$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eb7b032-5de7-39f7-bb5a-70aaf9f3a2c5.roa File: 4eb7b032-5de7-39f7-bb5a-70aaf9f3a2c5.roa (raw, json) Hash identifier: KFRRT94ihgKiMyXhf6nqEKzz0YuKFSdiBP1cOt0Cu34= Subject key identifier: 58:4E:3A:7C:4C:0B:FC:19:23:FA:AF:0A:86:7E:93:91:28:2C:3B:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C07F463F2BDD70E9C478F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eb7b032-5de7-39f7-bb5a-70aaf9f3a2c5.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 69.245.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:f4:63:f2:bd:d7:0e:9c:47:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=da09ecb2-06fa-4787-a7d0-15fe67c5cf93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ae:5b:0e:99:cd:ba:4b:0f:f2:be:a7:c5:f7: 73:c3:a1:da:46:f9:61:f9:b2:c9:22:87:f6:31:e6: f5:cb:45:b4:30:47:44:21:a5:46:72:a2:62:f5:18: f7:68:da:7e:30:0d:f4:96:12:69:3b:d6:77:7d:e6: bc:ce:15:b5:0a:0b:78:da:d2:c8:49:49:e4:d3:e2: 2f:e8:6b:4b:fc:2c:db:01:ef:b4:54:d0:30:7b:00: 3d:8d:22:1a:89:f6:ca:71:14:ea:59:23:4f:99:0e: ae:f4:8a:e7:51:3f:16:52:92:95:c6:0a:17:62:3d: c1:0e:0d:c9:bf:59:d7:f7:a1:0e:e8:08:55:5b:2b: 30:59:80:ad:f5:28:f9:41:be:8e:cb:33:11:b9:1c: f9:02:7a:b4:a5:6b:d1:f4:6c:36:75:fd:c9:80:82: 58:71:b6:06:fe:72:26:42:52:a4:c2:56:b6:33:d5: d1:b2:52:18:44:27:05:fb:63:da:f7:ac:a1:c5:d7: ae:6d:a5:26:ae:b9:ec:61:16:97:85:3f:c7:df:50: 47:5a:c5:9f:4a:d6:74:9f:c2:39:df:97:3c:2f:02: 09:1c:b0:a1:f7:df:48:95:d9:bf:30:bf:52:24:d3: 1b:c0:bb:68:9e:06:75:11:5a:5e:df:3c:a8:fe:f7: d1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:4E:3A:7C:4C:0B:FC:19:23:FA:AF:0A:86:7E:93:91:28:2C:3B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4eb7b032-5de7-39f7-bb5a-70aaf9f3a2c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.245.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:ca:eb:08:40:50:fe:f8:98:0e:2a:a5:79:f2:d1:d3:eb:37: 74:c0:d6:a9:1d:91:99:4e:11:04:66:fa:8c:ce:1b:b0:24:f9: 06:4a:5a:08:10:24:70:3e:89:9e:95:8e:09:ac:cc:96:72:39: d3:34:b7:1f:16:93:e7:02:97:dd:3e:47:74:22:56:e6:7e:32: da:36:86:dc:d6:5d:09:f9:ba:e5:6e:0c:bb:04:60:14:9e:49: eb:9c:1c:5a:00:82:d6:43:c9:86:e6:26:10:ba:6d:4b:0a:b7: db:ff:76:51:52:5c:27:5f:a9:17:08:c9:d2:6b:d7:5e:34:f5: 4d:fa:8a:e3:d5:f2:b5:90:ff:5d:46:d3:2a:94:15:96:88:11: bc:5a:1e:0c:36:1b:3f:26:fa:9e:1d:b8:c3:f4:be:95:c6:66: 20:7e:72:84:0a:24:3b:0a:5d:63:5e:59:25:5d:00:8b:5e:f2: 18:7a:64:bd:30:5b:89:c1:91:81:6b:d0:fb:0e:0d:db:ba:63: 8e:b6:af:2f:29:31:b3:b5:3a:2c:40:46:a0:a7:64:c9:6c:75: f3:4b:da:b7:bd:e3:00:3f:ef:84:80:5d:1c:ee:7e:a2:98:55: ee:b9:ba:70:de:46:25:99:d0:25:8a:7d:97:a0:69:57:97:71: 0d:2d:f1:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB/Rj8r3XDpxHj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZGEwOWVjYjItMDZmYS00Nzg3LWE3ZDAtMTVmZTY3YzVjZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia5bDpnNuksP8r6nxfdzw6HaRvlh+bLJIof2 Meb1y0W0MEdEIaVGcqJi9Rj3aNp+MA30lhJpO9Z3fea8zhW1Cgt42tLISUnk0+Iv 6GtL/CzbAe+0VNAwewA9jSIaifbKcRTqWSNPmQ6u9IrnUT8WUpKVxgoXYj3BDg3J v1nX96EO6AhVWyswWYCt9Sj5Qb6OyzMRuRz5Anq0pWvR9Gw2df3JgIJYcbYG/nIm QlKkwla2M9XRslIYRCcF+2Pa96yhxdeubaUmrrnsYRaXhT/H31BHWsWfStZ0n8I5 35c8LwIJHLCh999Ildm/ML9SJNMbwLtongZ1EVpe3zyo/vfR6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhOOnxMC/wZI/qvCoZ+k5EoLDtyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGViN2IwMzItNWRlNy0z OWY3LWJiNWEtNzBhYWY5ZjNhMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRfWOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfK6whAUP74mA4qpXny0dPrN3TA1qkdkZlOEQRm+ozOG7Ak+QZKWggQ JHA+iZ6VjgmszJZyOdM0tx8Wk+cCl90+R3QiVuZ+Mto2htzWXQn5uuVuDLsEYBSe SeucHFoAgtZDyYbmJhC6bUsKt9v/dlFSXCdfqRcIydJr11409U36iuPV8rWQ/11G 0yqUFZaIEbxaHgw2Gz8m+p4duMP0vpXGZiB+coQKJDsKXWNeWSVdAIte8hh6ZL0w W4nBkYFr0PsODdu6Y462ry8pMbO1OixARqCnZMlsdfNL2re94wA/74SAXRzufqKY Ve65unDeRiWZ0CWKfZegaVeXcQ0t8bQ= -----END CERTIFICATE-----Generated at Tue Jun 3 04:57:02 2025 by rpki-client