$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40be5689-9c5b-3742-b389-d1a425f36c3b.roa File: 40be5689-9c5b-3742-b389-d1a425f36c3b.roa (raw, json) Hash identifier: Ee6plweP+JJ3bJzdG0A+Lbr94s9VO9yovbtBZ7TBrwI= Subject key identifier: 2A:DC:F0:D0:03:C1:DD:0A:64:90:01:F9:93:96:2A:1F:4D:6E:FB:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4323885D1C3EFEDAFF57F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40be5689-9c5b-3742-b389-d1a425f36c3b.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 174.170.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:38:85:d1:c3:ef:ed:af:f5:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=30909093-45fd-4607-a048-c99c1a7d05ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:35:8c:75:d2:27:4b:3d:eb:29:e1:ad:c7:59: 62:67:1e:89:8d:e4:66:85:11:0f:9d:f6:79:41:3c: e2:ab:75:a0:b4:6e:8f:08:57:ef:1f:08:d9:4a:b6: fa:d6:f9:97:a9:71:87:f8:f0:63:82:04:f6:ec:cd: 43:70:d8:01:d6:b1:18:56:98:9f:8d:7d:4f:a9:df: 89:d2:9b:6f:db:e0:0e:f2:7c:29:16:c6:50:20:8f: a8:26:41:22:5d:ab:55:2b:c1:ee:c3:d2:a1:21:e4: ae:e1:1d:ad:c1:5b:ef:a7:d6:be:2e:2b:97:aa:ad: fe:fb:5e:86:6e:41:db:d7:75:42:e0:d5:95:ff:1d: 53:29:1e:c2:e5:92:a2:cf:3c:c4:06:e2:14:c0:b2: 18:91:19:aa:da:e4:3d:ca:c2:eb:3f:a1:8d:4a:7d: c3:c1:02:02:08:51:9f:06:dd:0d:1e:ed:30:f3:b0: 4a:85:c9:42:c3:51:73:b3:25:73:76:67:01:86:4c: 77:c8:06:7c:96:d9:d6:2d:61:8a:54:e1:de:53:94: ab:d6:2b:0f:d7:86:6b:0f:63:9e:5f:fa:83:5f:76: 50:0e:2c:40:0c:b6:a1:b3:eb:11:44:26:61:ac:9a: 11:ff:b1:a3:cf:b2:aa:77:b9:ba:a4:5a:e1:6e:2d: 72:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DC:F0:D0:03:C1:DD:0A:64:90:01:F9:93:96:2A:1F:4D:6E:FB:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40be5689-9c5b-3742-b389-d1a425f36c3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.170.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:ec:c1:95:52:70:33:87:b7:e0:c3:db:6b:b6:bd:66:e7:25: 77:05:d2:64:ba:2b:35:02:4c:45:7f:55:a9:50:4f:f2:32:39: 96:c7:3c:df:14:21:2f:f8:f4:f5:56:2b:e2:ee:82:b7:fc:4f: 24:dd:67:63:bf:7e:59:ea:68:e6:57:d6:56:0a:ca:90:d8:a0: 88:40:bb:cf:f6:ad:bd:96:a0:d7:a8:d8:2c:32:d2:00:82:77: a8:cf:40:6a:f1:78:b3:cb:6d:c8:fb:62:32:e5:19:6b:ed:7d: 10:20:8d:0a:d5:96:bb:80:fa:13:f8:bc:b0:7a:24:69:f9:41: cf:8a:09:b2:f1:62:3c:14:b3:ec:69:36:77:1c:64:dd:d7:1b: 6a:24:b5:b1:22:f0:22:62:e7:c3:18:a6:db:27:9a:6d:cb:18: 8c:0e:ca:47:c2:f7:12:fb:b7:72:ac:d9:a0:8a:dc:63:68:ec: 73:a6:77:8c:e0:a0:9a:02:c3:57:be:89:a8:44:23:04:19:21: f7:9f:cd:5b:bf:11:ea:1e:47:b8:17:9b:a9:7f:fd:6b:11:09: 80:58:6e:f8:13:d0:41:34:67:67:92:c4:0a:d1:22:50:9f:5b: 47:71:cb:a7:e8:d0:a7:ea:2b:29:70:57:d6:60:07:de:73:14: af:bf:13:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMjiF0cPv7a/1f4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MzA5MDkwOTMtNDVmZC00NjA3LWEwNDgtYzk5YzFhN2QwNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTWMddInSz3rKeGtx1liZx6JjeRmhREPnfZ5 QTziq3WgtG6PCFfvHwjZSrb61vmXqXGH+PBjggT27M1DcNgB1rEYVpifjX1Pqd+J 0ptv2+AO8nwpFsZQII+oJkEiXatVK8Huw9KhIeSu4R2twVvvp9a+LiuXqq3++16G bkHb13VC4NWV/x1TKR7C5ZKizzzEBuIUwLIYkRmq2uQ9ysLrP6GNSn3DwQICCFGf Bt0NHu0w87BKhclCw1FzsyVzdmcBhkx3yAZ8ltnWLWGKVOHeU5Sr1isP14ZrD2Oe X/qDX3ZQDixADLahs+sRRCZhrJoR/7Gjz7Kqd7m6pFrhbi1yzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrc8NADwd0KZJAB+ZOWKh9NbvuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBiZTU2ODktOWM1Yi0z NzQyLWIzODktZDFhNDI1ZjM2YzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLswZVScDOHt+DD22u2vWbnJXcF0mS6KzUCTEV/ValQT/IyOZbHPN8U IS/49PVWK+Lugrf8TyTdZ2O/flnqaOZX1lYKypDYoIhAu8/2rb2WoNeo2Cwy0gCC d6jPQGrxeLPLbcj7YjLlGWvtfRAgjQrVlruA+hP4vLB6JGn5Qc+KCbLxYjwUs+xp NnccZN3XG2oktbEi8CJi58MYptsnmm3LGIwOykfC9xL7t3Ks2aCK3GNo7HOmd4zg oJoCw1e+iahEIwQZIfefzVu/EeoeR7gXm6l//WsRCYBYbvgT0EE0Z2eSxArRIlCf W0dxy6fo0KfqKylwV9ZgB95zFK+/E0g= -----END CERTIFICATE-----Generated at Tue Jun 3 06:29:53 2025 by rpki-client