$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a25acf7e-3571-3ee9-8bb8-67166c7e1bf3.roa File: a25acf7e-3571-3ee9-8bb8-67166c7e1bf3.roa (raw, json) Hash identifier: CeYkcpYqZescO7N4+B9kKZ9U7c/wNhk5Wh8heCTjV+4= Subject key identifier: 5C:89:6B:8F:E4:52:54:D3:BD:25:2F:4A:68:A9:31:D3:B1:70:F2:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FCEB51BD133534F2BCE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a25acf7e-3571-3ee9-8bb8-67166c7e1bf3.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 71.56.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:ce:b5:1b:d1:33:53:4f:2b:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=333a763c-8931-4216-81a9-1230bb290ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f4:74:3e:e1:98:9d:87:70:89:a1:2a:9d:e9: 5c:76:4b:b0:40:b8:88:c4:32:f1:de:cb:32:41:2d: 63:2a:7e:59:16:fb:2e:84:e0:f0:60:3b:5d:c5:aa: 7b:3f:8e:50:9d:89:88:74:61:5d:80:6e:f3:5b:92: 22:15:6b:05:34:c6:33:7a:6f:80:4a:21:e2:be:1d: c6:dd:77:82:82:34:22:bf:41:b8:20:ed:15:95:10: f0:11:59:02:71:47:d1:f0:e4:db:3c:8a:d9:72:4d: 22:36:89:44:68:31:df:8e:e0:b8:c5:92:c2:bd:00: da:90:5d:17:94:db:43:ae:9a:2f:1b:0e:86:bc:3a: 63:b4:95:7a:e4:17:e7:92:33:87:b3:4e:23:f4:2c: e1:73:1f:c4:b2:6f:1f:0b:96:84:1b:d7:30:74:05: a9:20:9a:74:b8:d4:97:39:2f:14:cf:9b:35:b1:5a: bd:4d:74:17:61:ad:97:42:9d:ed:d0:ef:39:19:08: ab:cc:b1:03:4d:1c:25:72:c0:b1:3f:4a:97:ba:10: fb:f1:bb:3f:88:7a:bb:67:ae:63:42:07:22:d2:87: 52:35:56:84:5f:dd:ab:5a:ca:7d:39:d1:d6:7c:94: 30:9f:b3:9d:7a:52:07:8b:a3:51:5c:81:11:c5:f3: 57:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:89:6B:8F:E4:52:54:D3:BD:25:2F:4A:68:A9:31:D3:B1:70:F2:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a25acf7e-3571-3ee9-8bb8-67166c7e1bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.56.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:27:09:de:a3:0e:49:ce:8a:d2:b6:8c:0c:16:a7:a3:76:5a: 8d:90:40:b2:84:51:92:fc:c6:dc:af:a6:6b:17:a1:7a:06:a0: 1e:a7:eb:b0:fb:5b:09:b4:ff:44:22:f2:5d:8e:28:69:33:50: f6:9f:27:cb:92:7a:c9:7e:70:6d:5b:f3:f0:14:65:d8:b0:47: 88:9b:c4:a8:e1:6d:cd:33:6c:9b:fc:87:e7:08:07:bb:fb:d8: f8:71:2f:ab:6b:70:18:f0:cf:8f:b6:d8:9f:4b:1e:90:04:19: 8c:d6:cc:3b:8d:05:1a:d0:d9:8d:5c:89:e1:28:f9:10:80:2b: 5f:43:d7:86:e2:43:f6:44:5a:a8:63:0a:c0:68:e8:aa:80:39: 46:9a:01:66:0b:fb:14:bd:3f:3a:aa:05:43:2a:a2:ee:16:67: e7:37:8d:86:50:6a:94:8c:bb:b1:41:48:08:d6:05:02:e5:04: 5f:73:ee:e5:84:8c:a8:d4:a6:0a:b9:3f:a2:72:10:11:84:dc: 19:a5:48:f4:64:8f:ce:6b:fd:52:54:ad:bb:07:4d:f4:4a:82: 6d:1b:1d:80:b5:5f:0e:e3:78:4e:84:90:df:b0:5e:b6:75:e7: ce:bd:e8:b1:e6:e2:7b:de:9e:a6:04:e0:06:8f:8c:14:33:9a: e3:ef:5d:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL861G9EzU08rzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MzMzYTc2M2MtODkzMS00MjE2LTgxYTktMTIzMGJiMjkwYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfR0PuGYnYdwiaEqnelcdkuwQLiIxDLx3ssy QS1jKn5ZFvsuhODwYDtdxap7P45QnYmIdGFdgG7zW5IiFWsFNMYzem+ASiHivh3G 3XeCgjQiv0G4IO0VlRDwEVkCcUfR8OTbPIrZck0iNolEaDHfjuC4xZLCvQDakF0X lNtDrpovGw6GvDpjtJV65BfnkjOHs04j9Czhcx/Esm8fC5aEG9cwdAWpIJp0uNSX OS8Uz5s1sVq9TXQXYa2XQp3t0O85GQirzLEDTRwlcsCxP0qXuhD78bs/iHq7Z65j Qgci0odSNVaEX92rWsp9OdHWfJQwn7OdelIHi6NRXIERxfNXFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyJa4/kUlTTvSUvSmipMdOxcPINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTI1YWNmN2UtMzU3MS0z ZWU5LThiYjgtNjcxNjZjN2UxYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRziaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUnCd6jDknOitK2jAwWp6N2Wo2QQLKEUZL8xtyvpmsXoXoGoB6n67D7 Wwm0/0Qi8l2OKGkzUPafJ8uSesl+cG1b8/AUZdiwR4ibxKjhbc0zbJv8h+cIB7v7 2PhxL6trcBjwz4+22J9LHpAEGYzWzDuNBRrQ2Y1cieEo+RCAK19D14biQ/ZEWqhj CsBo6KqAOUaaAWYL+xS9PzqqBUMqou4WZ+c3jYZQapSMu7FBSAjWBQLlBF9z7uWE jKjUpgq5P6JyEBGE3BmlSPRkj85r/VJUrbsHTfRKgm0bHYC1Xw7jeE6EkN+wXrZ1 58696LHm4nvenqYE4AaPjBQzmuPvXcg= -----END CERTIFICATE-----Generated at Tue Jun 3 05:48:12 2025 by rpki-client