$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a427bcc1-7b4a-39b1-b43c-48638905402f.roa File: a427bcc1-7b4a-39b1-b43c-48638905402f.roa (raw, json) Hash identifier: tVIJQeHczZUh1Ow1EPFbJumErRowhiiumO9PUMcVYCQ= Subject key identifier: 43:78:4A:E3:41:BC:73:3E:58:F8:6E:8E:0D:46:1D:95:7A:6F:1B:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4323B11626F06BAB5B79E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a427bcc1-7b4a-39b1-b43c-48638905402f.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 174.171.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:3b:11:62:6f:06:ba:b5:b7:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=29199eac-9a79-45d1-8718-b0fc636699c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:65:5c:0b:3d:c2:ed:e4:d7:0c:5f:4a:2e: b6:1c:56:d0:fa:2d:47:09:d3:5b:2c:25:bf:a0:6f: 5e:36:55:2b:a4:a6:76:cc:80:e8:c4:1e:f6:74:c1: 2c:cb:81:58:e8:28:4c:e1:8e:af:11:5e:e3:64:7b: cc:ca:48:4e:03:5d:5a:b1:ff:a1:a7:a5:c3:32:2c: 48:97:ad:ed:52:1f:c6:e2:1a:99:74:20:bb:39:49: 60:7b:21:4d:e3:ce:b7:db:1b:3f:f1:b1:96:16:ea: 51:bb:27:12:21:15:c8:ff:bf:ae:39:25:65:ad:df: 75:b9:c3:29:e6:4b:32:a7:02:54:b3:13:f2:bd:dd: 4e:0d:58:e1:d9:35:44:74:da:be:3b:ab:55:af:ee: 3a:4b:fc:f7:08:06:0f:7b:38:6b:2a:09:65:51:80: d6:b4:4c:7e:54:c7:e2:55:c6:ac:d6:3a:e0:41:d0: 16:ba:23:5b:fa:20:da:28:9c:65:c5:d6:86:a6:b9: d0:88:90:bd:16:e9:96:94:b0:3b:3b:4c:0c:c1:54: 9a:62:d5:3c:b0:bc:b7:22:d8:5a:38:1b:dd:7a:3a: d9:01:c8:19:a0:27:12:81:c4:29:db:ec:52:57:21: b2:71:56:2d:93:3a:26:4a:2e:cd:2d:cb:9f:83:0f: 6b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:78:4A:E3:41:BC:73:3E:58:F8:6E:8E:0D:46:1D:95:7A:6F:1B:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a427bcc1-7b4a-39b1-b43c-48638905402f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ef:87:f1:4d:7e:e0:71:d4:5d:83:d4:12:ce:31:b1:94:38: 1b:08:26:75:e3:5f:ba:6b:a4:45:8f:db:fb:39:5e:db:3f:29: 09:7d:bb:9e:88:2f:af:9e:e5:e4:20:4d:8b:56:05:ea:1a:28: ad:ca:39:49:e7:a9:f7:41:e1:87:87:f3:ef:7a:ae:e6:5a:ca: 99:96:d1:bd:4b:9c:df:c3:d7:97:49:08:6e:46:ef:0d:1d:47: 69:22:6a:22:29:3c:73:b1:4c:59:93:44:4c:0a:da:2f:7c:c1: 1e:99:ea:ca:ca:53:14:6e:2c:e8:45:a6:3b:0d:59:f8:f0:ef: 6f:f7:38:b8:b3:0c:81:0e:39:59:23:8c:d0:d5:79:e0:17:b8: e5:dc:7e:21:61:49:71:43:7d:04:fe:09:ae:9d:3a:e3:e4:04: 57:f7:de:78:4c:3d:fa:16:ab:00:81:99:1c:9b:90:19:e6:f5: a0:5f:e0:98:27:29:ff:c5:9c:e3:f1:88:14:ca:a3:73:7b:dc: 82:8f:ee:4a:97:30:a6:46:9a:ab:71:f7:b9:61:33:06:78:83: c7:1b:13:db:f4:06:7a:02:56:c3:5c:46:67:f2:c3:23:a1:67: 5e:95:13:5b:9f:38:40:c9:40:82:a0:34:81:35:57:3d:81:87: 5b:65:e4:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMjsRYm8GurW3ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjkxOTllYWMtOWE3OS00NWQxLTg3MTgtYjBmYzYzNjY5OWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPhlXAs9wu3k1wxfSi62HFbQ+i1HCdNbLCW/ oG9eNlUrpKZ2zIDoxB72dMEsy4FY6ChM4Y6vEV7jZHvMykhOA11asf+hp6XDMixI l63tUh/G4hqZdCC7OUlgeyFN48632xs/8bGWFupRuycSIRXI/7+uOSVlrd91ucMp 5ksypwJUsxPyvd1ODVjh2TVEdNq+O6tVr+46S/z3CAYPezhrKgllUYDWtEx+VMfi Vcas1jrgQdAWuiNb+iDaKJxlxdaGprnQiJC9FumWlLA7O0wMwVSaYtU8sLy3Itha OBvdejrZAcgZoCcSgcQp2+xSVyGycVYtkzomSi7NLcufgw9rUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN4SuNBvHM+WPhujg1GHZV6bxu/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQyN2JjYzEtN2I0YS0z OWIxLWI0M2MtNDg2Mzg5MDU0MDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPvh/FNfuBx1F2D1BLOMbGUOBsIJnXjX7prpEWP2/s5Xts/KQl9u56I L6+e5eQgTYtWBeoaKK3KOUnnqfdB4YeH8+96ruZaypmW0b1LnN/D15dJCG5G7w0d R2kiaiIpPHOxTFmTREwK2i98wR6Z6srKUxRuLOhFpjsNWfjw72/3OLizDIEOOVkj jNDVeeAXuOXcfiFhSXFDfQT+Ca6dOuPkBFf33nhMPfoWqwCBmRybkBnm9aBf4Jgn Kf/FnOPxiBTKo3N73IKP7kqXMKZGmqtx97lhMwZ4g8cbE9v0BnoCVsNcRmfywyOh Z16VE1ufOEDJQIKgNIE1Vz2Bh1tl5Gg= -----END CERTIFICATE-----Generated at Wed Jun 4 23:13:30 2025 by rpki-client