$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/426bac43-27fc-3c5e-8433-1ce9c1cab508.roa File: 426bac43-27fc-3c5e-8433-1ce9c1cab508.roa (raw, json) Hash identifier: llRoWkqGn+qGIRDj4s12FaAJWwY/7KrjDKZ4FbLBg3A= Subject key identifier: 9A:BE:5A:8E:14:95:71:C0:8F:DB:6B:24:F1:6F:F4:BB:58:38:06:C1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43136007B9B6481C0F9AB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/426bac43-27fc-3c5e-8433-1ce9c1cab508.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 71.236.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:36:00:7b:9b:64:81:c0:f9:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=583504dc-8827-438a-9856-140a9e9f6b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c4:07:8b:fe:57:a7:13:b0:13:fe:21:64:fc: f9:84:cf:4e:12:b1:ee:d7:6e:a4:a1:59:f3:ff:69: f2:e6:e3:82:55:28:a8:68:11:be:3f:20:d0:c2:ed: a0:7b:33:b2:2d:4e:9e:b6:25:b4:ac:72:40:e7:64: 75:89:10:ab:8f:ed:29:2c:9b:f4:30:84:bd:1d:dd: c9:a4:6c:e7:3e:92:1b:f0:45:08:c7:60:8a:19:d3: 20:82:80:c9:0b:92:ec:85:90:d9:fb:89:5e:da:f5: 21:b0:8e:ec:7e:6f:33:50:99:36:bc:49:04:01:10: 31:54:78:63:c5:a9:ee:00:14:37:fe:55:a9:59:c5: 68:b6:ba:16:98:b2:f8:c1:75:5b:51:d7:0c:e8:b7: d0:fb:82:46:1b:7e:cd:59:a9:7d:ca:51:69:2d:a5: d5:da:2d:bf:f9:8c:3f:50:04:8f:b6:c2:3c:52:d4: cf:be:c4:6f:59:08:bf:dc:ab:52:42:43:8f:6a:d1: aa:90:61:09:e8:73:d6:66:6d:1c:d1:36:40:ce:62: 7f:e1:a3:b6:c5:31:c6:b5:a6:a9:48:06:ae:58:e0: 75:c1:17:c3:cb:f7:d4:cd:ca:c4:d2:d6:63:f9:7f: 8c:eb:ee:b3:68:43:2e:39:46:77:0d:cc:d7:ba:0a: 24:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BE:5A:8E:14:95:71:C0:8F:DB:6B:24:F1:6F:F4:BB:58:38:06:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/426bac43-27fc-3c5e-8433-1ce9c1cab508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.236.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:9d:b4:be:9a:a9:8c:5e:82:b5:84:79:14:22:d9:f1:76:a8: 98:b1:f7:5a:d3:b9:82:56:8a:da:94:69:d8:96:b1:f0:4a:89: d7:46:bf:5e:16:20:53:cc:02:12:7c:3c:4d:28:21:85:8c:0a: 99:28:e4:14:38:85:7b:20:76:5c:75:0d:3e:a0:fe:97:fe:3e: 1f:96:87:fc:33:ae:f1:83:fc:7f:b7:82:bd:e7:19:a5:40:0b: 57:6e:88:f8:70:99:6c:8f:95:1d:fe:70:56:1a:e3:6e:03:61: 48:13:ad:36:c7:c1:6f:18:64:bf:e4:c9:e5:8a:cf:91:50:fb: 91:09:98:a0:e6:0d:7e:56:ca:3e:45:6b:61:4e:e2:2d:9a:e0: f9:29:9e:76:3e:11:78:98:4b:a1:c0:a6:9e:e6:93:0b:aa:97: 85:39:79:f9:55:23:7f:7b:ef:56:3a:b8:a6:f5:c7:ca:c6:3d: 75:06:8a:ae:8a:fe:cc:a0:ef:0c:e9:07:b4:71:7b:c2:08:f1: a7:c2:76:79:4e:41:1b:71:c6:8e:91:cf:b7:75:bb:82:db:e6: f0:07:b4:f3:82:30:14:9b:09:b7:6d:94:ad:40:64:fd:25:a6: 52:30:ff:39:40:99:68:d7:6b:58:ef:04:cb:16:db:c7:b0:b4: 86:23:4a:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMTYAe5tkgcD5q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NTgzNTA0ZGMtODgyNy00MzhhLTk4NTYtMTQwYTllOWY2YjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsQHi/5XpxOwE/4hZPz5hM9OErHu126koVnz /2ny5uOCVSioaBG+PyDQwu2gezOyLU6etiW0rHJA52R1iRCrj+0pLJv0MIS9Hd3J pGznPpIb8EUIx2CKGdMggoDJC5LshZDZ+4le2vUhsI7sfm8zUJk2vEkEARAxVHhj xanuABQ3/lWpWcVotroWmLL4wXVbUdcM6LfQ+4JGG37NWal9ylFpLaXV2i2/+Yw/ UASPtsI8UtTPvsRvWQi/3KtSQkOPatGqkGEJ6HPWZm0c0TZAzmJ/4aO2xTHGtaap SAauWOB1wRfDy/fUzcrE0tZj+X+M6+6zaEMuOUZ3DczXugokGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJq+Wo4UlXHAj9trJPFv9LtYOAbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDI2YmFjNDMtMjdmYy0z YzVlLTg0MzMtMWNlOWMxY2FiNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+ysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJedtL6aqYxegrWEeRQi2fF2qJix91rTuYJWitqUadiWsfBKiddGv14W IFPMAhJ8PE0oIYWMCpko5BQ4hXsgdlx1DT6g/pf+Ph+Wh/wzrvGD/H+3gr3nGaVA C1duiPhwmWyPlR3+cFYa424DYUgTrTbHwW8YZL/kyeWKz5FQ+5EJmKDmDX5Wyj5F a2FO4i2a4PkpnnY+EXiYS6HApp7mkwuql4U5eflVI39771Y6uKb1x8rGPXUGiq6K /syg7wzpB7Rxe8II8afCdnlOQRtxxo6Rz7d1u4Lb5vAHtPOCMBSbCbdtlK1AZP0l plIw/zlAmWjXa1jvBMsW28ewtIYjSjI= -----END CERTIFICATE-----Generated at Tue Jun 3 07:08:34 2025 by rpki-client