwzWejaVcYu5EwmI/lKmpwAlOjf8QXIMg6FC+KyuMO oOwph5yiMpX2cOE9iP9kDM4NSIs8fWoLp8uyRk+yVfTYoeORQDhIvnzPP/h+ZmJH twlosbkZhnmHhdB0F3K6fqdQWGmjMFjiOVA4QeULQf+oGCFdrnaA+Qg/kydvklea 1w9u8gQgTVZasopMYF6tn4P/QkW9cgjX -----END CERTIFICATE-----Generated at Sun Jul 20 17:24:21 2025 by rpki-client