$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e490375-62e1-3d38-9e52-ffddd546fae2.roa File: 3e490375-62e1-3d38-9e52-ffddd546fae2.roa (raw, json) Hash identifier: c+nJ6ZGO+QVTUvNnuysKd/IVgQMPDZjGIRToFd6Z21Q= Subject key identifier: 8B:FC:17:99:94:E6:D3:31:26:22:9D:C8:0F:AF:F9:EE:F4:D5:59:57 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C088B67E10F1071F8B03BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e490375-62e1-3d38-9e52-ffddd546fae2.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 71.204.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:8b:67:e1:0f:10:71:f8:b0:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=8f5b9287-a1aa-49bb-87c6-c334c6e0ef18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:43:c3:fb:e1:f9:71:09:ed:09:3f:e7:fa:f3: 4b:ad:ae:bf:5b:02:dc:1d:e1:56:04:93:c0:23:4c: 72:16:81:9e:52:9b:33:3e:65:e3:2a:d2:6e:8f:e2: fa:bf:f9:04:40:80:d9:5e:49:81:7e:e0:28:d8:78: d3:bd:fa:e2:7a:6c:f1:47:d7:6f:d2:00:7d:2d:29: d1:41:55:51:a8:f8:6e:06:bd:28:bc:0f:7d:62:a7: 50:c0:6a:db:75:f8:72:4b:75:be:c0:da:aa:21:0d: 79:ec:21:0d:27:e6:e8:52:62:20:f4:4a:d9:c3:8f: ed:51:74:69:dd:6c:80:3a:ba:b7:4e:71:1a:91:29: af:00:b2:79:bf:d4:81:89:81:9a:57:53:d4:c8:9f: 69:02:a3:48:ca:bb:a6:44:46:f7:ec:84:a3:d8:ee: 02:5d:ec:54:d0:13:73:7d:08:4e:69:4a:9a:82:9a: 43:3e:5e:ab:ea:83:68:44:f3:8c:30:42:fa:fa:44: f0:6d:16:6e:63:80:49:5e:a1:41:5f:45:dd:f6:c3: 9b:23:38:4a:c6:9c:8f:08:24:ad:cb:5d:38:8f:3b: 08:a4:4a:a6:fe:5b:e0:09:ba:4f:42:38:63:e5:4f: 46:e6:78:b0:7e:c2:8a:4f:7e:36:2d:a0:4c:3f:6d: b6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FC:17:99:94:E6:D3:31:26:22:9D:C8:0F:AF:F9:EE:F4:D5:59:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e490375-62e1-3d38-9e52-ffddd546fae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.204.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:68:6e:17:23:45:d8:03:59:03:cb:69:35:69:a2:92:17:02: 1c:a9:b9:ef:e2:b5:ad:2d:9b:ca:55:40:d8:81:fe:bc:95:93: fa:7d:ae:7b:b8:ce:56:6e:18:18:fc:f2:aa:d1:47:07:6c:97: 7e:c9:82:04:4b:75:7c:dd:2f:9e:b3:2c:15:86:71:17:ca:38: d9:2b:7a:a6:ae:41:84:a0:37:e8:c2:24:ca:71:0d:6b:72:de: 62:27:df:d1:26:28:08:ee:5f:10:26:9c:6f:39:bd:d7:90:0e: 7d:89:cf:ad:0c:2c:f3:3a:1e:5e:6e:a0:be:a9:e0:0d:87:3c: 2d:ff:a1:9c:6b:04:1b:0f:5d:6b:bf:77:0b:3f:1c:f9:f5:60: 50:85:0c:67:1a:f8:75:a5:e0:71:61:dd:f7:fa:6e:bc:2e:7b: c9:c2:4c:cf:f7:3a:12:f8:47:84:b1:01:48:7b:7f:95:f1:61: 9d:8b:7e:c5:51:30:b3:92:5c:37:3d:14:51:c9:6f:40:66:f1: 27:15:3b:56:9f:86:56:86:a4:7d:09:67:b1:c5:96:5b:51:e4: f2:f2:b5:d0:14:fa:a3:d5:52:af:06:70:27:91:79:f2:72:71: 36:ef:f7:8e:da:e2:1a:0d:82:cc:ab:1f:d0:8a:51:fa:23:c1: 8c:e8:8d:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCItn4Q8QcfiwO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OGY1YjkyODctYTFhYS00OWJiLTg3YzYtYzMzNGM2ZTBlZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0PD++H5cQntCT/n+vNLra6/WwLcHeFWBJPA I0xyFoGeUpszPmXjKtJuj+L6v/kEQIDZXkmBfuAo2HjTvfriemzxR9dv0gB9LSnR QVVRqPhuBr0ovA99YqdQwGrbdfhyS3W+wNqqIQ157CENJ+boUmIg9ErZw4/tUXRp 3WyAOrq3TnEakSmvALJ5v9SBiYGaV1PUyJ9pAqNIyrumREb37ISj2O4CXexU0BNz fQhOaUqagppDPl6r6oNoRPOMMEL6+kTwbRZuY4BJXqFBX0Xd9sObIzhKxpyPCCSt y104jzsIpEqm/lvgCbpPQjhj5U9G5niwfsKKT342LaBMP222FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIv8F5mU5tMxJiKdyA+v+e701VlXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2U0OTAzNzUtNjJlMS0z ZDM4LTllNTItZmZkZGQ1NDZmYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8y4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxobhcjRdgDWQPLaTVpopIXAhypue/ita0tm8pVQNiB/ryVk/p9rnu4 zlZuGBj88qrRRwdsl37JggRLdXzdL56zLBWGcRfKONkreqauQYSgN+jCJMpxDWty 3mIn39EmKAjuXxAmnG85vdeQDn2Jz60MLPM6Hl5uoL6p4A2HPC3/oZxrBBsPXWu/ dws/HPn1YFCFDGca+HWl4HFh3ff6brwue8nCTM/3OhL4R4SxAUh7f5XxYZ2LfsVR MLOSXDc9FFHJb0Bm8ScVO1afhlaGpH0JZ7HFlltR5PLytdAU+qPVUq8GcCeRefJy cTbv947a4hoNgsyrH9CKUfojwYzojTk= -----END CERTIFICATE-----Generated at Tue Jun 3 06:15:05 2025 by rpki-client