$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91e498b6-add8-3e1b-b460-2eacd080e8ea.roa File: 91e498b6-add8-3e1b-b460-2eacd080e8ea.roa (raw, json) Hash identifier: tEzvLSQCkEQOTiTJSi2Nvns3QeHHZQuL17vcAv2ezDo= Subject key identifier: 24:40:98:04:3E:0A:40:0A:7A:8C:B0:5C:E2:BF:85:EC:B6:B0:7D:59 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C057E0E547F737F1FF77280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91e498b6-add8-3e1b-b460-2eacd080e8ea.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33660 IP address blocks: 67.161.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:7e:0e:54:7f:73:7f:1f:f7:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=ab0bacc8-599f-4e72-9e8d-5a3223f4c95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:ca:a3:fe:72:3d:49:13:29:70:6e:0b:ec:de: 4c:29:3d:2a:57:ea:93:6a:20:19:91:93:6e:f9:27: 97:12:a9:c4:6d:78:48:45:af:1e:06:0c:e9:59:dc: 10:ec:35:db:a0:4a:eb:f1:78:12:fa:54:65:f2:66: a1:64:ed:71:7c:a7:51:45:5b:54:3d:f1:6f:30:9a: dd:ae:57:d5:92:ca:06:eb:7e:c0:ca:8a:80:5f:48: c5:6f:25:71:b5:01:85:47:19:19:89:43:98:1f:61: 6f:a0:ba:ba:1c:4c:65:7d:33:aa:eb:a6:29:35:88: 63:09:1b:06:b6:8c:da:73:77:7b:1b:70:77:9d:6a: ec:9d:85:42:e8:c6:76:13:54:a6:23:d3:b3:1f:c6: bb:b1:88:c5:cf:c6:fc:ec:a1:e3:ff:6a:77:df:16: be:f0:28:ac:4c:98:13:af:29:08:c4:22:50:ec:c3: 9c:6b:f6:b0:8e:2c:35:f0:34:74:51:e5:8f:17:02: de:e9:6e:0e:02:cc:1a:16:9c:b8:7a:eb:8b:27:7e: 21:5b:fb:a4:f5:29:bd:b7:93:0b:10:73:a4:9d:c7: e3:e3:35:ac:f3:64:ed:04:91:41:ed:2b:b7:a8:e1: 3b:c0:e2:84:10:39:e5:b0:fd:a3:aa:bd:e7:41:bb: dd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:40:98:04:3E:0A:40:0A:7A:8C:B0:5C:E2:BF:85:EC:B6:B0:7D:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91e498b6-add8-3e1b-b460-2eacd080e8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.161.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:95:19:e4:eb:9e:d7:c3:b2:c7:2d:0b:0a:91:f6:f4:a0:af: ec:9b:b7:c1:a2:4c:f9:af:91:f4:52:53:22:e9:bd:2c:17:e3: 35:b5:c4:eb:cf:ed:13:9d:90:db:5a:ae:ec:6e:42:25:40:5e: a9:71:b5:f8:20:c0:74:49:79:0b:57:86:0b:77:5b:2b:7f:08: ca:ce:35:46:34:7c:f1:74:a7:3f:a7:57:72:47:19:60:01:e4: b5:c4:ed:15:76:04:9c:98:51:1e:0f:40:f5:97:65:3a:91:80: 5b:75:a0:ca:b0:96:f6:bb:99:a9:86:57:72:db:85:5b:9d:d0: 44:6b:0e:be:b2:e5:cf:c9:87:ac:ae:65:5b:a5:29:b1:d5:31: fc:c2:0b:fe:52:48:65:6f:8a:db:82:1b:7d:86:21:59:cf:0d: d2:fb:05:7c:b8:30:1a:c9:1a:1f:5c:59:9f:65:0c:76:e2:c1: 69:24:d9:dd:73:0b:b8:02:b1:cf:64:3f:a3:13:67:48:65:e7: 0b:40:61:62:bc:eb:a5:49:06:b2:bc:b0:11:e9:d2:14:89:e8: c0:ff:0f:fd:df:75:8a:54:f9:b3:35:b9:fa:4b:c9:9c:b0:3b: b0:54:20:95:cc:04:82:89:21:a5:b6:c2:12:48:b2:34:06:21: 6a:3a:a5:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBX4OVH9zfx/3coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YWIwYmFjYzgtNTk5Zi00ZTcyLTllOGQtNWEzMjIzZjRjOTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Mqj/nI9SRMpcG4L7N5MKT0qV+qTaiAZkZNu +SeXEqnEbXhIRa8eBgzpWdwQ7DXboErr8XgS+lRl8mahZO1xfKdRRVtUPfFvMJrd rlfVksoG637AyoqAX0jFbyVxtQGFRxkZiUOYH2FvoLq6HExlfTOq66YpNYhjCRsG tozac3d7G3B3nWrsnYVC6MZ2E1SmI9OzH8a7sYjFz8b87KHj/2p33xa+8CisTJgT rykIxCJQ7MOca/awjiw18DR0UeWPFwLe6W4OAswaFpy4euuLJ34hW/uk9Sm9t5ML EHOkncfj4zWs82TtBJFB7Su3qOE7wOKEEDnlsP2jqr3nQbvdaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRAmAQ+CkAKeoywXOK/hey2sH1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTFlNDk4YjYtYWRkOC0z ZTFiLWI0NjAtMmVhY2QwODBlOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6HQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6VGeTrntfDssctCwqR9vSgr+ybt8GiTPmvkfRSUyLpvSwX4zW1xOvP 7ROdkNtaruxuQiVAXqlxtfggwHRJeQtXhgt3Wyt/CMrONUY0fPF0pz+nV3JHGWAB 5LXE7RV2BJyYUR4PQPWXZTqRgFt1oMqwlva7mamGV3LbhVud0ERrDr6y5c/Jh6yu ZVulKbHVMfzCC/5SSGVvituCG32GIVnPDdL7BXy4MBrJGh9cWZ9lDHbiwWkk2d1z C7gCsc9kP6MTZ0hl5wtAYWK866VJBrK8sBHp0hSJ6MD/D/3fdYpU+bM1ufpLyZyw O7BUIJXMBIKJIaW2whJIsjQGIWo6pa8= -----END CERTIFICATE-----Generated at Wed Jun 4 22:53:55 2025 by rpki-client