$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aacf35a9-068d-3d42-b21e-50d138e11bc6.roa File: aacf35a9-068d-3d42-b21e-50d138e11bc6.roa (raw, json) Hash identifier: gjXppdQhEBGG7tr5GTxLico1QFNVZpVzti0LORtQV4o= Subject key identifier: 90:52:18:07:83:D3:4C:EC:36:53:B5:D1:98:83:01:01:32:6E:58:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431754E9BD40C725F681D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aacf35a9-068d-3d42-b21e-50d138e11bc6.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 67.186.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:75:4e:9b:d4:0c:72:5f:68:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=2d7f730b-36b6-4497-b3dc-b1aa4c2f6f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:06:cc:1b:71:5d:19:89:9e:72:ea:2d:50:23: 27:55:c2:fd:35:aa:a9:9c:74:a3:7e:0d:a0:16:52: cf:4b:17:ce:f6:49:fa:9e:16:61:c4:6d:9f:7c:2d: 4a:bd:86:7a:d6:54:54:d2:fe:1d:ae:50:6d:e5:9d: 0f:99:72:08:09:63:7f:1b:76:ad:fe:91:75:37:76: 3e:40:5a:45:fc:28:76:d5:3a:74:4e:3b:63:27:77: a7:b9:72:10:7a:d1:de:ef:94:52:b6:76:a0:ae:4b: 17:a2:42:bd:77:f7:76:ae:b1:db:08:a3:17:14:d8: 16:5b:f9:ce:6c:b5:65:da:62:8c:43:37:78:20:5d: dd:e1:9d:a1:fd:64:b9:e6:ba:0f:a7:c1:0a:25:41: 07:66:9d:8f:e2:e0:a0:4d:7b:41:42:a1:86:dc:c0: e1:20:8c:67:de:b4:ff:ab:48:61:ed:39:2e:ec:96: 07:e6:cd:25:a5:63:88:9a:cd:1d:94:b3:7b:b0:8a: 30:ea:65:4b:1e:9d:b4:0f:b0:6e:bc:93:c3:7e:ca: cb:e3:89:93:86:3a:40:ee:5b:a3:8c:d3:ae:c4:b6: fe:cc:ef:a3:8a:6c:a0:fe:0a:55:d1:89:3f:e9:46: 52:b8:d3:1c:67:43:1d:88:8b:df:71:9c:15:b2:8a: fc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:52:18:07:83:D3:4C:EC:36:53:B5:D1:98:83:01:01:32:6E:58:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aacf35a9-068d-3d42-b21e-50d138e11bc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.186.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:3f:02:e3:c8:48:93:7b:7b:1a:0b:98:f0:89:60:af:1f:2f: 62:c7:18:be:89:88:60:37:1a:d5:10:71:d1:d4:40:9b:16:2e: ed:b2:3c:e4:ab:a7:95:fe:9e:9f:c9:47:67:d1:4c:8d:4d:7a: 5f:4c:1d:4f:af:e8:58:ea:b5:f4:04:10:79:0c:28:b0:5f:77: af:5a:02:1e:92:e4:67:01:f0:32:cf:cd:ba:b6:1b:0c:59:9a: cb:b9:49:f8:7f:35:f9:82:3f:fd:fc:22:ac:07:fa:ad:4b:26: 1c:c2:72:e9:fd:33:75:ad:82:b5:92:27:2d:f7:6d:06:07:85: 11:8f:39:78:1f:85:1e:60:e5:0f:9e:75:fb:b2:1d:77:ea:9d: 29:8c:8b:78:38:da:c0:73:ac:8a:f5:08:e8:a8:16:cf:71:d6: 68:01:ad:cd:c3:8f:c6:08:6b:ee:31:a4:2f:5b:02:21:10:25: 04:7c:2e:ca:dd:bf:cd:4a:5e:32:5b:ad:34:87:61:71:30:68: 51:50:81:0f:0a:aa:e7:78:13:b1:3c:60:98:d9:a8:90:84:0f: 77:fc:39:07:be:b1:59:f5:6f:69:2c:77:01:77:ee:69:49:13: a4:26:8d:be:23:53:f6:9d:86:db:f6:94:1a:05:46:d7:98:13: 32:bd:f8:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMXVOm9QMcl9oHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MmQ3ZjczMGItMzZiNi00NDk3LWIzZGMtYjFhYTRjMmY2ZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwbMG3FdGYmecuotUCMnVcL9NaqpnHSjfg2g FlLPSxfO9kn6nhZhxG2ffC1KvYZ61lRU0v4drlBt5Z0PmXIICWN/G3at/pF1N3Y+ QFpF/Ch21Tp0TjtjJ3enuXIQetHe75RStnagrksXokK9d/d2rrHbCKMXFNgWW/nO bLVl2mKMQzd4IF3d4Z2h/WS55roPp8EKJUEHZp2P4uCgTXtBQqGG3MDhIIxn3rT/ q0hh7Tku7JYH5s0lpWOIms0dlLN7sIow6mVLHp20D7BuvJPDfsrL44mThjpA7luj jNOuxLb+zO+jimyg/gpV0Yk/6UZSuNMcZ0MdiIvfcZwVsor8pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBSGAeD00zsNlO10ZiDAQEyblgiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFjZjM1YTktMDY4ZC0z ZDQyLWIyMWUtNTBkMTM4ZTExYmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7q8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0/AuPISJN7exoLmPCJYK8fL2LHGL6JiGA3GtUQcdHUQJsWLu2yPOSr p5X+np/JR2fRTI1Nel9MHU+v6FjqtfQEEHkMKLBfd69aAh6S5GcB8DLPzbq2GwxZ msu5Sfh/NfmCP/38IqwH+q1LJhzCcun9M3WtgrWSJy33bQYHhRGPOXgfhR5g5Q+e dfuyHXfqnSmMi3g42sBzrIr1COioFs9x1mgBrc3Dj8YIa+4xpC9bAiEQJQR8Lsrd v81KXjJbrTSHYXEwaFFQgQ8Kqud4E7E8YJjZqJCED3f8OQe+sVn1b2ksdwF37mlJ E6Qmjb4jU/adhtv2lBoFRteYEzK9+G0= -----END CERTIFICATE-----Generated at Tue Jun 3 04:58:04 2025 by rpki-client