$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cfc35b5-20ff-3279-9046-7d406e5471e5.roa File: 4cfc35b5-20ff-3279-9046-7d406e5471e5.roa (raw, json) Hash identifier: xOeQAFMjm2oylV+9UdZStIvie+Ys+tUfQBGrUZuUoHE= Subject key identifier: 4E:8B:D3:D7:34:63:8D:16:EC:D3:44:EC:39:47:EC:71:CB:66:2E:12 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4323B3CC63FB46AB54124C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cfc35b5-20ff-3279-9046-7d406e5471e5.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 174.171.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:3b:3c:c6:3f:b4:6a:b5:41:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=fa559b92-4da4-4970-a88c-411f9a065153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d2:51:ed:ea:c9:c6:19:3b:bf:f9:15:c8:68: 25:29:6c:c8:b7:1d:48:d6:d7:9c:c3:ed:6e:a1:37: 0c:03:ff:17:11:96:74:13:74:5d:9b:ac:3b:e8:4d: c7:1f:c9:78:e1:50:fb:f4:fa:e9:fc:ef:a1:f9:cd: 72:d7:4d:9f:53:02:ba:70:6f:e1:c3:e0:4d:93:f8: 7f:56:62:e3:fd:a0:49:89:d2:6a:87:fd:72:da:e8: 98:1a:60:5b:2d:2e:82:b1:ac:7a:ba:f4:cd:ba:ed: c0:72:6e:0e:84:6f:f7:da:1f:cf:b2:9a:33:3d:5f: ce:21:02:db:18:a1:8a:79:ea:bc:fc:54:8c:40:ea: 23:8a:03:9a:a9:56:91:e7:27:0e:7b:12:1a:bb:bd: be:51:76:24:06:a4:90:29:47:91:82:da:ef:7b:29: 4a:e5:fd:53:68:77:dc:a6:9e:0e:8f:c6:5c:38:1a: 10:f3:da:18:b1:fe:12:c6:3e:c9:7d:00:cd:c3:86: 99:90:6d:63:79:46:8c:9f:14:55:89:24:04:f6:7f: 1b:1f:ce:61:bc:0e:58:a0:fd:45:16:75:54:8c:7d: af:39:cc:44:cb:ed:fd:1e:9c:b0:12:cd:97:f8:2f: 3f:26:99:be:1e:8a:4e:6c:f3:f1:94:ad:d4:8f:6d: 17:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8B:D3:D7:34:63:8D:16:EC:D3:44:EC:39:47:EC:71:CB:66:2E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cfc35b5-20ff-3279-9046-7d406e5471e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:b0:73:3e:ed:2d:40:d2:f8:8b:4b:03:a9:7c:e0:01:14:8b: 8d:83:fc:9e:db:38:96:de:c8:89:30:e7:1c:06:81:d4:1c:02: a6:fb:d6:62:82:33:73:fb:28:8a:6d:ac:c7:4f:00:c1:c3:eb: de:90:44:08:11:29:01:c7:3b:06:9f:b2:7b:9f:bb:9c:58:1c: 2e:a4:39:47:52:93:49:eb:7e:95:60:c5:bc:4a:87:8b:1c:d8: 01:e9:b8:b0:a8:00:d7:c4:48:00:11:c6:7c:f4:12:c7:fc:cf: 3d:56:3e:61:36:43:cf:bf:d9:55:87:60:eb:65:09:f3:28:95: a4:61:59:86:46:41:de:f3:dc:66:f6:7c:af:aa:e6:e2:a1:2a: 25:ee:8a:dc:ab:3d:65:d1:95:40:4a:42:46:10:e7:4b:16:e5: fb:09:39:09:dc:03:2c:c8:f8:2d:b7:0a:74:57:48:8b:4d:1d: ff:72:6d:be:1b:b2:2f:ee:55:d8:fb:06:10:dd:2a:01:5c:ff: f8:e2:3b:81:89:29:b1:ea:d3:a0:df:c9:64:a4:1a:20:82:aa: 13:53:c3:13:67:f1:9d:3f:e1:f5:de:f0:ae:11:e3:5c:f4:ff: 55:78:cb:ab:09:e3:b2:4f:ba:9d:89:72:f0:da:55:0b:93:75: 53:91:90:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMjs8xj+0arVBJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZmE1NTliOTItNGRhNC00OTcwLWE4OGMtNDExZjlhMDY1MTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtJR7erJxhk7v/kVyGglKWzItx1I1tecw+1u oTcMA/8XEZZ0E3Rdm6w76E3HH8l44VD79Prp/O+h+c1y102fUwK6cG/hw+BNk/h/ VmLj/aBJidJqh/1y2uiYGmBbLS6Csax6uvTNuu3Acm4OhG/32h/PspozPV/OIQLb GKGKeeq8/FSMQOojigOaqVaR5ycOexIau72+UXYkBqSQKUeRgtrveylK5f1TaHfc pp4Oj8ZcOBoQ89oYsf4Sxj7JfQDNw4aZkG1jeUaMnxRViSQE9n8bH85hvA5YoP1F FnVUjH2vOcxEy+39HpywEs2X+C8/Jpm+HopObPPxlK3Uj20XRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6L09c0Y40W7NNE7DlH7HHLZi4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGNmYzM1YjUtMjBmZi0z Mjc5LTkwNDYtN2Q0MDZlNTQ3MWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACwcz7tLUDS+ItLA6l84AEUi42D/J7bOJbeyIkw5xwGgdQcAqb71mKC M3P7KIptrMdPAMHD696QRAgRKQHHOwafsnufu5xYHC6kOUdSk0nrfpVgxbxKh4sc 2AHpuLCoANfESAARxnz0Esf8zz1WPmE2Q8+/2VWHYOtlCfMolaRhWYZGQd7z3Gb2 fK+q5uKhKiXuityrPWXRlUBKQkYQ50sW5fsJOQncAyzI+C23CnRXSItNHf9ybb4b si/uVdj7BhDdKgFc//jiO4GJKbHq06DfyWSkGiCCqhNTwxNn8Z0/4fXe8K4R41z0 /1V4y6sJ47JPup2JcvDaVQuTdVORkAU= -----END CERTIFICATE-----Generated at Tue Jun 3 07:24:22 2025 by rpki-client