$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32d2a9fc-64b4-3e78-b692-1b8b80f45694.roa File: 32d2a9fc-64b4-3e78-b692-1b8b80f45694.roa (raw, json) Hash identifier: WnReWHZPJqT0DLJlqcNdzZ3Q0o/CfzNIVGvUgXh4ToI= Subject key identifier: 41:BA:2B:9D:D4:4A:DD:7D:6B:45:B9:D7:45:B1:2F:20:46:1C:7A:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06E005C266D44A06FF76C8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32d2a9fc-64b4-3e78-b692-1b8b80f45694.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 71.204.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:e0:05:c2:66:d4:4a:06:ff:76:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=4a855f6f-1cb1-464c-abfc-cac119ecd470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:86:55:8b:6a:73:0a:f7:52:90:c3:7b:e4:cc: dc:7a:09:d6:47:30:d6:8d:63:3e:bc:99:1b:f3:ed: 3c:a1:32:b1:02:b1:45:66:59:96:b7:1a:fd:eb:0a: 22:52:b3:18:3b:55:30:cc:ef:35:dd:2f:88:e2:a0: 24:f4:b6:5c:26:61:8d:3e:de:95:f9:d7:51:7d:df: 72:85:92:2f:30:56:19:d4:13:0e:11:c6:27:f9:f1: 6f:71:5c:49:17:34:80:af:2b:1b:31:cc:d8:6d:2c: 87:b6:a5:9f:ca:e9:78:a3:33:9a:e8:c2:34:fc:e0: 59:bc:cc:c9:91:30:ca:89:ed:f3:a1:47:69:57:f2: aa:2f:c4:df:73:b2:84:29:71:16:7d:be:10:64:6c: 72:0f:7d:90:76:9a:45:1e:1f:45:d7:0e:04:60:72: 2a:24:59:26:e7:c6:c9:91:66:43:16:98:cb:d4:ba: e7:25:17:fd:e1:c0:d7:ca:36:13:3b:b1:4a:37:5f: 07:da:ac:4c:97:ed:40:97:bf:97:e1:ed:e2:55:70: d8:3a:c8:e3:77:50:e3:e0:3f:a2:40:57:75:43:95: 12:96:91:35:90:4b:f8:99:20:c5:79:ee:d0:cc:e1: 78:5b:c2:23:74:bd:66:01:8b:ba:8b:3f:41:46:5f: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BA:2B:9D:D4:4A:DD:7D:6B:45:B9:D7:45:B1:2F:20:46:1C:7A:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32d2a9fc-64b4-3e78-b692-1b8b80f45694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:23:a1:63:fb:d2:10:96:f4:33:d3:0c:70:2d:55:1e:60:8b: 11:ff:94:4c:98:aa:d9:da:46:85:b1:32:1b:b9:33:8a:dc:ae: 46:41:2f:27:b7:7d:c7:e8:0f:14:97:00:a1:2f:25:8e:85:b7: 1f:e6:25:d7:85:7a:f9:b4:32:42:93:ab:8b:44:c1:52:26:ae: f8:49:7b:08:2d:f1:21:05:1a:ef:0e:7e:10:27:31:ba:54:05: 57:ae:bc:bb:27:79:3e:de:a5:75:76:3e:3a:8e:35:4d:5a:9b: e8:5e:e0:d8:a0:22:4d:8a:d5:18:c6:3f:bd:72:3a:f1:28:3a: f4:3b:3f:41:cc:fa:5d:07:71:7e:e3:b4:b0:a1:27:52:c5:d2: d2:12:79:47:02:7f:34:8c:39:ad:74:11:27:26:98:1c:b2:64: 66:42:ba:38:1a:53:c7:bf:64:ce:1f:50:27:88:65:e8:7f:ec: c5:b3:96:03:4d:0f:a1:d7:c1:f3:e6:55:df:dd:2f:02:78:82: 23:5c:b7:28:93:e9:a4:b8:d1:c6:da:4b:b3:a4:8f:ae:00:53: 5e:2f:34:53:8d:86:49:40:89:cf:1a:c1:26:82:ce:7a:f7:8a: 39:65:03:ac:1f:f4:26:30:d9:9a:42:e9:c0:ef:90:04:95:95: 21:eb:40:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBuAFwmbUSgb/dsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NGE4NTVmNmYtMWNiMS00NjRjLWFiZmMtY2FjMTE5ZWNkNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIZVi2pzCvdSkMN75MzcegnWRzDWjWM+vJkb 8+08oTKxArFFZlmWtxr96woiUrMYO1UwzO813S+I4qAk9LZcJmGNPt6V+ddRfd9y hZIvMFYZ1BMOEcYn+fFvcVxJFzSArysbMczYbSyHtqWfyul4ozOa6MI0/OBZvMzJ kTDKie3zoUdpV/KqL8Tfc7KEKXEWfb4QZGxyD32QdppFHh9F1w4EYHIqJFkm58bJ kWZDFpjL1LrnJRf94cDXyjYTO7FKN18H2qxMl+1Al7+X4e3iVXDYOsjjd1Dj4D+i QFd1Q5USlpE1kEv4mSDFee7QzOF4W8IjdL1mAYu6iz9BRl9ZpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEG6K53USt19a0W510WxLyBGHHrhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzJkMmE5ZmMtNjRiNC0z ZTc4LWI2OTItMWI4YjgwZjQ1Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8ywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMjoWP70hCW9DPTDHAtVR5gixH/lEyYqtnaRoWxMhu5M4rcrkZBLye3 fcfoDxSXAKEvJY6Ftx/mJdeFevm0MkKTq4tEwVImrvhJewgt8SEFGu8OfhAnMbpU BVeuvLsneT7epXV2PjqONU1am+he4NigIk2K1RjGP71yOvEoOvQ7P0HM+l0HcX7j tLChJ1LF0tISeUcCfzSMOa10EScmmByyZGZCujgaU8e/ZM4fUCeIZeh/7MWzlgNN D6HXwfPmVd/dLwJ4giNctyiT6aS40cbaS7Okj64AU14vNFONhklAic8awSaCznr3 ijllA6wf9CYw2ZpC6cDvkASVlSHrQJI= -----END CERTIFICATE-----Generated at Tue Jun 3 05:05:01 2025 by rpki-client