$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e095d4-2dc6-3a37-925a-3784f36a3b0e.roa File: 40e095d4-2dc6-3a37-925a-3784f36a3b0e.roa (raw, json) Hash identifier: 9NVU1Bre3gb4sxDOrCVylOBUXShSLEZWJcyVeDmEYGA= Subject key identifier: EF:F3:B7:BE:D2:32:6F:3C:74:F7:66:A4:F6:13:98:87:A2:89:A4:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C07FB0658FFF11A0623DF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e095d4-2dc6-3a37-925a-3784f36a3b0e.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 71.239.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:fb:06:58:ff:f1:1a:06:23:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=1943fda1-cfe5-4ccb-8cb0-d5c48041d223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:42:ec:e9:ce:f4:6e:95:36:b3:ca:01:53:f2: 1f:c1:ce:72:07:b2:7f:48:2e:2a:ca:a8:6d:11:47: 68:71:1f:33:95:bd:67:05:ec:ad:55:39:16:b8:60: d3:e6:b3:75:76:4a:c5:18:52:6c:dc:92:37:e5:17: f2:b5:72:5d:c3:db:2a:db:b8:2e:a1:a6:b8:ed:a8: 78:d7:5b:a5:b2:96:36:cd:a3:b3:69:45:fc:5e:69: 91:bf:af:17:67:3d:9c:43:48:2f:6c:39:8d:85:a5: cd:bf:c2:13:bb:26:27:5a:73:2e:07:37:83:42:77: 7c:ac:22:58:d0:76:1b:b6:79:63:0f:5b:78:b9:d5: 6f:f4:c3:28:97:70:99:9c:fd:11:67:ff:ac:56:d3: c2:ba:82:1b:82:5e:78:1f:05:99:1c:e8:cc:34:7c: 37:ce:9f:c4:d0:ee:51:5c:cc:23:e0:cd:20:a1:b4: 18:2e:1b:e6:01:26:cd:25:d9:1e:94:bf:e1:e0:36: 22:c8:5d:fb:eb:d5:b9:97:f5:c2:5b:04:54:4b:25: 30:c1:5e:6a:33:74:1a:1c:a5:f8:4b:1b:8c:27:fe: bb:f0:78:7b:02:68:32:15:47:9d:ae:1e:ba:f3:36: 7d:1a:60:52:4a:44:00:77:f3:d3:80:fa:40:d8:62: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F3:B7:BE:D2:32:6F:3C:74:F7:66:A4:F6:13:98:87:A2:89:A4:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40e095d4-2dc6-3a37-925a-3784f36a3b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.239.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:62:c3:fb:b7:79:3e:0f:66:c6:f8:52:0f:cc:57:1c:27:c6: 2a:89:38:68:b3:34:b7:5d:3e:97:03:9b:11:c8:06:44:3b:fc: df:ef:c1:e7:ee:43:57:17:f3:62:9a:fa:8f:73:63:49:a8:04: ea:de:81:a9:03:00:ce:a5:bf:2f:d9:ed:d6:51:d1:0e:8e:2e: 0d:75:ef:05:1d:cd:04:1b:fd:ae:e8:14:cf:2c:4d:3b:82:8c: 48:03:35:18:dd:49:02:67:d2:80:cb:3a:34:c4:8d:24:97:67: a8:b7:8b:50:d0:51:e5:1e:25:a4:c4:a3:2f:43:69:62:fb:df: 3a:b9:eb:10:26:8a:4e:da:19:29:2c:ad:65:25:0b:8c:83:3f: 2d:d3:97:c2:17:b9:68:70:24:24:11:a6:d8:bd:32:a5:14:63: 9d:34:9d:ff:60:ce:96:14:95:be:c9:c1:ec:11:45:19:8c:9f: e4:4c:da:a2:fe:11:dc:65:92:30:dc:6c:6b:e8:e5:7d:fc:3b: fc:70:cf:b9:4a:6d:0c:44:20:47:e2:91:72:0e:71:66:59:b3: c8:07:55:bc:a7:84:7d:91:f3:57:ac:92:12:93:d2:06:e4:b3: f7:87:bc:91:69:1d:1b:8a:fb:c9:46:15:ee:66:3e:93:d9:78: 35:4d:c7:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB/sGWP/xGgYj34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MTk0M2ZkYTEtY2ZlNS00Y2NiLThjYjAtZDVjNDgwNDFkMjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0Ls6c70bpU2s8oBU/Ifwc5yB7J/SC4qyqht EUdocR8zlb1nBeytVTkWuGDT5rN1dkrFGFJs3JI35RfytXJdw9sq27guoaa47ah4 11ulspY2zaOzaUX8XmmRv68XZz2cQ0gvbDmNhaXNv8ITuyYnWnMuBzeDQnd8rCJY 0HYbtnljD1t4udVv9MMol3CZnP0RZ/+sVtPCuoIbgl54HwWZHOjMNHw3zp/E0O5R XMwj4M0gobQYLhvmASbNJdkelL/h4DYiyF3769W5l/XCWwRUSyUwwV5qM3QaHKX4 SxuMJ/678Hh7AmgyFUedrh668zZ9GmBSSkQAd/PTgPpA2GK8ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/zt77SMm88dPdmpPYTmIeiiaQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBlMDk1ZDQtMmRjNi0z YTM3LTkyNWEtMzc4NGYzNmEzYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+9+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9iw/u3eT4PZsb4Ug/MVxwnxiqJOGizNLddPpcDmxHIBkQ7/N/vwefu Q1cX82Ka+o9zY0moBOregakDAM6lvy/Z7dZR0Q6OLg117wUdzQQb/a7oFM8sTTuC jEgDNRjdSQJn0oDLOjTEjSSXZ6i3i1DQUeUeJaTEoy9DaWL73zq56xAmik7aGSks rWUlC4yDPy3Tl8IXuWhwJCQRpti9MqUUY500nf9gzpYUlb7JwewRRRmMn+RM2qL+ EdxlkjDcbGvo5X38O/xwz7lKbQxEIEfikXIOcWZZs8gHVbynhH2R81eskhKT0gbk s/eHvJFpHRuK+8lGFe5mPpPZeDVNx9Q= -----END CERTIFICATE-----Generated at Wed Jun 4 23:10:39 2025 by rpki-client