$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40d61ff4-6a9a-35e2-a017-bf7ea2bc2e2e.roa File: 40d61ff4-6a9a-35e2-a017-bf7ea2bc2e2e.roa (raw, json) Hash identifier: aBaC1T0uU8WU4bxoJoLIJPtv2Uo35+kA6fZoQqQuq2A= Subject key identifier: CC:B6:18:3C:F4:FE:74:DD:91:76:3D:DB:7E:69:ED:A3:3A:D1:4A:8C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C087C2D9FC800240F1DE140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40d61ff4-6a9a-35e2-a017-bf7ea2bc2e2e.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 24.6.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:7c:2d:9f:c8:00:24:0f:1d:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=c4828058-2dee-43f1-955e-88166485a03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:69:15:fb:16:ec:16:2d:cf:20:7d:7e:eb:e6: e0:97:de:2d:34:e5:1a:83:59:80:b0:ce:4d:da:99: d0:d5:4a:61:21:55:e2:ee:f2:4c:ab:57:aa:97:1a: 4f:1a:40:47:9f:cf:53:e0:d8:14:fe:01:98:fc:44: 2d:30:d3:b7:d6:5d:8f:45:04:98:9f:f1:97:d5:dd: 8a:19:b9:82:e4:52:42:9f:14:26:3e:26:ca:15:47: 12:27:62:6b:8a:b2:3d:cc:cd:7f:ee:e2:07:9d:9c: 78:cb:82:02:5a:f6:36:5e:10:1c:4f:28:81:0a:59: d8:c6:a4:e0:88:d6:9e:89:8d:7b:fc:c9:ab:18:87: 4e:35:c2:ef:5f:d5:43:4f:01:d9:7a:24:4a:80:61: b2:f4:f2:ca:53:d9:9f:9e:56:99:aa:9b:52:f0:a7: e0:76:e6:8e:a6:32:60:0a:e3:35:94:80:e5:aa:c7: 93:a1:14:23:ab:cc:fc:b8:ec:b9:7c:07:d8:88:07: f5:7d:24:e0:9f:87:30:4c:99:99:73:72:ba:d5:1c: 1b:3e:f2:1c:81:47:37:54:67:f0:82:48:44:9f:1a: d4:d9:98:84:bd:3a:a0:77:fa:0c:88:33:77:74:be: 86:57:a3:20:a9:d6:49:2a:87:37:e4:e4:d3:63:03: 4b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B6:18:3C:F4:FE:74:DD:91:76:3D:DB:7E:69:ED:A3:3A:D1:4A:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40d61ff4-6a9a-35e2-a017-bf7ea2bc2e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.6.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ab:f2:56:fa:c4:01:e8:cf:c6:b0:21:60:0a:2f:2c:66:84: 03:1a:da:8e:63:a3:2e:06:32:f3:68:2b:7e:63:56:be:6b:26: 7d:2c:f3:65:18:ee:3d:51:1e:6e:c0:8a:e3:47:89:30:27:bd: aa:bf:77:66:19:8d:4e:e9:5e:63:58:c1:55:93:86:59:6a:e9: 83:d5:55:fe:3e:18:8c:08:52:0f:bf:d8:e6:25:1a:8d:ca:a3: cb:d7:f3:8b:21:84:70:d1:9c:f3:35:6d:71:cc:56:c8:73:bb: 3c:f8:74:21:86:4a:34:39:eb:bd:11:dc:d4:db:c0:07:89:37: 6d:98:a0:0a:73:72:32:b5:28:5c:df:30:28:6d:54:8a:8a:e3: d3:30:cc:bb:2b:75:2f:92:1f:74:2c:56:80:c7:43:ef:5d:c9: eb:6c:60:6a:2c:d1:c5:58:e7:39:c9:3a:a8:6f:46:5f:f5:ee: b8:9d:ec:d3:93:d6:9b:87:c6:16:2b:b5:a5:98:17:81:41:6b: d2:38:56:57:9d:a3:7b:07:24:89:3a:ed:50:81:d0:65:c9:8a: 0e:2a:df:ac:b0:35:70:0c:c8:6b:1d:44:08:66:b9:c3:80:12: 20:22:f4:eb:1c:42:d3:b8:e5:79:cb:ac:25:5c:13:fe:99:d7: e1:4b:a1:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCHwtn8gAJA8d4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YzQ4MjgwNTgtMmRlZS00M2YxLTk1NWUtODgxNjY0ODVhMDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGkV+xbsFi3PIH1+6+bgl94tNOUag1mAsM5N 2pnQ1UphIVXi7vJMq1eqlxpPGkBHn89T4NgU/gGY/EQtMNO31l2PRQSYn/GX1d2K GbmC5FJCnxQmPibKFUcSJ2JrirI9zM1/7uIHnZx4y4ICWvY2XhAcTyiBClnYxqTg iNaeiY17/MmrGIdONcLvX9VDTwHZeiRKgGGy9PLKU9mfnlaZqptS8KfgduaOpjJg CuM1lIDlqseToRQjq8z8uOy5fAfYiAf1fSTgn4cwTJmZc3K61RwbPvIcgUc3VGfw gkhEnxrU2ZiEvTqgd/oMiDN3dL6GV6MgqdZJKoc35OTTYwNLDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMy2GDz0/nTdkXY9235p7aM60UqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBkNjFmZjQtNmE5YS0z NWUyLWEwMTctYmY3ZWEyYmMyZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGAYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2r8lb6xAHoz8awIWAKLyxmhAMa2o5joy4GMvNoK35jVr5rJn0s82UY 7j1RHm7AiuNHiTAnvaq/d2YZjU7pXmNYwVWThllq6YPVVf4+GIwIUg+/2OYlGo3K o8vX84shhHDRnPM1bXHMVshzuzz4dCGGSjQ5670R3NTbwAeJN22YoApzcjK1KFzf MChtVIqK49MwzLsrdS+SH3QsVoDHQ+9dyetsYGos0cVY5znJOqhvRl/17rid7NOT 1puHxhYrtaWYF4FBa9I4Vledo3sHJIk67VCB0GXJig4q36ywNXAMyGsdRAhmucOA EiAi9OscQtO45XnLrCVcE/6Z1+FLoXY= -----END CERTIFICATE-----Generated at Tue Jun 3 04:49:12 2025 by rpki-client