$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e39670-7570-3e7b-807a-c0c10096a87d.roa File: 87e39670-7570-3e7b-807a-c0c10096a87d.roa (raw, json) Hash identifier: dk2W5nXOOaFSjkiJipR7m82d3kyPOUqieyblMmIQ1/A= Subject key identifier: 4B:33:63:E8:B7:76:6E:CA:CB:11:D5:3B:87:A1:11:E0:D5:E0:A8:46 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FCA4ACA68E3CE01ED9140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e39670-7570-3e7b-807a-c0c10096a87d.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 71.236.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:ca:4a:ca:68:e3:ce:01:ed:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=ce9212b9-df2a-4f7b-a25f-c7fb816a0f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:80:03:af:e5:28:4a:17:e0:86:34:28:60:4e: 07:68:39:c8:81:44:5f:91:3b:92:be:35:4c:56:d0: a8:c2:e5:ae:a2:d9:d6:0a:2d:8d:e8:fd:0b:46:9e: c7:53:52:27:00:b1:a0:28:63:57:c1:5f:7d:b4:16: 38:c3:aa:69:d0:2c:c8:17:09:65:70:ec:58:22:e7: 50:f6:d3:ca:b9:44:6a:3a:34:07:96:5f:75:da:37: c2:56:6d:42:5f:6e:2b:18:51:80:0d:26:96:9a:c4: 5b:46:90:8a:15:f8:fb:a2:20:cc:83:94:ee:ef:5a: d6:62:90:c0:aa:a5:79:01:ae:b3:70:8b:37:77:01: ef:03:60:9c:ae:ad:1c:90:d8:07:d3:fb:ba:25:01: b3:cb:74:e9:d9:c0:af:2c:ec:51:0d:02:e3:55:00: b9:7b:99:09:4c:ff:8e:e9:a6:56:1e:c3:79:bf:85: ca:32:88:05:57:ec:96:9d:b9:ea:06:b1:a4:fc:63: b3:31:98:be:c1:0d:a5:bf:fa:4a:7c:8b:da:9b:3b: 04:08:8f:23:ce:c5:09:cf:87:57:7b:70:4f:0e:62: 9d:79:3e:34:e1:69:9c:d8:20:5c:6e:a2:e3:19:22: 61:6c:99:13:47:9c:68:d8:62:4b:a7:6c:10:59:0d: 68:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:33:63:E8:B7:76:6E:CA:CB:11:D5:3B:87:A1:11:E0:D5:E0:A8:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87e39670-7570-3e7b-807a-c0c10096a87d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.236.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b1:3f:78:73:19:d3:0f:c7:0a:23:d4:6f:10:0a:f0:97:8b: c4:99:6b:90:81:57:cb:a0:a3:59:48:4c:5a:64:83:07:73:c9: 63:2b:d3:20:35:1d:0e:c5:01:fb:bb:26:de:2d:c5:5c:b2:fc: a7:8b:87:7a:91:1f:33:88:89:ac:1f:00:34:d7:5c:2c:78:bd: 1c:8e:64:01:84:87:59:40:e4:59:31:97:e3:91:06:6c:9e:85: c8:b5:98:be:cd:9a:26:d2:e4:32:26:db:55:47:80:d7:a7:eb: bb:11:57:a1:74:a7:3f:37:f6:93:1c:56:31:6f:37:53:96:fa: 24:4f:bb:14:13:c2:a6:f7:8b:55:c3:0a:46:4f:87:41:d5:5a: a9:d6:94:72:15:f1:da:86:f7:f6:78:90:98:52:2a:1a:58:5b: 9b:f1:dd:a2:c3:45:f5:52:4b:07:29:36:45:1f:44:90:cf:0b: 9c:d8:14:5a:51:48:ca:6b:b5:9a:98:62:f0:6a:62:0c:7e:d5: e3:53:18:b9:5d:e7:30:b4:42:6a:db:a8:59:c1:4e:c8:95:e8: fa:50:50:db:5f:15:cf:12:de:a7:14:7f:d6:2f:3d:84:66:61: 19:7e:6e:22:3c:e0:e9:25:ee:62:64:8c:97:1c:a3:a5:19:eb: c2:f9:12:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL8pKymjjzgHtkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2U5MjEyYjktZGYyYS00ZjdiLWEyNWYtYzdmYjgxNmEwZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIADr+UoShfghjQoYE4HaDnIgURfkTuSvjVM VtCowuWuotnWCi2N6P0LRp7HU1InALGgKGNXwV99tBY4w6pp0CzIFwllcOxYIudQ 9tPKuURqOjQHll912jfCVm1CX24rGFGADSaWmsRbRpCKFfj7oiDMg5Tu71rWYpDA qqV5Aa6zcIs3dwHvA2Ccrq0ckNgH0/u6JQGzy3Tp2cCvLOxRDQLjVQC5e5kJTP+O 6aZWHsN5v4XKMogFV+yWnbnqBrGk/GOzMZi+wQ2lv/pKfIvamzsECI8jzsUJz4dX e3BPDmKdeT404Wmc2CBcbqLjGSJhbJkTR5xo2GJLp2wQWQ1oiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEszY+i3dm7KyxHVO4ehEeDV4KhGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODdlMzk2NzAtNzU3MC0z ZTdiLTgwN2EtYzBjMTAwOTZhODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+zUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOxP3hzGdMPxwoj1G8QCvCXi8SZa5CBV8ugo1lITFpkgwdzyWMr0yA1 HQ7FAfu7Jt4txVyy/KeLh3qRHzOIiawfADTXXCx4vRyOZAGEh1lA5Fkxl+ORBmye hci1mL7NmibS5DIm21VHgNen67sRV6F0pz839pMcVjFvN1OW+iRPuxQTwqb3i1XD CkZPh0HVWqnWlHIV8dqG9/Z4kJhSKhpYW5vx3aLDRfVSSwcpNkUfRJDPC5zYFFpR SMprtZqYYvBqYgx+1eNTGLld5zC0QmrbqFnBTsiV6PpQUNtfFc8S3qcUf9YvPYRm YRl+biI84Okl7mJkjJcco6UZ68L5EjU= -----END CERTIFICATE-----Generated at Tue Jun 3 06:04:50 2025 by rpki-client