$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b66971e2-b0a2-340f-bee2-19ad55840987.roa File: b66971e2-b0a2-340f-bee2-19ad55840987.roa (raw, json) Hash identifier: 5ficNFxdfIBIvafnuMg82zix41SmCrq/qVYg2/JZAiA= Subject key identifier: AA:86:06:C7:EA:54:5F:94:31:63:34:0A:B4:50:AF:40:1E:F1:0D:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C08884A6CBF71447A9094E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b66971e2-b0a2-340f-bee2-19ad55840987.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 71.198.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:88:4a:6c:bf:71:44:7a:90:94:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=14e8b395-92c5-40c4-bfd1-2aee8d7f6efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8f:02:58:cd:6e:60:48:11:c9:08:b4:1d:6b: 41:28:4e:3e:61:2a:64:9a:44:c9:f2:b8:bb:8d:21: 61:db:16:35:32:e6:10:e5:61:74:7f:6a:44:fb:c8: b5:27:9b:83:e2:96:5b:48:64:a9:49:3c:ea:91:fb: a3:8b:87:f7:0c:70:bc:a2:a5:1e:ba:a1:c4:33:79: 2f:08:91:59:d3:75:2a:54:36:49:b9:b1:7f:82:b5: 63:78:38:c8:93:44:32:6e:4d:e6:e7:52:82:a5:e6: 66:09:b4:fd:ea:69:94:20:c6:27:85:5c:f8:71:20: 6d:75:2a:48:7d:5a:19:b0:19:5b:7c:61:a3:28:9d: fd:66:ce:a1:72:c4:c7:b0:2a:3c:bc:aa:0b:d2:b4: 95:78:ea:19:00:70:b8:ab:f8:5c:a3:af:93:6d:3f: ad:5b:48:88:b1:31:bc:98:be:63:8c:20:f5:db:8f: 00:2b:b7:b0:0e:8d:e6:81:3d:7e:ce:56:77:11:06: 18:5c:22:39:04:7c:7c:0f:86:76:46:a0:6d:b1:35: b0:40:7c:5b:74:81:d3:f7:1e:73:88:a4:91:72:8b: cb:6a:40:c1:0e:d9:f3:be:43:48:63:4a:8d:0e:57: 27:e8:7d:94:8c:75:1d:b4:62:4d:0d:fc:8b:24:8d: c1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:86:06:C7:EA:54:5F:94:31:63:34:0A:B4:50:AF:40:1E:F1:0D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b66971e2-b0a2-340f-bee2-19ad55840987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.198.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:1c:4e:e3:e5:67:a3:ec:6d:b1:c0:17:74:f8:33:5c:2a:65: 8e:47:48:fb:4b:e9:c3:66:aa:b2:6e:a1:31:98:c8:9f:cc:7a: c7:01:ea:df:6a:14:27:6d:30:a0:a0:49:a5:d4:d5:5e:8a:ce: 4d:54:24:fa:7e:ac:f4:e9:7f:46:38:a1:92:f6:04:40:b5:9c: e4:1c:0f:cb:5d:96:7d:98:79:98:09:fd:ce:13:c5:63:e8:b3: a3:f2:49:d6:18:b8:de:65:a8:ea:e1:82:46:14:a1:bd:ac:d0: fd:ff:c6:ae:e6:6b:f0:84:20:10:63:76:94:21:cc:af:65:62: 8f:27:a3:a3:94:f5:76:83:02:27:b4:c6:7f:1e:9f:bc:70:2c: ab:99:b2:01:ed:2f:4b:b2:3d:ff:4b:4a:ab:24:14:de:cf:ae: 2a:9a:ff:20:2d:89:75:70:4b:ce:d7:9a:c9:ba:c4:cd:f7:87: 0f:13:e9:7e:f3:44:78:9f:5d:3b:5b:80:fd:88:f0:be:57:fe: 99:21:af:e3:d4:b6:03:be:b6:7c:11:ed:0c:06:ca:ae:b9:5f: 5e:3f:c5:ca:ef:14:8b:91:cc:9f:d4:8e:51:58:6a:2e:0c:b1: a5:d4:da:e3:6b:69:f6:35:d0:db:ef:55:03:5d:92:88:46:cf: 58:b2:18:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCIhKbL9xRHqQlOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MTRlOGIzOTUtOTJjNS00MGM0LWJmZDEtMmFlZThkN2Y2ZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi48CWM1uYEgRyQi0HWtBKE4+YSpkmkTJ8ri7 jSFh2xY1MuYQ5WF0f2pE+8i1J5uD4pZbSGSpSTzqkfuji4f3DHC8oqUeuqHEM3kv CJFZ03UqVDZJubF/grVjeDjIk0Qybk3m51KCpeZmCbT96mmUIMYnhVz4cSBtdSpI fVoZsBlbfGGjKJ39Zs6hcsTHsCo8vKoL0rSVeOoZAHC4q/hco6+TbT+tW0iIsTG8 mL5jjCD1248AK7ewDo3mgT1+zlZ3EQYYXCI5BHx8D4Z2RqBtsTWwQHxbdIHT9x5z iKSRcovLakDBDtnzvkNIY0qNDlcn6H2UjHUdtGJNDfyLJI3B7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqGBsfqVF+UMWM0CrRQr0Ae8Q1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY2OTcxZTItYjBhMi0z NDBmLWJlZTItMTlhZDU1ODQwOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8aIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMcTuPlZ6PsbbHAF3T4M1wqZY5HSPtL6cNmqrJuoTGYyJ/MescB6t9q FCdtMKCgSaXU1V6Kzk1UJPp+rPTpf0Y4oZL2BEC1nOQcD8tdln2YeZgJ/c4TxWPo s6PySdYYuN5lqOrhgkYUob2s0P3/xq7ma/CEIBBjdpQhzK9lYo8no6OU9XaDAie0 xn8en7xwLKuZsgHtL0uyPf9LSqskFN7Priqa/yAtiXVwS87Xmsm6xM33hw8T6X7z RHifXTtbgP2I8L5X/pkhr+PUtgO+tnwR7QwGyq65X14/xcrvFIuRzJ/UjlFYai4M saXU2uNrafY10NvvVQNdkohGz1iyGOQ= -----END CERTIFICATE-----Generated at Tue Jun 3 07:11:02 2025 by rpki-client