$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0653ead0-207d-3f29-8ead-34d6e7a68a32.roa File: 0653ead0-207d-3f29-8ead-34d6e7a68a32.roa (raw, json) Hash identifier: 1sMm8c6syHADRnepTuoYIcyvPdvMYlnUdC4uoNOKF9M= Subject key identifier: E6:34:7C:9D:AA:C8:8B:E8:A8:EE:E0:E5:70:C6:D3:CD:ED:F7:AC:F7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4320A38C1BB34460DB7A040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0653ead0-207d-3f29-8ead-34d6e7a68a32.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 71.227.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:0a:38:c1:bb:34:46:0d:b7:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=e95b7053-58e2-4fd2-b784-f0e3c1decea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:29:d5:23:ea:0b:80:82:fa:d3:d3:3e:b1:45: e1:d9:21:4d:67:71:27:db:29:81:f9:d3:5a:ac:35: bd:d2:92:97:56:6b:03:59:09:7e:9c:48:e3:da:5c: b2:d0:41:12:47:ed:dc:8e:47:a8:9b:dd:f4:26:fa: 8e:f4:ad:5d:e6:38:84:5e:10:cb:77:b7:c1:08:8c: 1e:03:b1:8f:10:8d:27:73:c1:de:4c:81:2a:db:76: fd:c0:5b:ed:1f:c3:ef:07:9e:81:34:97:99:e6:12: 4b:42:75:6a:5c:15:6a:28:da:27:0c:9e:a5:dc:74: cb:06:1f:f6:e0:06:fb:56:f3:3a:84:03:13:50:45: 31:ee:aa:9f:63:bb:4b:a8:59:f9:71:56:0b:64:0a: 0e:95:7c:18:0a:03:25:03:89:eb:89:c3:0b:1c:7f: 23:14:a3:3d:63:ab:42:ba:7e:7e:70:ac:d3:63:31: 32:12:4e:64:9e:cb:9d:76:c5:4c:54:d9:da:ab:b6: 8e:b2:81:1a:65:28:3b:70:8f:92:a8:35:39:5d:73: cb:64:46:6d:6e:a6:16:fe:4f:75:b5:f4:96:d3:e1: 6b:01:20:9f:fa:80:f6:00:c5:1f:e0:60:3c:79:b5: 61:93:a4:1b:9a:93:52:fe:d5:56:78:41:24:78:54: 5f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:34:7C:9D:AA:C8:8B:E8:A8:EE:E0:E5:70:C6:D3:CD:ED:F7:AC:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0653ead0-207d-3f29-8ead-34d6e7a68a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.227.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:92:26:c9:d8:52:9e:af:ee:c5:a8:6b:a3:46:cd:a0:e3:65: 0b:12:0d:56:93:e4:1c:fc:b3:3e:1b:6e:29:68:27:7b:eb:cd: b1:b6:08:76:45:56:63:8b:3d:3f:75:19:60:68:86:68:2d:e4: f7:0c:f9:21:2b:6e:f5:07:76:a8:54:e1:7a:af:ad:64:13:fd: ae:34:d9:43:b4:00:1d:03:dd:eb:33:3c:15:2d:1a:51:d2:22: c9:f0:ec:43:2c:e9:07:55:ba:30:85:39:52:56:39:59:5b:88: 8a:90:5e:66:00:8a:37:d8:b1:10:c0:b7:69:22:a9:95:dc:f3: 97:5b:85:02:ce:7a:61:d9:12:96:f5:a1:cc:06:63:8c:9e:23: 35:b1:b0:c6:55:44:0d:93:1f:c2:7d:5b:bd:25:45:56:d4:46: 7b:45:d5:93:e4:69:67:7c:ae:f1:f1:af:fa:07:77:a4:2f:22: ca:46:ec:0c:1c:35:da:25:16:41:d4:f3:3a:cb:c5:24:e1:7a: 0f:09:d3:df:d1:0e:b6:b2:24:3d:55:ff:e9:78:15:cd:2b:2c: c4:1e:10:18:d7:cd:76:cb:a4:c8:08:20:ca:23:98:67:cc:f1: 32:ed:10:89:1c:34:0f:95:25:36:5e:9f:32:4c:0c:20:40:82: 31:03:83:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMgo4wbs0Rg23oEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZTk1YjcwNTMtNThlMi00ZmQyLWI3ODQtZjBlM2MxZGVjZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSnVI+oLgIL609M+sUXh2SFNZ3En2ymB+dNa rDW90pKXVmsDWQl+nEjj2lyy0EESR+3cjkeom930JvqO9K1d5jiEXhDLd7fBCIwe A7GPEI0nc8HeTIEq23b9wFvtH8PvB56BNJeZ5hJLQnVqXBVqKNonDJ6l3HTLBh/2 4Ab7VvM6hAMTUEUx7qqfY7tLqFn5cVYLZAoOlXwYCgMlA4nricMLHH8jFKM9Y6tC un5+cKzTYzEyEk5knsuddsVMVNnaq7aOsoEaZSg7cI+SqDU5XXPLZEZtbqYW/k91 tfSW0+FrASCf+oD2AMUf4GA8ebVhk6QbmpNS/tVWeEEkeFRfgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY0fJ2qyIvoqO7g5XDG083t96z3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDY1M2VhZDAtMjA3ZC0z ZjI5LThlYWQtMzRkNmU3YTY4YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+N0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM2SJsnYUp6v7sWoa6NGzaDjZQsSDVaT5Bz8sz4bbiloJ3vrzbG2CHZF VmOLPT91GWBohmgt5PcM+SErbvUHdqhU4XqvrWQT/a402UO0AB0D3eszPBUtGlHS Isnw7EMs6QdVujCFOVJWOVlbiIqQXmYAijfYsRDAt2kiqZXc85dbhQLOemHZEpb1 ocwGY4yeIzWxsMZVRA2TH8J9W70lRVbURntF1ZPkaWd8rvHxr/oHd6QvIspG7Awc NdolFkHU8zrLxSTheg8J09/RDrayJD1V/+l4Fc0rLMQeEBjXzXbLpMgIIMojmGfM 8TLtEIkcNA+VJTZenzJMDCBAgjEDgyA= -----END CERTIFICATE-----Generated at Tue Jun 3 05:57:53 2025 by rpki-client