$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeb322da-5bb5-3229-af8d-91ef5f48781d.roa File: aeb322da-5bb5-3229-af8d-91ef5f48781d.roa (raw, json) Hash identifier: as/agJj+LsS36/OC8XzxRVChG8OmYS4wYoINvXSdCKg= Subject key identifier: 40:3C:8E:FF:D8:37:C3:83:0B:81:2C:73:87:D5:DC:CE:9B:63:01:EB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C07F883F9BE49519B442F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeb322da-5bb5-3229-af8d-91ef5f48781d.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 71.201.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:f8:83:f9:be:49:51:9b:44:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=ecbe0af9-c05d-4de0-a4aa-dbf26a79d386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a7:a3:53:25:e7:ac:48:68:b7:9a:ee:b6:50: 88:99:e9:21:9a:61:70:d7:c5:fc:6b:1c:f3:c2:78: 3d:63:48:b0:3e:9f:95:4e:de:73:3b:86:54:2f:1e: 0f:51:ae:a8:be:57:64:e7:d5:cf:7e:3e:95:b4:51: ac:6b:7c:74:20:1e:57:d3:01:5d:20:f4:82:f3:c3: ef:7c:6f:ce:0f:be:9e:0e:bd:d4:ce:a9:28:47:fb: 78:8b:29:f2:2d:b5:37:4a:8f:13:f6:47:0c:fc:05: cc:b6:ea:de:94:78:47:28:83:af:bd:d6:ac:34:8c: 10:d5:07:d3:59:b4:70:bb:13:71:f5:10:2c:d5:4a: e7:35:54:88:f1:e0:a3:9a:da:17:75:c9:66:18:81: 96:52:99:62:36:d6:c8:ee:f6:4f:70:2d:cd:00:07: 93:13:3b:c8:2e:11:8a:1e:54:dd:5a:cd:6b:fe:1e: 90:59:b6:24:be:d8:36:ec:99:49:d3:03:57:86:2e: c9:df:f3:6c:e3:de:19:70:8d:c1:cc:c6:e5:29:3c: 92:88:e6:0f:04:39:85:9c:1e:0b:4a:1b:3a:46:91: 2a:60:a5:99:5c:36:3a:78:4e:19:6f:f5:23:f3:f8: a6:b4:0e:30:24:7c:47:d8:6a:3e:60:15:72:bc:d4: da:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3C:8E:FF:D8:37:C3:83:0B:81:2C:73:87:D5:DC:CE:9B:63:01:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aeb322da-5bb5-3229-af8d-91ef5f48781d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.201.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:59:23:0f:98:77:d6:3a:c5:a0:e4:39:72:47:76:99:be:a0: 34:19:f4:76:68:11:09:2e:2e:2a:a3:c2:3b:e3:c0:af:b3:0f: 3c:d3:b4:a4:5f:12:46:f3:e2:2b:43:08:a2:e6:66:86:9b:a1: 96:81:dc:3f:d4:3b:39:88:98:90:7c:16:e4:c4:78:0e:4e:ea: 2f:d0:94:49:5f:56:d6:2e:57:42:23:88:e1:a8:e1:52:0f:34: cd:a6:f2:e6:d7:37:fd:7e:cb:4b:2b:ac:bd:cd:0d:b6:1a:d6: d3:b3:20:9f:42:17:df:de:c1:cb:5b:96:a9:2b:6c:d4:6c:11: 14:e3:17:8c:ee:2a:ef:9f:b5:ed:39:c5:8a:49:0f:68:f6:7f: b9:4c:f9:5f:03:e3:6f:76:29:73:c5:c6:bf:1e:89:66:19:a9: fb:fd:36:2b:3a:06:3b:15:e2:57:87:be:ff:41:e3:bd:31:d4: eb:29:90:b8:3b:9d:86:7a:10:ea:23:0f:01:b9:55:d7:4e:f7: 75:58:ab:de:c7:0e:56:86:ae:10:cc:3f:79:67:25:ea:91:3c: 8c:4a:22:b3:95:35:fc:c6:f7:3b:42:e7:89:4b:07:30:d2:95: 0f:19:fc:f3:3d:43:e0:88:2b:5b:d0:34:fb:83:b0:3e:fa:84: 29:eb:16:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB/iD+b5JUZtELwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZWNiZTBhZjktYzA1ZC00ZGUwLWE0YWEtZGJmMjZhNzlkMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKejUyXnrEhot5rutlCImekhmmFw18X8axzz wng9Y0iwPp+VTt5zO4ZULx4PUa6ovldk59XPfj6VtFGsa3x0IB5X0wFdIPSC88Pv fG/OD76eDr3UzqkoR/t4iynyLbU3So8T9kcM/AXMturelHhHKIOvvdasNIwQ1QfT WbRwuxNx9RAs1UrnNVSI8eCjmtoXdclmGIGWUpliNtbI7vZPcC3NAAeTEzvILhGK HlTdWs1r/h6QWbYkvtg27JlJ0wNXhi7J3/Ns494ZcI3BzMblKTySiOYPBDmFnB4L Shs6RpEqYKWZXDY6eE4Zb/Uj8/imtA4wJHxH2Go+YBVyvNTa/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEA8jv/YN8ODC4Esc4fV3M6bYwHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWViMzIyZGEtNWJiNS0z MjI5LWFmOGQtOTFlZjVmNDg3ODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8mcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMtZIw+Yd9Y6xaDkOXJHdpm+oDQZ9HZoEQkuLiqjwjvjwK+zDzzTtKRf Ekbz4itDCKLmZoaboZaB3D/UOzmImJB8FuTEeA5O6i/QlElfVtYuV0IjiOGo4VIP NM2m8ubXN/1+y0srrL3NDbYa1tOzIJ9CF9/ewctblqkrbNRsERTjF4zuKu+fte05 xYpJD2j2f7lM+V8D4292KXPFxr8eiWYZqfv9Nis6BjsV4leHvv9B470x1OspkLg7 nYZ6EOojDwG5VddO93VYq97HDlaGrhDMP3lnJeqRPIxKIrOVNfzG9ztC54lLBzDS lQ8Z/PM9Q+CIK1vQNPuDsD76hCnrFjk= -----END CERTIFICATE-----Generated at Tue Jun 3 05:41:43 2025 by rpki-client