$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da5b1a4c-e5ae-39c6-b803-eaddfddda160.roa File: da5b1a4c-e5ae-39c6-b803-eaddfddda160.roa (raw, json) Hash identifier: 2KevSJmyrB91AQ7psNq8B0ghocI+Jblh1/UMbRHu8dI= Subject key identifier: 71:41:DF:35:B2:CE:17:DD:4E:70:A9:2A:07:6D:09:57:54:C5:63:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD81BB764197BC7443F2C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da5b1a4c-e5ae-39c6-b803-eaddfddda160.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 13367 IP address blocks: 174.53.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:81:bb:76:41:97:bc:74:43:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=3833efde-0092-4131-bed3-211d229e4c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:e8:08:e8:de:78:ad:9e:d1:41:da:76:61: 49:5a:57:d3:c0:a1:80:3b:ba:ce:0a:42:91:7b:72: e2:eb:98:94:a7:82:b3:3e:15:b9:21:4d:2e:e5:1a: 37:40:03:16:81:5a:b0:07:a1:00:49:32:db:ce:a2: c3:c1:28:58:13:b4:4e:54:fc:28:fe:65:de:ff:25: a1:85:ef:3d:34:69:d0:4f:37:59:3d:c1:9d:c6:26: f0:bb:e8:d0:2d:46:c7:72:c3:3b:00:5e:73:cd:e7: 3b:f8:1c:70:15:39:72:f5:2a:52:a9:a7:15:a1:0e: 1e:2d:8f:5e:90:c0:e6:75:e1:f1:7c:b3:38:0a:11: 92:4d:6f:81:52:51:88:fb:9a:60:89:49:1e:d6:90: 67:7c:63:d8:b6:29:13:cf:f1:5c:ca:25:93:0a:42: dc:17:35:4b:3d:04:d0:d8:a7:7f:88:e2:da:08:d4: 54:76:52:b8:38:00:4b:66:32:08:5b:12:b7:77:fa: 18:8b:26:15:87:b0:81:35:bb:1e:1d:a8:1e:8e:2a: ba:77:ae:25:ff:4f:c3:4b:af:aa:94:c7:ed:6a:c5: 02:3f:ea:cc:b1:10:66:b7:8f:02:21:19:d4:c0:51: df:23:f7:54:8d:4d:5d:c2:7c:d1:34:d4:24:e2:fd: 9b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:41:DF:35:B2:CE:17:DD:4E:70:A9:2A:07:6D:09:57:54:C5:63:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da5b1a4c-e5ae-39c6-b803-eaddfddda160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.53.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:a1:26:52:c0:34:b0:f1:cd:12:a6:fd:8b:00:4f:7d:e8:b3: f1:39:32:3a:22:0e:28:00:1b:ca:cf:46:e3:f7:ab:40:32:3b: e5:4b:b6:4d:d6:b9:c7:29:a7:4c:cf:21:53:35:85:76:7e:f2: 57:8a:a9:82:b3:e3:5f:40:d7:7e:0f:c1:85:f0:72:f5:a8:64: 24:78:33:1e:75:0a:7f:07:db:41:28:19:22:3e:85:9d:a7:f2: 20:e1:19:42:a3:1a:f3:2f:b8:b1:bc:e3:38:81:27:c0:c4:36: 5f:7e:15:77:f3:fa:71:23:f1:22:74:e6:a1:86:48:ee:08:cb: 93:e9:b0:99:db:c9:0b:a7:79:70:35:40:5d:de:34:00:ca:95: 7a:d0:dd:27:b6:e1:cc:1d:b4:03:93:f1:fc:de:12:d7:27:5a: 74:8e:54:90:1e:f0:4f:49:41:e5:d8:df:66:a7:bc:05:f8:ca: ca:ac:53:a2:4c:2d:12:c5:80:cd:6f:80:48:2c:c8:e0:5e:e7: b2:ba:96:9b:98:d0:0a:ae:33:ab:7f:b4:72:b7:02:80:fb:11: 94:fa:22:6f:02:1f:c5:91:cc:85:2f:9b:c8:51:e7:81:52:22: e3:bb:32:98:25:cf:ac:48:22:54:07:cd:68:d0:d6:76:a5:8e: 6a:81:03:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/YG7dkGXvHRD8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MzgzM2VmZGUtMDA5Mi00MTMxLWJlZDMtMjExZDIyOWU0Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rnoCOjeeK2e0UHadmFJWlfTwKGAO7rOCkKR e3Li65iUp4KzPhW5IU0u5Ro3QAMWgVqwB6EASTLbzqLDwShYE7ROVPwo/mXe/yWh he89NGnQTzdZPcGdxibwu+jQLUbHcsM7AF5zzec7+BxwFTly9SpSqacVoQ4eLY9e kMDmdeHxfLM4ChGSTW+BUlGI+5pgiUke1pBnfGPYtikTz/FcyiWTCkLcFzVLPQTQ 2Kd/iOLaCNRUdlK4OABLZjIIWxK3d/oYiyYVh7CBNbseHagejiq6d64l/0/DS6+q lMftasUCP+rMsRBmt48CIRnUwFHfI/dUjU1dwnzRNNQk4v2b2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFB3zWyzhfdTnCpKgdtCVdUxWPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE1YjFhNGMtZTVhZS0z OWM2LWI4MDMtZWFkZGZkZGRhMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrjXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKhJlLANLDxzRKm/YsAT33os/E5MjoiDigAG8rPRuP3q0AyO+VLtk3W uccpp0zPIVM1hXZ+8leKqYKz419A134PwYXwcvWoZCR4Mx51Cn8H20EoGSI+hZ2n 8iDhGUKjGvMvuLG84ziBJ8DENl9+FXfz+nEj8SJ05qGGSO4Iy5PpsJnbyQuneXA1 QF3eNADKlXrQ3Se24cwdtAOT8fzeEtcnWnSOVJAe8E9JQeXY32anvAX4ysqsU6JM LRLFgM1vgEgsyOBe57K6lpuY0AquM6t/tHK3AoD7EZT6Im8CH8WRzIUvm8hR54FS IuO7Mpglz6xIIlQHzWjQ1naljmqBA3U= -----END CERTIFICATE-----Generated at Sun Jul 20 21:47:09 2025 by rpki-client