$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/491da61e-74e4-3bbe-b3c8-2ab183f32901.roa File: 491da61e-74e4-3bbe-b3c8-2ab183f32901.roa (raw, json) Hash identifier: S2B1lgK1uU8FBmKEfwrVWvtx69lamPsisEVhcvEC1gE= Subject key identifier: A7:17:89:7E:C7:1A:24:F9:9A:FF:54:0B:4F:0B:1A:5C:4B:C8:E5:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C063EDB93A1168BD1F4CF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/491da61e-74e4-3bbe-b3c8-2ab183f32901.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 71.194.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:3e:db:93:a1:16:8b:d1:f4:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=d8096e23-7b37-43c3-bd4a-399db6c4aaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:f4:88:c4:a4:af:00:b2:64:ce:59:f9:66: 36:f4:e0:38:26:b0:ec:dd:38:78:dd:75:37:17:3d: 6f:c5:e0:b7:67:35:a0:ee:9a:d4:74:3b:46:4c:b9: 74:6f:1e:1a:93:fe:59:da:f1:28:4e:36:7e:bf:c5: a1:3d:b6:6f:9a:da:37:6e:23:0a:80:0b:3e:69:cc: d1:c9:77:ee:a4:d8:d3:82:45:28:2b:31:46:5c:82: 07:90:87:a4:8f:93:a8:95:44:f8:c3:e3:3e:e1:ec: d5:d6:f2:45:6d:1a:3c:9f:5d:fb:ae:c6:a6:f5:1d: 6b:18:9f:5e:c3:b9:ab:c3:b6:4f:9c:ac:91:e8:94: d4:cd:71:d7:84:b4:32:ca:f0:27:42:5d:ca:60:ae: 51:5a:29:0b:a5:4f:f2:b4:95:e5:ad:8d:76:92:d8: 9c:ac:5d:47:2a:d6:3e:79:5b:7b:49:f8:c9:e4:17: 81:6f:77:59:4a:49:e6:dc:a3:b1:35:a5:0b:71:9e: de:21:45:a6:c2:ea:75:f7:1e:1b:87:94:df:2d:ef: 99:2c:1f:79:b2:16:dd:2a:d3:fe:a9:f4:0f:c7:44: 90:4e:94:b7:9e:7c:6a:58:10:13:6f:eb:ef:b7:34: b9:04:d5:e1:7e:fd:28:e0:76:c4:70:82:2f:f9:57: 72:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:17:89:7E:C7:1A:24:F9:9A:FF:54:0B:4F:0B:1A:5C:4B:C8:E5:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/491da61e-74e4-3bbe-b3c8-2ab183f32901.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.194.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:95:eb:66:75:4a:aa:c2:d0:8b:f5:1b:f6:cf:51:48:1c:3c: 67:a2:2c:c5:e5:5e:6e:1d:a1:79:a9:1a:03:3e:73:f8:d1:c4: 80:d9:09:db:45:b7:e4:8d:76:43:f2:5d:29:6f:78:bd:7f:55: f9:97:de:d5:e6:7f:70:98:3b:90:4d:0b:13:d0:16:9c:12:d1: 4a:03:b6:3e:72:d6:4f:9d:c9:57:6b:01:b1:da:57:1d:4a:1a: 24:4b:eb:0b:2a:2f:c2:12:3c:1e:2f:e0:3f:0b:16:ae:ce:6a: cd:17:18:09:fe:77:7d:22:0a:c2:17:fa:b6:c8:df:3a:2e:c5: 03:d4:7a:19:05:ee:2b:01:b1:93:4e:1b:da:c5:91:b3:0f:b6: b4:c6:a0:c7:eb:79:f8:63:47:7b:87:26:b0:22:95:39:97:9d: e5:06:aa:b7:df:ac:21:69:6a:81:0d:21:3e:84:92:0a:11:58: 36:cb:e1:b4:57:19:bd:b6:6b:12:1a:80:16:15:30:9b:e2:bc: 88:f1:c1:c6:7c:4c:d4:94:a2:62:c9:d1:c0:c4:0b:8c:e8:bd: dd:2c:88:53:d9:d1:4e:00:91:5b:d5:72:c0:09:cd:74:14:0c: ed:e0:92:01:62:c0:a8:c5:93:7a:0e:06:fd:2b:8b:6e:61:8c: 23:c2:c2:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBj7bk6EWi9H0zwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZDgwOTZlMjMtN2IzNy00M2MzLWJkNGEtMzk5ZGI2YzRhYWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8b0iMSkrwCyZM5Z+WY29OA4JrDs3Th43XU3 Fz1vxeC3ZzWg7prUdDtGTLl0bx4ak/5Z2vEoTjZ+v8WhPbZvmto3biMKgAs+aczR yXfupNjTgkUoKzFGXIIHkIekj5OolUT4w+M+4ezV1vJFbRo8n137rsam9R1rGJ9e w7mrw7ZPnKyR6JTUzXHXhLQyyvAnQl3KYK5RWikLpU/ytJXlrY12kticrF1HKtY+ eVt7SfjJ5BeBb3dZSknm3KOxNaULcZ7eIUWmwup19x4bh5TfLe+ZLB95shbdKtP+ qfQPx0SQTpS3nnxqWBATb+vvtzS5BNXhfv0o4HbEcIIv+VdyAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcXiX7HGiT5mv9UC08LGlxLyOVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDkxZGE2MWUtNzRlNC0z YmJlLWIzYzgtMmFiMTgzZjMyOTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8KoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2V62Z1SqrC0Iv1G/bPUUgcPGeiLMXlXm4doXmpGgM+c/jRxIDZCdtF t+SNdkPyXSlveL1/VfmX3tXmf3CYO5BNCxPQFpwS0UoDtj5y1k+dyVdrAbHaVx1K GiRL6wsqL8ISPB4v4D8LFq7Oas0XGAn+d30iCsIX+rbI3zouxQPUehkF7isBsZNO G9rFkbMPtrTGoMfrefhjR3uHJrAilTmXneUGqrffrCFpaoENIT6EkgoRWDbL4bRX Gb22axIagBYVMJvivIjxwcZ8TNSUomLJ0cDEC4zovd0siFPZ0U4AkVvVcsAJzXQU DO3gkgFiwKjFk3oOBv0ri25hjCPCwt0= -----END CERTIFICATE-----Generated at Wed Jun 4 23:42:08 2025 by rpki-client