$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5af450a6-f27e-379d-ac6f-ab217fb5f212.roa File: 5af450a6-f27e-379d-ac6f-ab217fb5f212.roa (raw, json) Hash identifier: CDJRwRagRLiCvcsytfA66olSnw+DiHnJBh8qFe6Hibg= Subject key identifier: F3:4B:9D:75:99:BF:B9:8F:5F:C5:19:1E:EA:2A:6A:55:88:97:68:E4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C08883BD5C4955A1584F280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5af450a6-f27e-379d-ac6f-ab217fb5f212.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 71.198.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:88:3b:d5:c4:95:5a:15:84:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=0ca3f5e8-a935-4ea7-b69c-ca4533f806c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:81:87:da:f1:70:4a:cf:78:4b:d9:5a:2d:58: 65:0f:8d:2d:61:5a:37:ac:83:ea:b8:82:1d:17:20: 9b:d9:7f:7b:19:52:66:d0:3d:c8:e5:89:e2:c0:e7: f1:a2:4b:67:af:f4:03:ac:21:63:1a:6c:94:b8:d2: e3:26:d8:f4:0b:7b:5e:6a:25:f8:e0:33:0b:ea:4f: 6f:ad:0d:e3:58:8a:c1:71:65:fe:a7:04:3d:e8:78: be:cb:d9:09:26:ac:08:e7:38:59:37:bf:99:15:15: 48:c5:59:19:13:0b:e3:7a:15:d0:2d:35:d5:88:8c: 0e:7f:ee:9a:76:dd:42:ef:bd:80:07:32:76:49:89: 6a:0b:c6:74:9a:5e:2b:9c:c5:29:bb:8b:f9:e6:68: 54:63:a6:34:d0:2d:87:06:94:8d:94:65:7f:bb:b2: 6c:93:29:8d:5c:ce:36:2e:e7:3c:55:9e:46:e6:fa: 6e:7c:3e:bc:68:34:46:de:7c:49:53:a4:05:aa:70: 2a:aa:02:35:56:59:58:88:12:ac:77:27:03:67:45: 61:4b:f9:48:98:56:23:85:6c:31:d5:32:9d:4d:5e: 09:3c:16:e9:ec:92:47:b4:f8:3b:74:86:aa:c9:48: 30:14:0f:24:4e:24:5e:7d:03:91:bb:3a:1d:37:e2: 30:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4B:9D:75:99:BF:B9:8F:5F:C5:19:1E:EA:2A:6A:55:88:97:68:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5af450a6-f27e-379d-ac6f-ab217fb5f212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.198.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:a4:e3:c1:8d:f5:3d:d7:a0:ea:dd:c2:1a:55:ef:64:82:b3: 4b:16:a1:c1:81:54:19:97:8a:65:81:bc:2c:f2:0c:aa:0a:82: e2:24:85:64:89:68:6d:f3:83:12:73:be:9a:ab:13:43:d5:a5: 31:8e:2f:12:db:09:77:57:46:bb:c7:6e:2f:db:05:b7:ee:a6: a8:22:a5:65:56:0f:5e:b9:6e:36:75:5c:a4:e0:13:7c:01:46: 12:98:6a:ab:2f:90:87:62:32:c8:25:b9:a3:2f:93:3f:58:3d: 1f:25:3e:55:04:76:22:5c:26:94:51:77:ac:fd:83:d1:55:c6: 65:a0:ac:60:38:3b:8c:d2:98:7d:d2:27:eb:8f:70:96:62:ae: 69:ec:40:eb:85:38:1d:c5:71:9f:b1:5b:af:73:83:da:a6:71: 4f:37:47:72:35:1c:72:11:5b:db:f6:50:08:6c:72:1f:0b:34: 68:95:0a:93:f6:bb:e7:b3:9a:a9:3e:64:36:78:8f:7e:a6:f1: 07:9d:42:94:a8:47:f0:45:03:61:23:12:26:1c:25:cd:f0:e7: 3e:10:3e:54:0f:9d:d1:7f:15:24:1b:fc:64:dd:e7:b3:83:bb: 5d:a2:90:31:d4:37:38:69:36:41:6e:03:44:c8:0f:31:43:3d: 6d:0d:e4:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCIg71cSVWhWE8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MGNhM2Y1ZTgtYTkzNS00ZWE3LWI2OWMtY2E0NTMzZjgwNmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oGH2vFwSs94S9laLVhlD40tYVo3rIPquIId FyCb2X97GVJm0D3I5YniwOfxoktnr/QDrCFjGmyUuNLjJtj0C3teaiX44DML6k9v rQ3jWIrBcWX+pwQ96Hi+y9kJJqwI5zhZN7+ZFRVIxVkZEwvjehXQLTXViIwOf+6a dt1C772ABzJ2SYlqC8Z0ml4rnMUpu4v55mhUY6Y00C2HBpSNlGV/u7JskymNXM42 Luc8VZ5G5vpufD68aDRG3nxJU6QFqnAqqgI1VllYiBKsdycDZ0VhS/lImFYjhWwx 1TKdTV4JPBbp7JJHtPg7dIaqyUgwFA8kTiRefQORuzodN+IwlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNLnXWZv7mPX8UZHuoqalWIl2jkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWFmNDUwYTYtZjI3ZS0z NzlkLWFjNmYtYWIyMTdmYjVmMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR8Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANSk48GN9T3XoOrdwhpV72SCs0sWocGBVBmXimWBvCzyDKoKguIkhWSJ aG3zgxJzvpqrE0PVpTGOLxLbCXdXRrvHbi/bBbfupqgipWVWD165bjZ1XKTgE3wB RhKYaqsvkIdiMsgluaMvkz9YPR8lPlUEdiJcJpRRd6z9g9FVxmWgrGA4O4zSmH3S J+uPcJZirmnsQOuFOB3FcZ+xW69zg9qmcU83R3I1HHIRW9v2UAhsch8LNGiVCpP2 u+ezmqk+ZDZ4j36m8QedQpSoR/BFA2EjEiYcJc3w5z4QPlQPndF/FSQb/GTd57OD u12ikDHUNzhpNkFuA0TIDzFDPW0N5HA= -----END CERTIFICATE-----Generated at Tue Jun 3 05:38:07 2025 by rpki-client