$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b673e02-c45b-3756-9a57-ed9683cc86c9.roa File: 7b673e02-c45b-3756-9a57-ed9683cc86c9.roa (raw, json) Hash identifier: FtauHGR07Bb1w/LsNYeSUf7C6s4/aXiBb8Vbqm3CfCw= Subject key identifier: 57:B2:85:F0:C1:FD:5B:A0:6F:24:1E:4B:47:D1:F1:3A:CA:D9:D1:47 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF753EC9BF9E2ED3218E7E40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b673e02-c45b-3756-9a57-ed9683cc86c9.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 7725 IP address blocks: 71.199.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:3e:c9:bf:9e:2e:d3:21:8e:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=997931d3-84f3-497a-8186-a5bf36957a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fb:cf:84:9f:cb:e5:4e:10:cf:9d:cf:5f:c0: f8:88:a7:90:cb:3a:8c:53:4b:09:73:8b:f0:23:4c: 39:92:fc:8d:e0:9d:89:f7:1f:10:0b:3c:5d:6b:26: fe:99:87:4e:41:4b:47:d9:b2:18:d9:14:ed:f1:7a: 19:4c:61:b3:fb:4f:9e:fe:f9:7d:a9:e5:6f:e6:65: d8:56:67:30:4e:97:35:04:9f:f4:f2:c4:54:39:9a: a6:de:0d:97:28:c4:ad:e6:ff:c7:27:2e:a7:ea:29: 46:5a:9e:8c:5d:c2:02:8f:c6:75:e9:95:8e:a7:f6: 87:52:3d:7b:73:a9:7f:59:c8:aa:78:25:d1:14:97: 1a:4e:fb:89:f4:5f:8c:9a:ae:e0:13:83:d1:54:55: d8:05:16:b0:f1:bf:45:5b:bd:34:45:74:88:cd:9a: 37:9a:0f:af:75:2c:6f:5b:41:b8:f7:9f:20:07:71: 02:6a:e4:92:0e:69:94:3f:37:92:17:15:9f:72:52: 5a:4f:cb:e6:8f:4f:52:a6:42:83:ce:e4:03:62:3d: 9f:a5:19:94:64:96:d7:fc:2f:34:46:40:a8:d9:cd: d9:49:03:75:85:43:10:03:c2:f5:70:55:e2:61:7b: 95:21:66:32:0c:03:5d:45:9b:56:82:b2:ae:9c:0f: 91:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B2:85:F0:C1:FD:5B:A0:6F:24:1E:4B:47:D1:F1:3A:CA:D9:D1:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7b673e02-c45b-3756-9a57-ed9683cc86c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.199.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:84:24:38:2d:58:26:2d:36:cc:2e:fc:78:96:74:6d:44:9b: 15:40:03:ed:37:bc:2a:a9:75:eb:17:00:78:f3:4d:b1:2a:ad: e5:a1:15:e8:42:73:ef:b6:20:76:f6:6f:62:9b:ed:50:02:f9: 8c:f9:09:0b:06:ca:25:a2:bf:aa:1c:c4:b2:01:19:4f:1c:46: cd:83:92:e6:84:e8:23:43:f5:ac:44:7f:97:12:20:26:bd:8f: e8:b7:b5:c4:5e:ca:44:48:a9:b4:0b:bc:34:cb:12:b5:f3:e1: 2d:cf:43:5a:1d:51:b9:5e:97:2c:c2:6a:5e:b6:9d:4f:f8:ac: 52:bf:dd:15:1b:ae:d1:63:b9:77:21:4a:fc:5f:15:3d:72:00: 11:71:ed:cd:58:62:f4:fc:96:05:d9:46:69:94:0f:c3:75:85: d2:00:0a:3d:40:dc:8c:16:35:0d:b9:95:bc:95:5f:ae:1c:e2: eb:ee:3d:31:2f:de:76:98:41:30:ad:05:35:3a:32:20:cf:af: a7:22:90:6a:fb:54:94:c6:58:49:37:07:83:48:5b:a1:34:15: 62:6f:99:ee:1a:f2:00:af:9f:70:a1:2f:45:7a:09:74:2d:2a: 35:7d:a2:03:64:d6:24:b5:ca:b1:ae:cc:00:0f:e8:f8:68:b0: 61:20:8f:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dT7Jv54u0yGOfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk OTk3OTMxZDMtODRmMy00OTdhLTgxODYtYTViZjM2OTU3YTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/vPhJ/L5U4Qz53PX8D4iKeQyzqMU0sJc4vw I0w5kvyN4J2J9x8QCzxdayb+mYdOQUtH2bIY2RTt8XoZTGGz+0+e/vl9qeVv5mXY VmcwTpc1BJ/08sRUOZqm3g2XKMSt5v/HJy6n6ilGWp6MXcICj8Z16ZWOp/aHUj17 c6l/WciqeCXRFJcaTvuJ9F+Mmq7gE4PRVFXYBRaw8b9FW700RXSIzZo3mg+vdSxv W0G4958gB3ECauSSDmmUPzeSFxWfclJaT8vmj09SpkKDzuQDYj2fpRmUZJbX/C80 RkCo2c3ZSQN1hUMQA8L1cFXiYXuVIWYyDANdRZtWgrKunA+R9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeyhfDB/VugbyQeS0fR8TrK2dFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2I2NzNlMDItYzQ1Yi0z NzU2LTlhNTctZWQ5NjgzY2M4NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR8e/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqEJDgtWCYtNswu/HiWdG1EmxVAA+03vCqpdesXAHjzTbEqreWhFehC c++2IHb2b2Kb7VAC+Yz5CQsGyiWiv6ocxLIBGU8cRs2DkuaE6CND9axEf5cSICa9 j+i3tcReykRIqbQLvDTLErXz4S3PQ1odUblelyzCal62nU/4rFK/3RUbrtFjuXch SvxfFT1yABFx7c1YYvT8lgXZRmmUD8N1hdIACj1A3IwWNQ25lbyVX64c4uvuPTEv 3naYQTCtBTU6MiDPr6cikGr7VJTGWEk3B4NIW6E0FWJvme4a8gCvn3ChL0V6CXQt KjV9ogNk1iS1yrGuzAAP6PhosGEgj4s= -----END CERTIFICATE-----Generated at Tue Jun 3 05:01:41 2025 by rpki-client