$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24f0fd53-9752-3b17-a585-e57f1e18c0c7.roa File: 24f0fd53-9752-3b17-a585-e57f1e18c0c7.roa (raw, json) Hash identifier: w2jIyWKKP4zFmwFVQ+NPaO0lM88UfTIEMxZFUzptelQ= Subject key identifier: 12:2C:1D:64:86:03:4A:02:B0:8B:33:A1:78:2D:9B:C2:AC:51:34:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C07FB7E22EA3FEEFA59C700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24f0fd53-9752-3b17-a585-e57f1e18c0c7.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 71.239.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:fb:7e:22:ea:3f:ee:fa:59:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=ea799332-4f2f-47a2-b701-8e39ac2149b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4f:89:39:b4:62:35:7a:07:3d:72:1e:43:a9: 52:9e:94:13:45:8b:11:11:7f:0f:2b:27:73:5b:a7: b0:dc:a8:6d:b6:f4:51:59:78:a0:e5:a7:b1:f6:77: 38:e8:7f:36:96:2b:49:41:51:6c:87:14:35:22:41: 71:11:08:84:d4:b3:66:6c:4d:0d:45:fd:40:49:cf: c7:6b:45:e2:02:eb:06:20:aa:34:47:8b:dc:95:54: fc:79:6b:ac:4a:43:8e:cf:5a:de:25:d3:e9:fc:2c: 66:e7:d2:79:ee:7d:b3:6e:51:8d:03:98:a2:1c:1e: bc:4b:b5:40:c7:5e:7d:76:1b:6a:29:e0:0a:13:f5: bf:69:e2:86:0b:e8:54:11:58:5b:0c:8b:80:83:eb: 6d:a6:a0:86:ee:53:6d:c3:f4:ab:c8:8e:4e:17:e4: 9e:88:27:a5:3b:d6:45:db:2e:da:9f:31:28:8c:96: 80:b0:44:81:8e:cf:de:7c:76:95:ff:91:31:1e:b3: 56:da:a9:a7:46:d2:49:35:96:dc:8b:5c:31:d7:e6: ad:ab:be:f1:cd:94:3f:7f:e3:ac:ad:87:5d:79:19: 9c:6e:5e:3f:28:27:4f:f0:29:6a:f8:b9:66:42:c0: c3:c1:ca:a8:e0:49:fd:13:a4:c0:5a:a6:3c:a4:57: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2C:1D:64:86:03:4A:02:B0:8B:33:A1:78:2D:9B:C2:AC:51:34:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24f0fd53-9752-3b17-a585-e57f1e18c0c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:f0:e4:db:85:0a:78:70:d8:9c:c2:89:d0:ac:58:32:62:10: 42:56:44:e0:8e:23:f2:fa:56:57:4b:0d:5d:48:c0:38:ff:cc: 06:c8:1f:f8:83:3c:45:0f:e7:56:40:05:bc:a3:13:c1:ca:1e: 91:0e:67:bd:ae:2e:12:9e:3b:ff:3d:fa:97:ef:a4:ae:94:70: 21:60:de:1d:6a:d0:3d:24:f0:ca:cd:7d:d6:3c:17:4b:4a:a4: 95:d1:3a:21:84:63:9f:86:c1:60:19:b9:a8:8b:73:24:9a:de: 92:8b:07:76:b5:9d:57:21:e6:f1:56:3c:60:44:e6:8d:d6:33: 2d:fd:cd:3a:45:b2:01:44:23:b8:a9:7f:ae:2f:dc:30:c4:f6: a7:b7:a0:54:c4:ff:ce:bc:52:f0:b2:93:5a:ba:ad:1d:bc:04: d0:09:ae:4f:c9:e9:54:15:1f:34:5b:34:d7:63:b5:a4:f2:52: 3e:e1:0f:78:d8:81:48:72:a8:b6:93:69:1b:9f:3d:88:3a:9b: 87:d3:b7:32:09:cb:8b:40:0f:91:51:4e:ef:58:46:c7:7e:6a: e8:b0:db:7f:d7:92:2f:82:41:a9:3f:d1:b1:64:2d:46:01:6f: 58:c6:1c:11:a5:d7:86:e1:70:34:a4:c4:87:0b:9c:af:17:21: 33:ba:f5:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB/t+Iuo/7vpZxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZWE3OTkzMzItNGYyZi00N2EyLWI3MDEtOGUzOWFjMjE0OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk+JObRiNXoHPXIeQ6lSnpQTRYsREX8PKydz W6ew3KhttvRRWXig5aex9nc46H82litJQVFshxQ1IkFxEQiE1LNmbE0NRf1ASc/H a0XiAusGIKo0R4vclVT8eWusSkOOz1reJdPp/Cxm59J57n2zblGNA5iiHB68S7VA x159dhtqKeAKE/W/aeKGC+hUEVhbDIuAg+ttpqCG7lNtw/SryI5OF+SeiCelO9ZF 2y7anzEojJaAsESBjs/efHaV/5ExHrNW2qmnRtJJNZbci1wx1+atq77xzZQ/f+Os rYddeRmcbl4/KCdP8Clq+LlmQsDDwcqo4En9E6TAWqY8pFeu1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIsHWSGA0oCsIszoXgtm8KsUTQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjRmMGZkNTMtOTc1Mi0z YjE3LWE1ODUtZTU3ZjFlMThjMGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrw5NuFCnhw2JzCidCsWDJiEEJWROCOI/L6VldLDV1IwDj/zAbIH/iD PEUP51ZABbyjE8HKHpEOZ72uLhKeO/89+pfvpK6UcCFg3h1q0D0k8MrNfdY8F0tK pJXROiGEY5+GwWAZuaiLcySa3pKLB3a1nVch5vFWPGBE5o3WMy39zTpFsgFEI7ip f64v3DDE9qe3oFTE/868UvCyk1q6rR28BNAJrk/J6VQVHzRbNNdjtaTyUj7hD3jY gUhyqLaTaRufPYg6m4fTtzIJy4tAD5FRTu9YRsd+auiw23/Xki+CQak/0bFkLUYB b1jGHBGl14bhcDSkxIcLnK8XITO69ZE= -----END CERTIFICATE-----Generated at Tue Jun 3 04:52:38 2025 by rpki-client