$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88a0bf11-4738-330c-8e4f-7bc6ea3cfdc7.roa File: 88a0bf11-4738-330c-8e4f-7bc6ea3cfdc7.roa (raw, json) Hash identifier: p06BvamRu33YBwp6HGkAirUCeKIQbvjpzlVkITeWO98= Subject key identifier: DD:46:E2:B5:49:CE:F0:C1:34:51:42:9A:A0:F7:D8:43:C5:03:5A:E0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431356570144CD2AFC02C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88a0bf11-4738-330c-8e4f-7bc6ea3cfdc7.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 71.193.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:35:65:70:14:4c:d2:af:c0:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=7b9e1a19-75ca-4032-89ae-d098cbc6354b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9e:4c:59:6d:55:9d:93:3b:73:4d:f4:7c:f1: cf:88:61:f4:38:f4:5f:92:5e:ab:77:75:1a:8a:20: ca:49:1d:5c:18:0b:a0:74:fe:6f:17:9b:ce:65:0b: 31:40:84:92:e1:b0:24:76:d4:91:e9:91:8f:c6:98: d1:85:34:2a:f9:76:ba:fa:fb:b4:68:94:ed:a8:79: 2e:4c:8f:27:8b:af:d3:ed:ef:81:48:9b:bc:55:d4: 10:a7:1e:03:f9:05:7a:be:b7:31:9f:d3:2f:23:5c: f8:63:69:b1:21:ec:47:67:2a:66:f9:59:dd:d0:40: 4a:e0:ca:a4:92:6d:33:b7:81:28:f1:bf:4c:14:71: d1:bf:ac:9f:70:2d:0e:ac:ee:5f:7e:b4:69:a1:cc: b0:95:98:95:fd:0b:c7:8d:69:18:b1:69:e4:d2:cf: e2:f8:4d:75:72:53:68:84:70:84:7d:64:07:2f:f9: 79:51:d7:a4:81:1c:8f:f3:52:d6:52:de:63:3a:08: b0:2b:92:73:83:45:06:1e:ed:12:f9:da:58:9e:c5: d9:64:35:d0:88:06:3f:38:0a:13:64:4c:78:cc:95: b3:a7:18:bb:5b:5f:8c:07:98:35:9e:61:03:f6:35: fa:f0:94:d0:4f:8a:59:c2:da:ea:24:33:9f:68:51: e0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:46:E2:B5:49:CE:F0:C1:34:51:42:9A:A0:F7:D8:43:C5:03:5A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88a0bf11-4738-330c-8e4f-7bc6ea3cfdc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.193.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:63:63:60:e7:bd:99:4e:f0:c8:bc:5b:2c:31:c7:4e:32:80: e2:34:ff:30:6f:13:b1:89:f6:a0:7b:e0:68:80:bd:18:2f:e5: 57:40:f3:35:24:c5:5f:32:6d:ed:3d:c4:b2:73:91:bf:4b:7a: 8f:1c:c8:1b:5a:ad:2a:fe:b4:a5:4e:7a:47:fb:76:54:bc:64: c8:5d:d2:46:2b:25:e0:0f:5e:d2:59:78:52:3c:f0:13:0b:ec: 69:2e:d5:08:84:6c:cd:1d:67:6d:35:d5:b4:cc:22:0f:bc:9c: 5f:66:00:3e:ea:d3:f9:35:db:db:8b:b1:19:5e:b3:fc:07:32: a6:1e:ff:e0:d8:da:95:d0:d2:29:83:63:32:68:05:7e:62:9c: b5:8c:f7:64:3a:1d:6d:e4:31:99:88:40:b3:e3:60:f7:17:84: 77:c3:74:b0:6c:15:f2:0e:f4:9e:7a:8a:c4:e1:96:0a:6f:ca: c9:95:d4:e3:22:ed:53:cb:96:4d:6d:58:f7:b0:20:06:43:dd: 9f:2a:bf:d3:56:47:4c:14:a9:9d:80:a5:b8:dc:f3:98:be:a6: 68:e1:5e:0c:a2:1f:75:79:42:9c:0a:bc:9f:62:a8:48:83:e3: ef:3f:9f:f2:51:95:88:ff:5c:9c:65:ca:67:28:e4:df:22:7f: ae:fe:8d:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMTVlcBRM0q/ALIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk N2I5ZTFhMTktNzVjYS00MDMyLTg5YWUtZDA5OGNiYzYzNTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh55MWW1VnZM7c030fPHPiGH0OPRfkl6rd3Ua iiDKSR1cGAugdP5vF5vOZQsxQISS4bAkdtSR6ZGPxpjRhTQq+Xa6+vu0aJTtqHku TI8ni6/T7e+BSJu8VdQQpx4D+QV6vrcxn9MvI1z4Y2mxIexHZypm+Vnd0EBK4Mqk km0zt4Eo8b9MFHHRv6yfcC0OrO5ffrRpocywlZiV/QvHjWkYsWnk0s/i+E11clNo hHCEfWQHL/l5UdekgRyP81LWUt5jOgiwK5Jzg0UGHu0S+dpYnsXZZDXQiAY/OAoT ZEx4zJWzpxi7W1+MB5g1nmED9jX68JTQT4pZwtrqJDOfaFHgVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1G4rVJzvDBNFFCmqD32EPFA1rgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODhhMGJmMTEtNDczOC0z MzBjLThlNGYtN2JjNmVhM2NmZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8HEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhjY2DnvZlO8Mi8Wywxx04ygOI0/zBvE7GJ9qB74GiAvRgv5VdA8zUk xV8ybe09xLJzkb9Leo8cyBtarSr+tKVOekf7dlS8ZMhd0kYrJeAPXtJZeFI88BML 7Gku1QiEbM0dZ2011bTMIg+8nF9mAD7q0/k129uLsRles/wHMqYe/+DY2pXQ0imD YzJoBX5inLWM92Q6HW3kMZmIQLPjYPcXhHfDdLBsFfIO9J56isThlgpvysmV1OMi 7VPLlk1tWPewIAZD3Z8qv9NWR0wUqZ2Apbjc85i+pmjhXgyiH3V5QpwKvJ9iqEiD 4+8/n/JRlYj/XJxlymco5N8if67+jV0= -----END CERTIFICATE-----Generated at Tue Jun 3 05:35:57 2025 by rpki-client