$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/656586bf-2c6c-3cf4-ae27-ee9b7daa8825.roa File: 656586bf-2c6c-3cf4-ae27-ee9b7daa8825.roa (raw, json) Hash identifier: TnnQaiP+qRIlGJC/TkCkmJWOOMxHMU4O93hYrpF3N1s= Subject key identifier: 8E:5C:0F:F7:A6:CA:3E:94:33:B1:A2:1A:B0:29:FA:6F:86:5E:86:BA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43179DA7528517F26DAEA40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/656586bf-2c6c-3cf4-ae27-ee9b7daa8825.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 71.233.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:79:da:75:28:51:7f:26:da:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=d0efa6c5-9879-40e9-aa08-7168a6158618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:33:cf:0a:d8:6c:b9:73:19:22:42:88:e3:e4: e7:27:54:13:7a:93:e1:e0:82:9a:ba:e6:60:7e:c4: a5:a3:8f:1b:80:a0:c0:4b:12:ca:5f:fa:72:54:dd: bd:12:1c:fb:6d:6d:0a:58:ca:07:5a:4f:c5:aa:a7: a6:96:99:64:b3:54:da:93:1c:d2:e4:7f:b5:1e:ca: fe:a0:ae:e4:81:6c:3b:c2:9c:30:95:19:06:be:4e: 84:35:83:e7:d8:38:c5:29:a0:e4:1b:0f:54:cf:4c: e7:9a:54:94:c1:67:75:04:3c:10:64:4d:c8:36:e5: d5:d1:d7:18:b2:cf:5c:05:91:cd:b4:d3:fe:e2:9d: af:54:92:ea:40:5c:1a:38:92:7d:cb:a5:86:3e:7e: e4:b7:9a:0e:2a:1c:60:60:dc:48:36:5f:92:d3:07: ad:16:a3:2e:72:18:36:f5:cc:2b:18:e8:b9:33:8f: 4f:48:d5:a5:3c:05:1f:94:d1:b4:43:85:80:e6:5c: 36:cb:f3:9e:d2:57:61:d1:20:ce:b7:4d:17:d4:97: 64:6b:cb:6a:ae:a7:2b:54:d3:7a:6f:cc:36:f2:8a: 34:25:27:9e:20:2f:26:5d:17:55:4f:ef:da:9e:17: cc:5f:8f:76:5b:58:2d:64:6c:b1:24:68:2d:9e:08: 39:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5C:0F:F7:A6:CA:3E:94:33:B1:A2:1A:B0:29:FA:6F:86:5E:86:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/656586bf-2c6c-3cf4-ae27-ee9b7daa8825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.233.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:6c:5c:50:d0:a4:76:3c:c6:77:84:e3:89:78:4e:db:e8:e0: 57:cb:6f:5d:06:c4:a6:c2:2f:b1:20:d9:87:28:03:db:6e:d0: fc:2e:1d:1b:80:3e:d2:6b:8d:57:96:e5:75:13:90:4f:b2:8a: 6e:1a:eb:84:b4:a6:7c:2e:d0:9f:7a:a8:c1:23:79:39:df:45: 54:02:38:f6:06:d2:b5:a6:10:45:6b:0f:28:81:e1:8d:65:4c: d7:4a:e8:73:0c:3d:1a:eb:31:d3:dc:bf:cb:07:60:53:f2:b0: 15:37:1b:e9:01:64:31:7b:eb:67:47:2d:1f:43:57:79:cc:cb: e1:d2:fd:e0:5a:b0:76:1e:68:63:fd:f0:ac:f8:e1:37:cc:da: 0c:ec:62:2e:b3:9c:7d:5b:68:68:36:e9:27:d9:2e:75:4f:f6: 5d:01:ee:fa:9d:ce:75:dd:ca:50:d5:7c:e4:f6:0d:ad:9c:74: 99:34:9b:8e:e4:d8:9e:be:63:28:f2:bb:09:5a:0d:86:03:3d: a9:2e:06:d8:74:31:57:52:fd:b5:b4:55:ee:4b:d0:4a:1c:c1: 2e:5b:c1:70:f6:1a:be:b9:38:ed:e8:53:fb:da:62:92:6a:f2: 88:b8:cf:44:3d:be:34:53:66:81:82:0e:c3:7d:41:21:ac:3c: 98:38:56:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMXnadShRfyba6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDBlZmE2YzUtOTg3OS00MGU5LWFhMDgtNzE2OGE2MTU4NjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzPPCthsuXMZIkKI4+TnJ1QTepPh4IKauuZg fsSlo48bgKDASxLKX/pyVN29Ehz7bW0KWMoHWk/Fqqemlplks1TakxzS5H+1Hsr+ oK7kgWw7wpwwlRkGvk6ENYPn2DjFKaDkGw9Uz0znmlSUwWd1BDwQZE3INuXV0dcY ss9cBZHNtNP+4p2vVJLqQFwaOJJ9y6WGPn7kt5oOKhxgYNxINl+S0wetFqMuchg2 9cwrGOi5M49PSNWlPAUflNG0Q4WA5lw2y/Oe0ldh0SDOt00X1Jdka8tqrqcrVNN6 b8w28oo0JSeeIC8mXRdVT+/anhfMX492W1gtZGyxJGgtngg5yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5cD/emyj6UM7GiGrAp+m+GXoa6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjU2NTg2YmYtMmM2Yy0z Y2Y0LWFlMjctZWU5YjdkYWE4ODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+mYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtsXFDQpHY8xneE44l4Ttvo4FfLb10GxKbCL7Eg2YcoA9tu0PwuHRuA PtJrjVeW5XUTkE+yim4a64S0pnwu0J96qMEjeTnfRVQCOPYG0rWmEEVrDyiB4Y1l TNdK6HMMPRrrMdPcv8sHYFPysBU3G+kBZDF762dHLR9DV3nMy+HS/eBasHYeaGP9 8Kz44TfM2gzsYi6znH1baGg26SfZLnVP9l0B7vqdznXdylDVfOT2Da2cdJk0m47k 2J6+YyjyuwlaDYYDPakuBth0MVdS/bW0Ve5L0EocwS5bwXD2Gr65OO3oU/vaYpJq 8oi4z0Q9vjRTZoGCDsN9QSGsPJg4Vps= -----END CERTIFICATE-----Generated at Tue Jun 3 05:01:58 2025 by rpki-client