$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33c6594d-e0c3-3f3f-8b8b-4a56145e97e6.roa File: 33c6594d-e0c3-3f3f-8b8b-4a56145e97e6.roa (raw, json) Hash identifier: TPcOW1GTUQY7DOBmiT4Lt1tV0vLAHJDppbMvcBRqXfw= Subject key identifier: D0:0B:30:8E:F6:E4:18:50:0F:B4:02:C7:F2:5A:05:96:E0:8A:EB:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FCAF024239F6EED0E11A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33c6594d-e0c3-3f3f-8b8b-4a56145e97e6.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 71.237.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:ca:f0:24:23:9f:6e:ed:0e:11:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=bc297c59-d0d4-4fd1-b0d5-74c3daa54768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:36:99:71:5d:b2:82:5a:e1:94:94:c1:ec:0e: 41:d9:f6:80:22:cc:ee:3d:5c:79:13:ef:fa:3e:0e: 5d:dd:b3:0b:29:80:92:2d:3c:25:85:a4:ec:9a:d2: 4f:b9:1a:bb:30:b2:32:50:81:a6:bb:ff:d6:69:49: 20:f6:ee:b2:d2:b9:0e:5e:fa:f3:7e:fd:61:94:29: cb:33:6a:70:f7:74:9b:2a:fd:25:19:ee:ab:c7:7f: 8f:3b:3f:52:54:a9:bf:f5:1f:64:d9:37:42:84:a8: 5a:68:11:5e:ce:00:1b:a4:45:b0:1f:38:6f:aa:20: ff:6e:eb:4a:be:58:09:9e:06:cf:92:fa:05:f9:59: 05:a2:7e:72:6c:16:bb:89:cd:2a:30:2f:ae:7b:0c: f6:e6:61:70:82:d0:1e:15:59:55:34:0e:10:7e:ec: 74:3b:3d:84:a1:4b:76:ad:48:a4:5e:98:d7:11:21: 9e:dd:cf:70:91:92:15:6a:15:35:8d:24:27:34:eb: b3:90:61:25:2b:ea:c0:ee:f1:e6:ea:a1:7a:82:ba: b8:ef:53:a9:a6:17:14:90:20:04:bb:fc:41:1e:84: 62:40:2b:e2:75:73:1c:f8:4b:fc:55:91:54:13:95: 67:cf:1f:48:93:82:2f:12:94:5b:93:b8:85:28:64: 36:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0B:30:8E:F6:E4:18:50:0F:B4:02:C7:F2:5A:05:96:E0:8A:EB:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33c6594d-e0c3-3f3f-8b8b-4a56145e97e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.237.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:7b:19:5f:e3:c4:eb:50:ed:44:c1:bf:75:84:80:f1:d5:73: 84:4f:cd:67:d5:fa:f7:fa:f6:ca:e3:5a:d3:d2:8e:ea:33:e5: 34:dd:07:7d:63:c0:2a:71:cf:d3:de:8e:b5:ee:9c:ff:35:f7: 10:82:fb:76:95:ab:47:d7:c3:55:e6:b3:f0:86:d8:cd:65:53: 59:53:bd:9e:ee:3c:73:fa:85:6f:9c:ea:c5:d4:2c:a7:9c:2f: 80:75:78:80:69:cc:92:79:c9:36:d0:60:cf:3f:db:d4:f0:bb: 93:5a:9d:89:65:9f:3d:02:73:c4:e3:78:45:2c:25:7a:89:0b: e8:22:e9:54:93:cc:88:71:be:fc:08:3a:66:e7:8a:12:e7:52: e5:b8:5b:1e:82:d0:d5:b7:e6:d6:20:88:af:a9:9c:32:45:ae: 67:48:da:c7:1b:21:1b:63:d9:ee:dc:9e:aa:61:f0:85:90:7a: d8:12:cc:62:83:dd:08:de:71:3c:37:87:6b:40:c9:36:c7:d3: ca:dd:25:a9:0e:b1:ba:0d:2d:7e:64:90:45:de:01:17:b7:94: dd:99:b8:71:70:a7:12:b8:04:a4:97:f0:ca:6a:2b:a4:47:a6: aa:ae:e3:3c:5f:12:21:74:65:7a:f7:c2:c7:77:d8:05:63:f3: e3:96:85:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL8rwJCOfbu0OEaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YmMyOTdjNTktZDBkNC00ZmQxLWIwZDUtNzRjM2RhYTU0NzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljaZcV2yglrhlJTB7A5B2faAIszuPVx5E+/6 Pg5d3bMLKYCSLTwlhaTsmtJPuRq7MLIyUIGmu//WaUkg9u6y0rkOXvrzfv1hlCnL M2pw93SbKv0lGe6rx3+POz9SVKm/9R9k2TdChKhaaBFezgAbpEWwHzhvqiD/butK vlgJngbPkvoF+VkFon5ybBa7ic0qMC+uewz25mFwgtAeFVlVNA4Qfux0Oz2EoUt2 rUikXpjXESGe3c9wkZIVahU1jSQnNOuzkGElK+rA7vHm6qF6grq471OpphcUkCAE u/xBHoRiQCvidXMc+Ev8VZFUE5Vnzx9Ik4IvEpRbk7iFKGQ2wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNALMI725BhQD7QCx/JaBZbgiuvNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzNjNjU5NGQtZTBjMy0z ZjNmLThiOGItNGE1NjE0NWU5N2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK97GV/jxOtQ7UTBv3WEgPHVc4RPzWfV+vf69srjWtPSjuoz5TTdB31j wCpxz9PejrXunP819xCC+3aVq0fXw1Xms/CG2M1lU1lTvZ7uPHP6hW+c6sXULKec L4B1eIBpzJJ5yTbQYM8/29Twu5NanYllnz0Cc8TjeEUsJXqJC+gi6VSTzIhxvvwI OmbnihLnUuW4Wx6C0NW35tYgiK+pnDJFrmdI2scbIRtj2e7cnqph8IWQetgSzGKD 3QjecTw3h2tAyTbH08rdJakOsboNLX5kkEXeARe3lN2ZuHFwpxK4BKSX8MpqK6RH pqqu4zxfEiF0ZXr3wsd32AVj8+OWhRU= -----END CERTIFICATE-----Generated at Wed Jun 4 22:59:34 2025 by rpki-client