$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0d43cb7-258f-382a-a8c0-f05ad66999b2.roa File: b0d43cb7-258f-382a-a8c0-f05ad66999b2.roa (raw, json) Hash identifier: eDQKwd9SA5VjespKxrHVols4dJ+pwh+NvhRN5uMnnl0= Subject key identifier: 89:8F:58:CF:DA:4B:65:27:69:3B:46:D8:BC:79:D8:77:B5:41:6A:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4307C281351C49F023D0800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0d43cb7-258f-382a-a8c0-f05ad66999b2.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 107.4.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:7c:28:13:51:c4:9f:02:3d:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=cc6ad163-d3fa-4c7e-a0cb-c0e77864647b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f0:50:f3:ba:4c:f9:ee:d0:36:47:de:22:98: 64:a3:4a:03:09:a2:f1:0c:d2:06:44:9f:9d:03:98: 5c:bf:ba:9b:16:d0:63:f4:0e:21:c2:c2:98:ad:b8: e3:04:ec:39:3b:99:92:10:79:5a:62:2d:ee:4c:ff: 08:4f:fe:79:ab:fd:38:02:8b:47:da:2e:ab:0b:9c: ae:d1:97:b7:2c:c5:94:c7:89:ad:21:f9:4a:c4:a1: e3:2c:3e:f9:ea:f9:ac:60:55:32:6f:42:f1:66:21: 92:06:93:fc:95:46:83:da:68:08:c9:69:da:4b:f4: 9d:c4:43:24:ef:60:0c:d6:7a:39:b0:cc:cb:67:82: cf:a1:d3:33:82:45:c9:35:44:9f:b8:78:f9:51:d3: 70:37:ae:1f:ec:36:bd:f2:6f:00:e0:e2:50:ab:11: f5:16:45:8d:59:0c:e4:e7:19:9c:9f:14:60:b7:98: 10:2f:90:ac:4a:8d:55:90:89:8e:d6:e7:3e:e5:ef: 28:47:4b:ad:16:5b:c7:c6:0c:ac:5a:9d:03:19:8d: ee:10:c4:0a:9a:a3:58:3e:5d:52:c1:90:b3:0a:98: a6:fa:ba:97:ba:1e:40:8a:0c:ef:0c:0a:a4:9c:12: 72:72:81:f1:7c:ae:20:b0:93:cc:72:0b:c3:f5:c7: 0f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8F:58:CF:DA:4B:65:27:69:3B:46:D8:BC:79:D8:77:B5:41:6A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0d43cb7-258f-382a-a8c0-f05ad66999b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 107.4.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:f6:07:ee:d1:76:72:14:1b:09:3e:4f:14:86:5e:62:a4:b0: 0c:7f:85:3d:1b:95:f5:0a:4f:c3:33:59:21:64:c4:79:bf:ea: 20:24:02:ca:0e:02:96:23:53:8d:47:9f:d7:04:f6:8d:ec:00: 15:9a:e5:73:4b:10:59:d5:19:26:75:37:9a:6d:06:70:77:a2: f3:e6:ae:91:d4:2d:d2:67:35:be:e2:39:c3:71:a4:dd:76:2f: 99:9b:24:82:5e:7a:6c:2e:08:26:b6:84:75:c1:eb:cb:f9:0e: f6:cd:69:70:48:ba:a1:cc:e1:d0:99:c3:c3:23:c6:b5:b2:e5: a0:5b:ac:79:65:f7:eb:b9:81:44:b9:55:1a:c5:70:50:46:5c: 0e:51:99:ed:ab:20:c6:59:0a:88:68:4f:39:25:55:a7:e6:a0: c2:48:a9:a1:69:53:bd:df:27:7a:37:31:5e:cd:38:4d:98:d3: 3c:11:43:37:52:72:6b:ac:65:18:21:6d:86:40:10:c7:10:be: 2a:55:ad:e3:7e:c3:06:eb:e7:7d:7e:12:d3:c6:61:af:c2:e2: fb:4f:0f:50:a5:f2:70:30:dc:56:76:21:fd:43:a1:40:e7:e0: e8:05:f1:d3:0f:26:a7:48:62:34:1f:13:77:90:9b:f6:09:a4: e5:96:e1:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMHwoE1HEnwI9CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2M2YWQxNjMtZDNmYS00YzdlLWEwY2ItYzBlNzc4NjQ2NDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfBQ87pM+e7QNkfeIphko0oDCaLxDNIGRJ+d A5hcv7qbFtBj9A4hwsKYrbjjBOw5O5mSEHlaYi3uTP8IT/55q/04AotH2i6rC5yu 0Ze3LMWUx4mtIflKxKHjLD756vmsYFUyb0LxZiGSBpP8lUaD2mgIyWnaS/SdxEMk 72AM1no5sMzLZ4LPodMzgkXJNUSfuHj5UdNwN64f7Da98m8A4OJQqxH1FkWNWQzk 5xmcnxRgt5gQL5CsSo1VkImO1uc+5e8oR0utFlvHxgysWp0DGY3uEMQKmqNYPl1S wZCzCpim+rqXuh5AigzvDAqknBJycoHxfK4gsJPMcgvD9ccPRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImPWM/aS2UnaTtG2Lx52He1QWrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjBkNDNjYjctMjU4Zi0z ODJhLWE4YzAtZjA1YWQ2Njk5OWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAawQZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGL2B+7RdnIUGwk+TxSGXmKksAx/hT0blfUKT8MzWSFkxHm/6iAkAsoO ApYjU41Hn9cE9o3sABWa5XNLEFnVGSZ1N5ptBnB3ovPmrpHULdJnNb7iOcNxpN12 L5mbJIJeemwuCCa2hHXB68v5DvbNaXBIuqHM4dCZw8MjxrWy5aBbrHll9+u5gUS5 VRrFcFBGXA5Rme2rIMZZCohoTzklVafmoMJIqaFpU73fJ3o3MV7NOE2Y0zwRQzdS cmusZRghbYZAEMcQvipVreN+wwbr531+EtPGYa/C4vtPD1Cl8nAw3FZ2If1DoUDn 4OgF8dMPJqdIYjQfE3eQm/YJpOWW4Q0= -----END CERTIFICATE-----Generated at Wed Jun 4 23:37:58 2025 by rpki-client