$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0131ee43-05e4-3174-a167-57ff02217e3b.roa File: 0131ee43-05e4-3174-a167-57ff02217e3b.roa (raw, json) Hash identifier: BgcUb7ch6yTSbg/61YvgkxNuiXwK70+zBEzHP/g7e3I= Subject key identifier: E6:FE:BB:F9:67:7B:84:78:B3:F0:C5:28:8B:B2:65:53:70:0E:C2:D4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C07D89030C732412B3D0880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0131ee43-05e4-3174-a167-57ff02217e3b.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 67.176.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:d8:90:30:c7:32:41:2b:3d:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=8f4bc421-2f12-45cd-a719-754708e5326d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:12:19:30:b1:bb:bc:8d:15:88:c5:5d:36:dc: d1:2a:31:d2:ea:00:a9:ad:91:3a:55:1b:d3:9f:f5: a6:f4:21:86:1a:33:1d:dc:ec:c2:71:f4:23:f4:14: 13:7b:3e:af:95:54:e9:14:33:58:ac:3c:5a:3a:e0: 45:85:4c:57:3c:2d:10:f2:07:10:63:4c:f8:7e:0f: b0:a7:de:3f:d0:1f:10:ee:c9:93:a1:d0:39:0d:b9: 30:4b:5f:70:73:f2:2f:f6:38:2d:c8:6e:81:01:ff: 50:ef:ab:17:59:bf:ef:e5:38:0b:4c:68:49:e0:2c: ba:18:9e:c5:38:34:8f:2a:82:6e:22:6e:ac:f3:12: ac:71:54:82:88:41:6e:c7:cb:3c:c5:7d:37:e7:ab: 11:9d:24:09:2e:63:93:53:77:3a:9b:d3:b2:3f:c1: 35:ad:cd:c0:4a:bc:3a:b4:74:7a:be:31:21:ac:90: db:6a:a8:2a:e3:08:c9:f4:8f:c4:fe:fc:ad:bc:38: 02:0e:25:8d:cf:d9:61:a5:6e:49:60:48:53:24:b1: 80:67:c5:e9:fb:a4:4b:b5:be:02:80:4d:7c:92:cd: 08:49:5b:46:58:db:ea:f3:53:1e:0b:36:50:43:be: ef:b8:d0:fb:d0:bc:0e:26:97:1f:8e:3a:63:b9:68: 8f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FE:BB:F9:67:7B:84:78:B3:F0:C5:28:8B:B2:65:53:70:0E:C2:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0131ee43-05e4-3174-a167-57ff02217e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.176.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c0:e3:07:17:49:18:a2:9b:d0:9c:e3:5b:e6:38:fe:37:d8: 1b:f6:1c:18:bf:54:a7:9c:5d:27:ad:64:30:1d:4f:f2:05:42: fa:8f:6a:d0:46:51:1e:dd:91:67:b4:34:dc:32:47:de:50:0e: b2:a6:f8:f2:07:f7:e2:be:7c:8c:e7:93:af:37:80:23:87:dd: 11:9f:29:db:21:dc:b7:a7:9c:72:56:f5:55:62:88:73:a9:35: 9d:bd:e0:f1:37:3e:5b:f1:9c:90:6a:64:58:25:6a:09:d2:d6: ee:df:9f:c5:85:65:03:a0:29:5a:f7:65:21:01:ad:93:98:b8: 3e:42:73:cc:16:6e:19:27:28:fe:12:92:8d:57:e1:15:0c:c1: 5f:21:de:78:af:b3:b4:e8:13:bc:48:36:8c:12:8c:28:ae:d4: a7:6c:fe:65:fe:dc:f3:a7:ae:6e:7b:7a:58:5d:89:45:43:10: bc:78:7d:b8:21:cc:73:e8:52:54:b4:2c:db:a8:16:1a:f9:4c: 80:4b:75:57:de:c0:b5:fa:b6:8f:98:51:44:b0:40:01:36:db: 18:4c:c6:76:1a:18:2e:ab:31:96:13:94:00:85:da:63:a4:b7: b6:97:4b:aa:03:23:46:e3:eb:f9:73:70:5d:cb:74:ec:40:ec: 2d:bd:0a:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB9iQMMcyQSs9CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OGY0YmM0MjEtMmYxMi00NWNkLWE3MTktNzU0NzA4ZTUzMjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRIZMLG7vI0ViMVdNtzRKjHS6gCprZE6VRvT n/Wm9CGGGjMd3OzCcfQj9BQTez6vlVTpFDNYrDxaOuBFhUxXPC0Q8gcQY0z4fg+w p94/0B8Q7smTodA5DbkwS19wc/Iv9jgtyG6BAf9Q76sXWb/v5TgLTGhJ4Cy6GJ7F ODSPKoJuIm6s8xKscVSCiEFux8s8xX0356sRnSQJLmOTU3c6m9OyP8E1rc3ASrw6 tHR6vjEhrJDbaqgq4wjJ9I/E/vytvDgCDiWNz9lhpW5JYEhTJLGAZ8Xp+6RLtb4C gE18ks0ISVtGWNvq81MeCzZQQ77vuND70LwOJpcfjjpjuWiPaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOb+u/lne4R4s/DFKIuyZVNwDsLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDEzMWVlNDMtMDVlNC0z MTc0LWExNjctNTdmZjAyMjE3ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ7CrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnA4wcXSRiim9Cc41vmOP432Bv2HBi/VKecXSetZDAdT/IFQvqPatBG UR7dkWe0NNwyR95QDrKm+PIH9+K+fIznk683gCOH3RGfKdsh3LennHJW9VViiHOp NZ294PE3PlvxnJBqZFglagnS1u7fn8WFZQOgKVr3ZSEBrZOYuD5Cc8wWbhknKP4S ko1X4RUMwV8h3nivs7ToE7xINowSjCiu1Kds/mX+3POnrm57elhdiUVDELx4fbgh zHPoUlS0LNuoFhr5TIBLdVfewLX6to+YUUSwQAE22xhMxnYaGC6rMZYTlACF2mOk t7aXS6oDI0bj6/lzcF3LdOxA7C29Cqc= -----END CERTIFICATE-----Generated at Tue Jun 3 05:56:02 2025 by rpki-client