$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a462840f-0304-30ed-8f85-a723fe539a1d.roa File: a462840f-0304-30ed-8f85-a723fe539a1d.roa (raw, json) Hash identifier: cUEuCnkbNiRR6PaE6viP+xe0CqNsUjD+1NL/njXmXQ8= Subject key identifier: 81:51:65:E4:32:73:00:24:BF:E6:76:A0:B5:E5:5F:C0:9B:B8:CC:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D1651AD15E633B6043351980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a462840f-0304-30ed-8f85-a723fe539a1d.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 22258 IP address blocks: 174.161.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:1a:d1:5e:63:3b:60:43:35:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=097a4bc3-26ec-4f87-9673-6263c1fbb6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d7:45:a4:fe:89:06:b0:e5:70:f4:95:12:a8: 42:95:71:b8:4b:20:d1:fc:0e:7f:7c:70:df:4f:57: c8:fa:3a:c4:7e:3b:23:1d:2a:d4:30:41:94:f1:a3: d2:11:d1:e8:2b:c5:ca:5c:36:ad:e9:d1:95:a8:07: ae:14:06:f4:2d:4f:6f:9e:99:b6:dc:73:35:18:32: 04:77:17:24:5b:62:5e:9a:08:96:d4:34:b1:dc:a1: db:02:26:62:7a:3a:3b:03:1e:34:03:0d:85:ac:3d: 35:54:7c:d1:8a:47:e5:d8:b1:bf:e3:c2:59:f6:5d: 8b:84:bd:80:bd:15:9a:9e:a3:00:d3:a2:c9:d9:8a: 58:a7:6f:40:c4:8d:be:79:2e:c2:fd:ea:6b:61:db: 5f:4c:25:e3:bb:59:7d:9e:2e:2b:ef:28:b9:78:e9: e6:85:91:05:aa:f6:03:67:8f:72:0f:1a:f3:8f:95: c4:ee:aa:35:25:47:70:68:5e:54:9d:23:d9:03:83: fa:16:15:6e:fb:d3:31:86:f4:a1:20:a3:76:a3:70: 7c:6c:53:df:39:b7:39:12:fc:f7:86:40:97:96:ec: c8:0e:36:5f:0b:65:7c:02:89:26:0c:66:65:2a:a8: 5d:96:6e:03:0e:d1:a3:3f:e7:06:77:6e:a6:a8:e5: de:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:51:65:E4:32:73:00:24:BF:E6:76:A0:B5:E5:5F:C0:9B:B8:CC:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a462840f-0304-30ed-8f85-a723fe539a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a9:f7:39:e9:7d:b9:94:29:8a:df:fc:c9:fe:e1:77:88:87: 61:8c:eb:03:f3:4d:ad:90:b2:a6:a1:f8:ed:7c:1a:51:04:7d: 6e:5c:03:25:ea:ac:ad:43:e4:6f:9e:e0:28:b1:95:b9:67:11: a0:6b:72:e7:60:a6:41:87:e5:32:f0:52:c4:66:8b:bc:5f:51: 59:3e:89:60:0f:2d:60:62:7e:f6:2e:9f:34:2c:bd:d5:9e:25: 1b:5a:f9:04:37:be:c5:5d:38:69:b3:8c:21:a4:0a:b0:b2:ef: 53:59:5b:55:1b:32:62:5b:bf:77:70:2e:6f:e5:62:0d:ec:81: 30:e8:44:e9:9b:fd:55:57:29:49:a6:3f:1b:34:d0:f2:15:4a: 64:8d:fb:b6:55:a2:e3:f6:06:99:3c:25:71:12:7e:18:92:e9: c8:aa:a5:62:dc:87:9f:20:6f:ca:28:5e:ea:64:ac:27:cd:95: 26:b7:26:72:0e:1b:69:82:8b:52:f1:50:06:17:84:bb:21:00: 20:76:27:4e:6c:fc:6a:a4:a5:f9:95:f8:52:e3:04:07:e2:58: a4:c8:34:ba:35:2d:1f:39:b9:b1:4b:aa:a6:23:6f:2d:36:6f: a3:37:1f:80:bb:2f:7c:53:24:a8:6e:60:fe:5b:0a:d6:67:b1: 3f:a8:e2:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRrRXmM7YEM1GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MDk3YTRiYzMtMjZlYy00Zjg3LTk2NzMtNjI2M2MxZmJiNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgddFpP6JBrDlcPSVEqhClXG4SyDR/A5/fHDf T1fI+jrEfjsjHSrUMEGU8aPSEdHoK8XKXDat6dGVqAeuFAb0LU9vnpm23HM1GDIE dxckW2JemgiW1DSx3KHbAiZiejo7Ax40Aw2FrD01VHzRikfl2LG/48JZ9l2LhL2A vRWanqMA06LJ2YpYp29AxI2+eS7C/eprYdtfTCXju1l9ni4r7yi5eOnmhZEFqvYD Z49yDxrzj5XE7qo1JUdwaF5UnSPZA4P6FhVu+9MxhvShIKN2o3B8bFPfObc5Evz3 hkCXluzIDjZfC2V8AokmDGZlKqhdlm4DDtGjP+cGd26mqOXeawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFRZeQycwAkv+Z2oLXlX8CbuMyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQ2Mjg0MGYtMDMwNC0z MGVkLThmODUtYTcyM2ZlNTM5YTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqHIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKp9znpfbmUKYrf/Mn+4XeIh2GM6wPzTa2Qsqah+O18GlEEfW5cAyXq rK1D5G+e4CixlblnEaBrcudgpkGH5TLwUsRmi7xfUVk+iWAPLWBifvYunzQsvdWe JRta+QQ3vsVdOGmzjCGkCrCy71NZW1UbMmJbv3dwLm/lYg3sgTDoROmb/VVXKUmm Pxs00PIVSmSN+7ZVouP2Bpk8JXESfhiS6ciqpWLch58gb8ooXupkrCfNlSa3JnIO G2mCi1LxUAYXhLshACB2J05s/GqkpfmV+FLjBAfiWKTINLo1LR85ubFLqqYjby02 b6M3H4C7L3xTJKhuYP5bCtZnsT+o4tk= -----END CERTIFICATE-----Generated at Wed Jun 4 23:10:33 2025 by rpki-client