$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9fe21c-4d4e-3bcd-b6db-09e159ebf55a.roa File: 4b9fe21c-4d4e-3bcd-b6db-09e159ebf55a.roa (raw, json) Hash identifier: mb8jG24+GMfXuwK3xCkzanF/F+KJ8Sfufv0jjTjJMhQ= Subject key identifier: 71:46:3C:1A:7C:4D:21:1C:0D:E1:F8:EA:4C:D8:C7:F2:58:31:38:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FC6C778F576B6C964A480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9fe21c-4d4e-3bcd-b6db-09e159ebf55a.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 67.189.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:c6:c7:78:f5:76:b6:c9:64:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=e8dd0849-64ab-4cb0-81cc-bb6dad695efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:de:c4:a0:2a:ea:05:7d:e3:f9:a2:7c:d3:a8: c3:a9:f6:5c:3f:d1:60:bb:5a:fa:48:58:3d:b7:a7: 3c:a8:96:eb:a5:42:64:fa:fb:9b:43:a4:49:2d:de: 7f:78:83:c0:d7:00:ff:b6:26:45:88:6a:5b:47:94: 8c:6b:7b:f6:02:b7:d5:07:28:16:fd:c6:4c:c5:4d: 5c:1c:ad:4c:60:5f:16:e1:a6:5a:0e:f6:fa:5a:d8: 25:b8:a7:24:65:64:03:f6:8f:b9:71:91:19:af:5a: 98:11:6d:50:01:32:8f:51:2a:e0:78:48:f7:6d:fb: b3:ae:40:e8:53:9f:34:77:26:27:29:44:b5:f0:dd: da:2c:74:9d:17:41:0e:a1:aa:2f:a3:43:9e:56:00: fd:2c:39:7c:31:a0:a1:0b:d7:ec:14:4d:ae:94:46: aa:8a:0a:30:8f:03:5e:04:58:97:61:36:b3:d3:ab: 30:fd:b4:19:3c:8e:3f:17:52:e1:fe:b5:19:2e:48: 4a:45:2c:6e:a7:92:e9:f1:1b:9b:76:c5:61:d6:3e: 56:7c:f5:10:ca:3a:8b:53:ba:4a:ac:59:1f:1a:53: 70:27:71:be:db:39:06:9e:ea:86:3f:f8:38:49:42: a8:67:b8:8e:6f:51:af:e8:f2:93:a5:75:6b:4d:63: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:46:3C:1A:7C:4D:21:1C:0D:E1:F8:EA:4C:D8:C7:F2:58:31:38:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9fe21c-4d4e-3bcd-b6db-09e159ebf55a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.189.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:19:df:1a:f6:10:25:bc:27:93:9d:38:b3:88:eb:0f:51:2e: 25:04:30:4c:34:16:49:74:18:85:7d:09:87:64:fe:98:8a:2c: 1f:f4:ef:85:bf:73:c8:44:2f:12:b6:ae:6b:22:e2:89:65:68: 7c:70:76:7b:61:a7:ec:b8:49:6b:81:70:43:4e:92:4f:f8:62: 3c:b7:71:23:cc:98:8b:aa:29:65:2e:7a:b7:88:2f:b2:01:5a: 35:07:0c:71:b5:40:29:4a:ce:05:7e:e0:d2:a1:fd:89:b9:54: 52:fc:b2:54:76:34:78:5e:1e:44:b1:f2:d6:b7:1f:72:44:b1: e5:d7:2a:e8:ec:e6:a1:68:92:dd:d0:23:2a:06:58:55:64:ef: 0d:80:bc:74:cd:4e:21:2d:0b:c1:e1:ee:c5:b4:fc:b6:2e:b1: c4:f7:72:01:15:7d:9c:7b:43:03:be:9b:c7:bb:48:1d:fd:57: 65:81:4a:1e:6a:da:f5:09:3b:ac:5d:cb:6a:32:46:b0:0f:fd: 8d:59:0c:c7:50:52:ae:3f:3d:82:b7:6b:48:29:d9:ca:7c:93: d4:4b:91:56:95:83:23:57:d1:7c:67:ea:01:f8:cb:1a:35:d4: db:75:2c:a9:b3:4e:1c:8a:e6:c7:23:32:7d:dd:59:ca:d1:d2: 23:19:39:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL8bHePV2tslkpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZThkZDA4NDktNjRhYi00Y2IwLTgxY2MtYmI2ZGFkNjk1ZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N7EoCrqBX3j+aJ806jDqfZcP9Fgu1r6SFg9 t6c8qJbrpUJk+vubQ6RJLd5/eIPA1wD/tiZFiGpbR5SMa3v2ArfVBygW/cZMxU1c HK1MYF8W4aZaDvb6WtgluKckZWQD9o+5cZEZr1qYEW1QATKPUSrgeEj3bfuzrkDo U580dyYnKUS18N3aLHSdF0EOoaovo0OeVgD9LDl8MaChC9fsFE2ulEaqigowjwNe BFiXYTaz06sw/bQZPI4/F1Lh/rUZLkhKRSxup5Lp8RubdsVh1j5WfPUQyjqLU7pK rFkfGlNwJ3G+2zkGnuqGP/g4SUKoZ7iOb1Gv6PKTpXVrTWOA5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFGPBp8TSEcDeH46kzYx/JYMTh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGI5ZmUyMWMtNGQ0ZS0z YmNkLWI2ZGItMDllMTU5ZWJmNTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ71WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoZ3xr2ECW8J5OdOLOI6w9RLiUEMEw0Fkl0GIV9CYdk/piKLB/074W/ c8hELxK2rmsi4ollaHxwdnthp+y4SWuBcENOkk/4Yjy3cSPMmIuqKWUuereIL7IB WjUHDHG1QClKzgV+4NKh/Ym5VFL8slR2NHheHkSx8ta3H3JEseXXKujs5qFokt3Q IyoGWFVk7w2AvHTNTiEtC8Hh7sW0/LYuscT3cgEVfZx7QwO+m8e7SB39V2WBSh5q 2vUJO6xdy2oyRrAP/Y1ZDMdQUq4/PYK3a0gp2cp8k9RLkVaVgyNX0Xxn6gH4yxo1 1Nt1LKmzThyK5scjMn3dWcrR0iMZOe4= -----END CERTIFICATE-----Generated at Tue Jun 3 04:47:32 2025 by rpki-client