$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46db79a9-8eee-3506-be84-718be08886e7.roa File: 46db79a9-8eee-3506-be84-718be08886e7.roa (raw, json) Hash identifier: VjR7h5VITvcFyMeGCY8cZ+7LQkB97+ZfBwAs108TiGw= Subject key identifier: 12:75:21:6D:A1:EC:D1:D4:D5:96:F6:65:B6:74:BA:E3:5A:34:01:CE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4317613EA94A574047C2A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46db79a9-8eee-3506-be84-718be08886e7.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 67.189.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:76:13:ea:94:a5:74:04:7c:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=8ff2b66b-e7c3-4f8c-9607-c580660b8e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:99:09:99:79:9d:de:ed:5c:12:1f:d8:d9: b3:26:a0:86:38:81:a9:fe:41:4c:77:34:d4:56:54: d0:a1:5e:26:6a:96:a6:75:a7:38:ff:4e:0e:eb:31: a8:78:6f:4f:d6:26:a9:fd:e8:c6:47:fc:96:a9:2a: 92:95:e8:90:dc:c1:ca:91:e3:eb:9d:6d:4f:5f:8b: 2e:ac:26:ff:ca:da:6c:0e:03:d6:42:b7:cb:a2:da: e9:f0:0e:53:16:42:79:9d:21:f3:1c:15:30:b8:86: b0:e4:a8:d3:5e:a4:65:a5:d0:f2:af:77:16:64:92: 86:b0:f7:8d:ce:eb:75:58:18:df:33:af:6e:3f:2c: 2d:ae:d7:97:07:0e:b9:8e:ac:48:ca:eb:14:f9:00: c2:bf:4a:8f:0c:6c:49:1b:f7:5c:a6:53:83:d5:d4: 47:fb:e9:74:6e:89:52:1f:8e:11:ae:23:4f:3d:de: b0:c6:71:27:70:7d:e1:94:61:6d:74:92:10:7d:27: 60:d4:55:30:f3:48:ad:d9:f5:62:16:5a:7d:c2:01: 26:6e:88:78:43:0d:8e:de:34:2e:95:4f:bf:a3:2d: 18:44:87:28:2a:aa:d0:26:e4:73:fa:79:73:a4:fc: dc:eb:b6:12:bc:7a:1c:20:5b:12:6e:59:55:78:3d: be:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:75:21:6D:A1:EC:D1:D4:D5:96:F6:65:B6:74:BA:E3:5A:34:01:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/46db79a9-8eee-3506-be84-718be08886e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.189.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:54:66:e6:2e:53:a7:23:54:0d:50:c6:55:96:d5:f1:f0:8a: 66:b2:4c:1d:8d:05:65:b5:95:00:6e:e3:6c:75:76:b2:0a:75: 1d:4a:53:1e:d0:07:b8:8c:cc:c1:4c:71:f7:00:ce:d3:c7:f4: 84:0a:e1:62:90:a2:13:5f:cc:b4:62:3c:78:b3:c2:31:77:ad: 41:42:3b:ec:07:46:83:9c:9c:55:36:5e:54:69:c8:da:33:4c: cb:6d:fd:33:15:ef:4c:aa:4a:99:c2:43:33:73:23:1c:98:42: 96:90:86:c9:38:6c:04:81:b8:d8:93:09:8d:dd:83:16:15:1f: 48:a2:94:29:6c:1a:01:e9:3f:15:34:a2:1f:8b:7d:30:38:73: fe:3b:f0:23:a8:81:5d:41:74:af:e7:68:db:b8:74:87:c1:73: 61:0d:ab:26:75:93:76:b3:1d:9a:6a:46:31:76:ea:f7:ba:25: bf:62:6b:fe:78:ec:2a:d6:a6:29:a9:ca:ff:e6:8d:dd:6a:ff: e6:fb:e0:9a:33:90:73:97:2b:32:1f:5e:d1:a1:f7:fe:81:05: 20:bd:59:3b:99:ce:fa:5d:cb:cd:b7:00:65:fd:fb:47:86:2e: ab:55:41:f9:5a:08:33:d9:d6:0c:68:7c:a7:bc:15:77:61:53: a6:b5:92:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMXYT6pSldAR8KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OGZmMmI2NmItZTdjMy00ZjhjLTk2MDctYzU4MDY2MGI4ZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvSZCZl5nd7tXBIf2NmzJqCGOIGp/kFMdzTU VlTQoV4mapamdac4/04O6zGoeG9P1iap/ejGR/yWqSqSleiQ3MHKkePrnW1PX4su rCb/ytpsDgPWQrfLotrp8A5TFkJ5nSHzHBUwuIaw5KjTXqRlpdDyr3cWZJKGsPeN zut1WBjfM69uPywtrteXBw65jqxIyusU+QDCv0qPDGxJG/dcplOD1dRH++l0bolS H44RriNPPd6wxnEncH3hlGFtdJIQfSdg1FUw80it2fViFlp9wgEmboh4Qw2O3jQu lU+/oy0YRIcoKqrQJuRz+nlzpPzc67YSvHocIFsSbllVeD2+UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ1IW2h7NHU1Zb2ZbZ0uuNaNAHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDZkYjc5YTktOGVlZS0z NTA2LWJlODQtNzE4YmUwODg4NmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ734MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZUZuYuU6cjVA1QxlWW1fHwimayTB2NBWW1lQBu42x1drIKdR1KUx7Q B7iMzMFMcfcAztPH9IQK4WKQohNfzLRiPHizwjF3rUFCO+wHRoOcnFU2XlRpyNoz TMtt/TMV70yqSpnCQzNzIxyYQpaQhsk4bASBuNiTCY3dgxYVH0iilClsGgHpPxU0 oh+LfTA4c/478COogV1BdK/naNu4dIfBc2ENqyZ1k3azHZpqRjF26ve6Jb9ia/54 7CrWpimpyv/mjd1q/+b74JozkHOXKzIfXtGh9/6BBSC9WTuZzvpdy823AGX9+0eG LqtVQflaCDPZ1gxofKe8FXdhU6a1krE= -----END CERTIFICATE-----Generated at Tue Jun 3 07:11:18 2025 by rpki-client