$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ca328b0-040b-373b-a768-f42e5b17cd03.roa File: 5ca328b0-040b-373b-a768-f42e5b17cd03.roa (raw, json) Hash identifier: 3iZsL/gDp+eTTL/arBYornQMMB+GxkotgQ+NIz4e6sU= Subject key identifier: 9A:B9:6E:9D:E1:DF:52:7B:C1:CD:4B:7C:4E:48:A8:6D:11:6C:02:D2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431EB082A97863869325080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ca328b0-040b-373b-a768-f42e5b17cd03.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 67.172.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:eb:08:2a:97:86:38:69:32:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=e3781c9e-4fd7-4d0c-8441-f58342eb3234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a7:0b:d4:93:39:86:c6:3f:4e:53:0f:df:4d: a5:37:5d:da:3c:72:e2:65:21:ff:9b:bd:2f:0a:d9: 49:37:fc:29:b8:e1:c1:62:4e:0e:b1:e5:4a:7a:1a: 67:18:cc:83:1d:08:0e:55:5e:0e:dd:ca:78:67:e7: a1:37:4e:36:eb:a0:c4:22:af:d3:d5:37:cf:cd:a1: 64:9b:8f:24:13:38:06:35:52:11:08:28:35:b4:83: 1f:2f:eb:c6:9d:ce:65:db:18:36:98:0e:91:2c:3a: f8:00:fd:bd:8e:1d:3a:36:3a:8a:35:b1:a6:0a:c1: a8:ee:16:50:5c:3c:d5:7f:bb:fb:5c:30:e8:e2:f7: 46:7c:55:bb:97:fa:2c:d0:70:74:b9:b2:6f:8d:7d: 4a:97:58:f0:3d:68:06:bd:4d:9a:81:b3:e6:78:f5: 03:07:70:64:34:93:43:26:23:c0:16:64:39:a7:71: 93:ab:2a:3e:f1:d8:80:7e:7f:08:71:aa:2e:c4:c6: 0f:38:b8:c0:10:dc:bf:8d:1a:b7:21:32:b0:59:bf: c6:a1:11:4c:57:d3:06:f7:6f:d9:63:2c:54:8d:fd: e0:1d:34:26:32:b7:20:6e:c4:02:7f:ae:58:47:91: 67:af:f5:00:4c:4f:c3:48:1f:4b:42:b2:5f:0d:64: 6f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B9:6E:9D:E1:DF:52:7B:C1:CD:4B:7C:4E:48:A8:6D:11:6C:02:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ca328b0-040b-373b-a768-f42e5b17cd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.172.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:dd:cb:f0:a9:e7:f0:7a:3a:c0:a7:aa:ef:ce:2a:d7:e4:2a: 9b:fc:fe:41:af:70:7e:87:ef:3e:f8:31:30:29:d3:09:8d:53: b7:45:81:2f:54:a3:bc:5a:ca:85:96:cc:99:2f:bd:df:08:d7: 80:21:fe:6a:f3:9a:dd:37:e7:c9:25:18:1f:71:45:97:ec:f8: 9f:f5:90:89:6b:d7:6a:91:c5:d7:5b:1e:f9:6d:d9:68:30:6e: f2:66:90:4a:92:ee:07:56:b1:e0:2d:07:43:f2:ed:c1:f3:3c: 2c:24:8a:53:b5:64:7c:f1:ce:a6:97:b2:b8:50:8c:2d:e8:9a: 8a:43:2b:cc:3a:2d:f8:ab:1f:28:9f:c3:4b:e3:ae:a8:1e:8d: 86:55:5e:3c:6b:ea:88:47:34:bd:47:79:6d:15:35:fa:d6:43: 70:5b:ee:dd:d8:4e:9e:04:27:cf:5d:bc:f1:b8:2d:10:8a:e3: 8b:3b:ef:77:8d:e6:7d:df:98:ad:94:84:e1:e7:c5:70:00:52: f4:9a:76:4b:85:77:d5:60:f6:5f:23:f8:59:c7:9e:ed:75:39: 14:6f:27:8a:c5:9b:dc:ca:8e:40:12:c6:00:67:8f:89:8b:b2: 98:ce:95:99:79:f7:62:1b:d3:8f:c2:28:eb:01:8f:59:85:5a: e6:05:72:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMesIKpeGOGkyUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZTM3ODFjOWUtNGZkNy00ZDBjLTg0NDEtZjU4MzQyZWIzMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgacL1JM5hsY/TlMP302lN13aPHLiZSH/m70v CtlJN/wpuOHBYk4OseVKehpnGMyDHQgOVV4O3cp4Z+ehN04266DEIq/T1TfPzaFk m48kEzgGNVIRCCg1tIMfL+vGnc5l2xg2mA6RLDr4AP29jh06NjqKNbGmCsGo7hZQ XDzVf7v7XDDo4vdGfFW7l/os0HB0ubJvjX1Kl1jwPWgGvU2agbPmePUDB3BkNJND JiPAFmQ5p3GTqyo+8diAfn8IcaouxMYPOLjAENy/jRq3ITKwWb/GoRFMV9MG92/Z YyxUjf3gHTQmMrcgbsQCf65YR5Fnr/UATE/DSB9LQrJfDWRv4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJq5bp3h31J7wc1LfE5IqG0RbALSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWNhMzI4YjAtMDQwYi0z NzNiLWE3NjgtZjQyZTViMTdjZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6xWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzdy/Cp5/B6OsCnqu/OKtfkKpv8/kGvcH6H7z74MTAp0wmNU7dFgS9U o7xayoWWzJkvvd8I14Ah/mrzmt0358klGB9xRZfs+J/1kIlr12qRxddbHvlt2Wgw bvJmkEqS7gdWseAtB0Py7cHzPCwkilO1ZHzxzqaXsrhQjC3omopDK8w6LfirHyif w0vjrqgejYZVXjxr6ohHNL1HeW0VNfrWQ3Bb7t3YTp4EJ89dvPG4LRCK44s773eN 5n3fmK2UhOHnxXAAUvSadkuFd9Vg9l8j+FnHnu11ORRvJ4rFm9zKjkASxgBnj4mL spjOlZl592Ib04/CKOsBj1mFWuYFch0= -----END CERTIFICATE-----Generated at Wed Jun 4 23:55:37 2025 by rpki-client