$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad1bbd21-938e-348d-83f5-a3a1100e74e4.roa File: ad1bbd21-938e-348d-83f5-a3a1100e74e4.roa (raw, json) Hash identifier: GpyqHYRfFmczCKamSR3eC5x9ySvqK1z/pjtZPKpLEOI= Subject key identifier: B5:B5:27:E9:2F:1C:A8:CE:85:27:F2:5C:99:37:AB:DD:8A:7A:9B:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4323B2F3C3361887ABAD300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad1bbd21-938e-348d-83f5-a3a1100e74e4.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 174.171.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:3b:2f:3c:33:61:88:7a:ba:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=ff3634b0-b0a2-46a2-ae58-e185075538d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:e5:99:ef:90:7c:f5:8e:dd:95:f5:d4:c5: 6e:21:ec:f2:76:36:04:10:e6:36:11:66:25:19:1d: fc:0d:7f:26:77:4b:44:d8:ab:03:c0:39:29:67:3f: 2f:12:d7:dc:f1:6f:49:69:d9:32:f4:5e:b8:9d:7f: 0a:9e:14:28:81:a3:c6:10:65:4e:70:25:56:16:b0: f0:5a:07:84:ba:a6:27:e5:b0:1c:a6:b1:92:c6:74: 80:55:b2:cf:dd:72:ff:4d:f1:9d:b5:5b:b0:08:c2: b2:be:3b:8c:85:39:4f:72:a7:ff:00:27:76:b6:80: 4b:af:d3:fd:01:37:1e:a1:e8:be:f9:55:64:1d:b3: f7:56:5a:ad:70:1d:94:5b:30:0b:76:1a:db:81:f2: d3:91:dc:be:be:ea:2f:ae:03:3f:15:df:ae:11:87: a9:5c:43:51:02:b5:0f:8d:f5:5d:51:dd:74:f1:9a: c6:72:32:49:47:ff:36:e9:fe:87:33:74:0b:a6:23: a5:d9:2f:65:28:34:7e:33:2e:c7:0f:da:96:a8:05: 88:22:02:7d:9f:2d:e5:bb:69:7d:6e:be:68:3f:21: 2c:b2:30:5e:cf:92:89:5f:66:75:ae:99:92:df:3d: 5d:99:c6:54:9e:4c:74:06:ca:80:99:87:86:96:fa: 3d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B5:27:E9:2F:1C:A8:CE:85:27:F2:5C:99:37:AB:DD:8A:7A:9B:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad1bbd21-938e-348d-83f5-a3a1100e74e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:65:6c:f6:9c:18:be:5a:e7:b1:64:a6:bd:6e:8b:80:90:48: e7:09:ac:47:57:93:65:a9:45:f2:c3:d3:86:e3:34:49:87:b2: 0e:f5:8b:b4:29:95:d8:c3:11:98:f9:e7:9b:ed:9a:0d:11:10: 4e:9b:4c:fb:fe:7a:25:c8:a3:80:96:f0:4f:10:bc:10:cb:c5: 73:64:85:05:2b:ca:9d:af:99:63:43:77:0c:b2:ed:b3:b2:32: 34:93:f3:f5:5e:b9:32:24:38:82:1b:5a:48:a2:ac:41:fb:a0: 3c:15:7e:b2:17:4f:a6:1d:d5:b4:ee:1b:a0:43:6d:ce:fb:15: 9e:ed:ea:85:1b:bd:c6:16:28:3a:39:15:59:d1:38:a8:3f:8e: ac:85:22:f4:d9:98:5b:dc:be:05:cf:1d:be:85:98:50:34:c2: eb:b6:28:24:34:b8:23:11:6a:dc:89:43:14:09:7e:5f:ff:3e: 60:a3:c7:b3:26:e7:95:87:64:9d:6f:56:94:d1:20:18:f1:c1: 11:6b:8a:0f:c2:84:32:06:af:ac:85:b8:a0:5c:46:78:69:c8: 5c:8e:79:59:f2:0f:f1:6d:82:af:19:b0:d8:41:f0:eb:44:c4: b6:9d:bf:5c:81:5e:5d:f7:5d:09:c8:03:af:5c:ca:e8:83:58: f5:36:aa:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMjsvPDNhiHq60wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZmYzNjM0YjAtYjBhMi00NmEyLWFlNTgtZTE4NTA3NTUzOGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7zlme+QfPWO3ZX11MVuIezydjYEEOY2EWYl GR38DX8md0tE2KsDwDkpZz8vEtfc8W9Jadky9F64nX8KnhQogaPGEGVOcCVWFrDw WgeEuqYn5bAcprGSxnSAVbLP3XL/TfGdtVuwCMKyvjuMhTlPcqf/ACd2toBLr9P9 ATceoei++VVkHbP3VlqtcB2UWzALdhrbgfLTkdy+vuovrgM/Fd+uEYepXENRArUP jfVdUd108ZrGcjJJR/826f6HM3QLpiOl2S9lKDR+My7HD9qWqAWIIgJ9ny3lu2l9 br5oPyEssjBez5KJX2Z1rpmS3z1dmcZUnkx0BsqAmYeGlvo9jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLW1J+kvHKjOhSfyXJk3q92KeptPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWQxYmJkMjEtOTM4ZS0z NDhkLTgzZjUtYTNhMTEwMGU3NGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJplbPacGL5a57Fkpr1ui4CQSOcJrEdXk2WpRfLD04bjNEmHsg71i7Qp ldjDEZj555vtmg0REE6bTPv+eiXIo4CW8E8QvBDLxXNkhQUryp2vmWNDdwyy7bOy MjST8/VeuTIkOIIbWkiirEH7oDwVfrIXT6Yd1bTuG6BDbc77FZ7t6oUbvcYWKDo5 FVnROKg/jqyFIvTZmFvcvgXPHb6FmFA0wuu2KCQ0uCMRatyJQxQJfl//PmCjx7Mm 55WHZJ1vVpTRIBjxwRFrig/ChDIGr6yFuKBcRnhpyFyOeVnyD/Ftgq8ZsNhB8OtE xLadv1yBXl33XQnIA69cyuiDWPU2qss= -----END CERTIFICATE-----Generated at Tue Jun 3 04:59:10 2025 by rpki-client