$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e65bea6-46b5-35aa-8e22-722a2d3aba24.roa File: 7e65bea6-46b5-35aa-8e22-722a2d3aba24.roa (raw, json) Hash identifier: go1t9RfIFDSVk1XVQwz6VO2Nh61VOkMvcVt/4KDwBXo= Subject key identifier: 76:E0:BC:54:5D:A2:40:44:76:4B:6D:DE:3C:11:A6:C6:6F:70:7F:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C07CDD80CA794E827DCE250 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e65bea6-46b5-35aa-8e22-722a2d3aba24.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 67.165.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:cd:d8:0c:a7:94:e8:27:dc:e2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=1b9ede0e-f335-4889-9b9f-77984f8f6b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:9e:56:3a:12:4c:c8:97:ba:cf:5b:9b:f8: b1:49:1c:15:69:1a:e2:c0:66:9c:c3:ea:1d:d0:62: fe:bd:78:84:db:39:a4:aa:ca:52:0a:12:40:c9:23: 12:ec:da:c0:2c:cb:23:bc:6a:b6:02:84:01:ad:29: 38:a3:96:79:c7:a2:1f:34:d3:62:5c:99:cb:3a:11: b0:01:a1:2d:02:cc:ec:66:b4:4e:fb:3d:3a:50:d2: 72:51:32:e8:56:dd:4a:55:e5:da:d0:49:45:d1:21: c7:65:8b:a5:4f:00:d7:30:d8:24:3e:17:11:6f:94: f7:50:01:38:5b:29:00:95:9c:b5:8c:ab:0c:16:67: e6:86:a9:fd:dc:62:2c:75:0e:2a:61:22:d2:0f:70: 9a:55:db:e5:ae:fd:1a:b7:60:8e:ed:53:c9:56:1f: 1b:4d:9c:d9:46:76:29:11:fb:63:4f:57:f9:77:b2: 66:89:c9:3c:09:41:84:a8:e9:a3:e0:89:aa:64:5c: c1:eb:51:a0:b8:2d:e7:98:d6:b9:1c:54:e0:ec:98: 6d:54:d7:b9:ad:9b:56:ad:34:3b:97:db:0c:d3:c8: d4:27:70:5a:3d:d1:cd:0c:8a:a9:6f:cb:df:f9:11: e4:ba:50:06:ae:10:61:57:62:2f:2b:44:3e:66:3d: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E0:BC:54:5D:A2:40:44:76:4B:6D:DE:3C:11:A6:C6:6F:70:7F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e65bea6-46b5-35aa-8e22-722a2d3aba24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.165.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c6:eb:8a:e9:d8:89:50:68:4d:48:29:a0:ac:8a:53:cb:fd: 35:c8:cb:16:36:48:7a:8f:d0:e0:33:a3:34:bd:5a:1e:b0:64: 63:25:11:de:d4:b4:db:0d:31:a3:90:f1:de:c1:66:b1:64:cf: 84:db:43:ea:bf:b4:9e:61:82:bf:29:d2:7d:2e:ca:bd:f3:df: 09:69:4c:90:41:de:54:d6:56:44:c7:74:7a:7e:f1:45:39:44: 0b:48:6f:db:47:3b:fe:15:27:c7:23:54:31:3b:84:92:24:a5: 98:54:cb:d0:83:69:ba:c5:18:7f:dc:6b:a1:43:7a:76:03:a4: fe:00:cc:f7:67:4f:6c:91:3b:74:65:ea:65:ce:33:10:01:a2: 84:bc:49:c1:cf:e3:58:c4:42:5d:56:2f:f8:4b:71:74:56:98: 13:b4:f1:95:bd:dd:a5:e7:d3:2e:87:ff:a8:55:1b:36:e1:29: ae:90:88:a1:e2:94:f6:ea:14:62:d2:b3:e2:53:72:d4:9d:48: 77:9c:f3:8c:ca:26:31:85:14:75:01:aa:42:a9:99:a0:b0:ad: 1c:6f:6c:af:b0:ce:07:08:40:12:7c:55:0f:15:29:cf:f0:04: 9e:c1:a3:2a:e8:18:6c:9b:ce:ea:fa:f5:ea:23:97:df:42:4e: 8c:07:a0:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB83YDKeU6Cfc4lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MWI5ZWRlMGUtZjMzNS00ODg5LTliOWYtNzc5ODRmOGY2YjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstCeVjoSTMiXus9bm/ixSRwVaRriwGacw+od 0GL+vXiE2zmkqspSChJAySMS7NrALMsjvGq2AoQBrSk4o5Z5x6IfNNNiXJnLOhGw AaEtAszsZrRO+z06UNJyUTLoVt1KVeXa0ElF0SHHZYulTwDXMNgkPhcRb5T3UAE4 WykAlZy1jKsMFmfmhqn93GIsdQ4qYSLSD3CaVdvlrv0at2CO7VPJVh8bTZzZRnYp EftjT1f5d7Jmick8CUGEqOmj4ImqZFzB61GguC3nmNa5HFTg7JhtVNe5rZtWrTQ7 l9sM08jUJ3BaPdHNDIqpb8vf+RHkulAGrhBhV2IvK0Q+Zj2VlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbgvFRdokBEdktt3jwRpsZvcH+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2U2NWJlYTYtNDZiNS0z NWFhLThlMjItNzIyYTJkM2FiYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6WCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXG64rp2IlQaE1IKaCsilPL/TXIyxY2SHqP0OAzozS9Wh6wZGMlEd7U tNsNMaOQ8d7BZrFkz4TbQ+q/tJ5hgr8p0n0uyr3z3wlpTJBB3lTWVkTHdHp+8UU5 RAtIb9tHO/4VJ8cjVDE7hJIkpZhUy9CDabrFGH/ca6FDenYDpP4AzPdnT2yRO3Rl 6mXOMxABooS8ScHP41jEQl1WL/hLcXRWmBO08ZW93aXn0y6H/6hVGzbhKa6QiKHi lPbqFGLSs+JTctSdSHec84zKJjGFFHUBqkKpmaCwrRxvbK+wzgcIQBJ8VQ8VKc/w BJ7BoyroGGybzur69eojl99CTowHoAk= -----END CERTIFICATE-----Generated at Tue Jun 3 05:49:26 2025 by rpki-client