$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23e7fbb7-43a6-3d58-90df-5a5b4a17c4c4.roa File: 23e7fbb7-43a6-3d58-90df-5a5b4a17c4c4.roa (raw, json) Hash identifier: m2gkszkjm3h20t7W3BWyCzI+64ttv+JVbMlY9n2jiqk= Subject key identifier: 60:ED:82:AF:24:C2:6C:7C:B6:D1:0D:E7:32:85:8E:0B:99:CB:6B:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF757936DA89CEE4F40AB2A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23e7fbb7-43a6-3d58-90df-5a5b4a17c4c4.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 33287 IP address blocks: 71.225.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:79:36:da:89:ce:e4:f4:0a:b2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=8a2dc573-7ae0-4fe9-aed0-7e6b778457bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:8d:80:2c:27:b9:36:4c:87:91:e6:73:d8: 71:d0:db:92:ba:a6:20:71:a0:ac:bf:fe:f6:ea:49: e5:c6:60:60:4d:e5:c9:e4:de:e3:85:99:96:3c:98: e9:b4:5d:5d:a3:40:0f:ac:c3:7a:c8:f3:8e:f9:e8: 97:6e:bb:e6:1f:1b:31:44:43:85:2f:35:b4:32:9c: 78:54:32:28:40:e2:11:d4:d8:99:e2:7b:58:88:d8: 5c:3f:19:62:98:44:02:62:ae:a4:c2:ad:c8:2d:59: e4:66:78:87:fc:0c:a3:29:11:76:f0:aa:d4:69:2d: 44:8b:67:12:5e:21:a4:77:35:86:6c:1e:f7:1f:6e: 38:ae:25:e4:50:b1:9c:e8:80:4a:47:35:0e:cf:95: 5b:64:87:26:89:9b:92:be:82:98:5b:e8:05:68:fd: 98:0d:a7:6d:1d:01:c7:6c:41:bd:f4:c2:18:08:8f: bd:54:84:48:05:82:40:7b:c7:2c:c5:94:da:aa:c4: 9b:d0:b7:65:fe:87:d6:c0:71:86:54:49:5a:ce:af: 43:82:86:de:cb:74:3e:28:e4:5b:e9:68:d0:e5:d0: a4:72:92:c5:3d:29:91:25:d9:9d:bb:d6:b6:6b:78: f6:a4:a6:4c:5c:9f:a5:b9:08:ee:66:96:1a:2f:08: c1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:ED:82:AF:24:C2:6C:7C:B6:D1:0D:E7:32:85:8E:0B:99:CB:6B:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23e7fbb7-43a6-3d58-90df-5a5b4a17c4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:9e:d6:4b:9b:4a:8e:d0:69:a7:f3:f2:1c:15:14:74:ad:50: c7:51:0c:e0:6b:7e:71:b7:d3:27:26:d2:76:84:1d:04:fb:e4: ed:d3:9c:46:85:11:60:dc:70:52:9b:ef:cd:55:0a:f4:61:60: 24:cc:7b:33:bb:bf:4d:3c:97:65:70:1e:9a:7b:95:40:8d:dd: af:47:a5:13:eb:c8:49:d7:2a:8b:9e:43:81:67:4b:78:00:be: 7e:7e:4e:87:63:09:57:d0:af:62:d9:0b:3c:db:4c:fa:a7:21: 8c:ae:5c:b4:56:2f:4e:00:50:70:d2:9c:6b:0a:34:cc:eb:44: 06:6a:2e:ff:38:61:9a:60:51:0c:56:37:88:79:70:ae:ad:31: 54:1d:45:51:9a:b2:fd:2e:a6:5f:51:0e:91:b2:b7:ff:a1:7a: 31:f4:50:a8:2e:7d:29:a4:60:6d:c4:58:a9:3b:90:37:59:b2: 41:b1:79:5a:f4:01:5b:c5:ed:d7:75:95:9e:31:f5:9c:d5:81: e8:a1:83:a1:05:22:7b:e3:19:35:bd:c5:dc:1c:16:73:cd:9b: db:c2:e8:bd:6d:01:ae:07:dc:1c:4e:05:fa:f1:0f:ee:7b:8a: c1:13:20:88:3c:ba:02:ff:d6:94:14:fa:d6:4b:de:35:7b:a5: 44:8c:5a:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dXk22onO5PQKsqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk OGEyZGM1NzMtN2FlMC00ZmU5LWFlZDAtN2U2Yjc3ODQ1N2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKaNgCwnuTZMh5Hmc9hx0NuSuqYgcaCsv/72 6knlxmBgTeXJ5N7jhZmWPJjptF1do0APrMN6yPOO+eiXbrvmHxsxREOFLzW0Mpx4 VDIoQOIR1NiZ4ntYiNhcPxlimEQCYq6kwq3ILVnkZniH/AyjKRF28KrUaS1Ei2cS XiGkdzWGbB73H244riXkULGc6IBKRzUOz5VbZIcmiZuSvoKYW+gFaP2YDadtHQHH bEG99MIYCI+9VIRIBYJAe8csxZTaqsSb0Ldl/ofWwHGGVElazq9Dgobey3Q+KORb 6WjQ5dCkcpLFPSmRJdmdu9a2a3j2pKZMXJ+luQjuZpYaLwjBqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDtgq8kwmx8ttEN5zKFjguZy2uRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjNlN2ZiYjctNDNhNi0z ZDU4LTkwZGYtNWE1YjRhMTdjNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2e1kubSo7Qaafz8hwVFHStUMdRDOBrfnG30ycm0naEHQT75O3TnEaF EWDccFKb781VCvRhYCTMezO7v008l2VwHpp7lUCN3a9HpRPryEnXKoueQ4FnS3gA vn5+TodjCVfQr2LZCzzbTPqnIYyuXLRWL04AUHDSnGsKNMzrRAZqLv84YZpgUQxW N4h5cK6tMVQdRVGasv0upl9RDpGyt/+hejH0UKgufSmkYG3EWKk7kDdZskGxeVr0 AVvF7dd1lZ4x9ZzVgeihg6EFInvjGTW9xdwcFnPNm9vC6L1tAa4H3BxOBfrxD+57 isETIIg8ugL/1pQU+tZL3jV7pUSMWqc= -----END CERTIFICATE-----Generated at Tue Jun 3 05:02:03 2025 by rpki-client