$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bbf0b6d-a382-3ed9-b4de-00217aa6c39b.roa File: 9bbf0b6d-a382-3ed9-b4de-00217aa6c39b.roa (raw, json) Hash identifier: XksxkK4QlZW3mNoJl1QRs1qkOZuSxI3Dumswfvng/1M= Subject key identifier: C5:4D:7E:A0:FE:6D:8B:34:2C:B0:19:93:77:0B:99:36:91:35:81:DB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FC3E03B00897DF0965F50 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bbf0b6d-a382-3ed9-b4de-00217aa6c39b.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 67.169.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:c3:e0:3b:00:89:7d:f0:96:5f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=434dbdfa-8970-43a9-9899-b82f6f25f9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:5d:a3:49:28:46:8d:8f:47:a0:76:cc:d7: 68:79:4e:9c:e7:9f:5d:15:4f:c9:90:c1:25:85:b2: fb:fc:d6:0e:42:f6:2b:2a:db:27:e4:f8:c4:54:ca: 36:64:cb:84:3d:c7:d3:da:0c:18:24:5d:b8:51:71: ca:4f:52:4e:89:4d:f4:80:fd:c1:f9:f8:4c:4b:06: fb:b0:18:95:91:c4:ce:84:d3:d8:7a:79:31:ce:1a: d1:fc:0b:62:29:c9:85:7f:f4:cf:b2:9e:a7:c0:3a: ff:4a:51:12:1c:95:d4:53:91:68:74:23:59:cc:3d: 75:b4:5f:b0:30:8e:e0:ee:7c:10:e1:82:21:a5:16: e0:c1:02:f0:49:42:94:f6:1d:53:0c:3e:b9:42:71: 21:c8:8b:58:ce:75:fc:1d:a5:07:c0:d3:84:17:5d: 94:cf:a0:26:23:97:6f:ba:b2:1b:d3:54:f4:22:e1: d1:5c:f6:90:00:6e:f8:f1:d7:cb:ef:22:2d:5d:ff: 6c:b4:12:c6:d7:18:dd:0b:50:04:25:2e:fd:f9:19: 67:97:4f:0a:d7:12:1d:6b:63:f9:07:c8:30:b6:74: de:cb:f5:c1:e4:87:97:68:67:ee:c4:e0:26:68:a8: 1c:5a:8f:4e:1c:aa:8f:8a:15:71:80:10:f1:af:d0: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4D:7E:A0:FE:6D:8B:34:2C:B0:19:93:77:0B:99:36:91:35:81:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bbf0b6d-a382-3ed9-b4de-00217aa6c39b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.169.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:78:82:6c:18:d8:57:02:50:df:e3:69:34:bb:6c:0c:90:f8: 9d:5d:d9:82:98:c6:47:14:b4:c7:cf:cd:d5:d7:43:42:45:b7: c4:b1:95:0b:fa:f6:f1:74:93:d1:5d:f9:d0:e2:ab:3e:93:94: 5b:e6:d5:75:6f:d7:45:c0:f0:f5:1a:59:dd:72:41:16:33:39: 6d:dd:42:d3:b2:8f:b9:8d:f6:9f:51:55:ed:98:44:9f:c0:dd: 14:a6:b1:9c:87:af:bb:87:d2:c7:47:0a:e8:ac:0c:aa:81:19: ba:91:14:d1:04:27:55:1f:27:57:82:35:cf:90:64:0e:d0:48: ef:50:65:c9:ac:2c:33:99:f2:63:6e:53:11:88:d6:d7:d0:49: 9c:90:05:44:c7:e5:d5:a2:d7:2e:27:e9:2e:12:1d:c7:f8:29: 45:8e:38:cd:16:ed:65:54:a6:14:35:c6:f1:67:78:5c:be:5e: 59:97:df:cb:b7:a1:87:18:3e:15:15:59:55:26:22:f8:42:1a: 87:0f:3b:0d:c4:e3:34:59:25:e2:7f:8f:00:83:f2:56:c5:ed: 08:20:c7:d8:1f:f6:00:b0:ef:6c:19:a0:25:d0:b6:31:15:14: 8a:1a:0c:75:59:42:56:1f:00:28:7b:fb:5a:49:86:1a:ba:5d: d5:15:17:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL8PgOwCJffCWX1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NDM0ZGJkZmEtODk3MC00M2E5LTk4OTktYjgyZjZmMjVmOWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWVdo0koRo2PR6B2zNdoeU6c559dFU/JkMEl hbL7/NYOQvYrKtsn5PjEVMo2ZMuEPcfT2gwYJF24UXHKT1JOiU30gP3B+fhMSwb7 sBiVkcTOhNPYenkxzhrR/AtiKcmFf/TPsp6nwDr/SlESHJXUU5FodCNZzD11tF+w MI7g7nwQ4YIhpRbgwQLwSUKU9h1TDD65QnEhyItYznX8HaUHwNOEF12Uz6AmI5dv urIb01T0IuHRXPaQAG748dfL7yItXf9stBLG1xjdC1AEJS79+Rlnl08K1xIda2P5 B8gwtnTey/XB5IeXaGfuxOAmaKgcWo9OHKqPihVxgBDxr9BkHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVNfqD+bYs0LLAZk3cLmTaRNYHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWJiZjBiNmQtYTM4Mi0z ZWQ5LWI0ZGUtMDAyMTdhYTZjMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6nIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx4gmwY2FcCUN/jaTS7bAyQ+J1d2YKYxkcUtMfPzdXXQ0JFt8SxlQv6 9vF0k9Fd+dDiqz6TlFvm1XVv10XA8PUaWd1yQRYzOW3dQtOyj7mN9p9RVe2YRJ/A 3RSmsZyHr7uH0sdHCuisDKqBGbqRFNEEJ1UfJ1eCNc+QZA7QSO9QZcmsLDOZ8mNu UxGI1tfQSZyQBUTH5dWi1y4n6S4SHcf4KUWOOM0W7WVUphQ1xvFneFy+XlmX38u3 oYcYPhUVWVUmIvhCGocPOw3E4zRZJeJ/jwCD8lbF7Qggx9gf9gCw72wZoCXQtjEV FIoaDHVZQlYfACh7+1pJhhq6XdUVF2s= -----END CERTIFICATE-----Generated at Tue Jun 3 05:20:54 2025 by rpki-client