$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b67dea73-a12f-3140-a4d4-caf7f9824d71.roa File: b67dea73-a12f-3140-a4d4-caf7f9824d71.roa (raw, json) Hash identifier: JEXQCqpdDGuZ7Q18RweBRb5tKOj3sqMYSgBSraeHmEI= Subject key identifier: A2:5B:04:86:16:EE:84:BF:92:6A:ED:41:EB:7F:C9:13:E5:D4:6C:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C05E914AD682FEAF845CA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b67dea73-a12f-3140-a4d4-caf7f9824d71.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33287 IP address blocks: 71.230.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:e9:14:ad:68:2f:ea:f8:45:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=fce27760-226f-4fde-89ba-cbb7a25c2ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4b:9c:45:43:85:88:fc:1a:30:e7:7f:42:78: ab:86:a0:07:4e:62:a7:3f:2d:86:70:23:36:26:a3: 55:be:4f:49:d4:c5:2a:d6:5c:bc:c1:58:60:e7:d0: b3:2b:40:7f:24:42:b2:0a:cd:bb:8b:4e:7d:02:b5: a3:5a:29:08:bc:3a:c5:75:6c:11:f9:e6:07:ac:40: 24:28:4c:eb:de:53:a5:9d:ef:b6:52:c4:8b:0f:fa: ba:13:6a:8c:59:3e:0a:93:51:74:db:b5:bc:93:9b: cc:e2:65:66:c1:1c:31:71:a2:22:ed:46:5e:d1:0b: e8:60:71:be:ee:80:09:6d:92:5f:b4:0c:16:7a:de: 6e:6d:04:3a:83:0f:f6:97:df:60:b8:3e:0f:81:01: f6:d5:05:00:34:3c:ca:c1:89:61:ff:a0:59:ca:5f: a0:9c:b6:b6:8d:8b:32:4d:7c:f6:ea:e7:4e:be:34: f7:6d:eb:bd:9b:2a:1c:e7:78:2e:e9:d6:6d:64:8a: d5:10:90:e5:ad:75:da:e9:8b:26:6a:c4:05:21:2d: 73:87:dd:cc:0d:a8:b5:bc:ba:d4:46:ae:e3:8e:83: a5:1f:82:58:dc:a6:b2:bf:ad:35:f4:d8:3a:ee:88: 67:33:d6:ce:ad:5f:18:b7:8e:2d:6b:0d:76:6d:b7: 14:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5B:04:86:16:EE:84:BF:92:6A:ED:41:EB:7F:C9:13:E5:D4:6C:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b67dea73-a12f-3140-a4d4-caf7f9824d71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.230.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:9c:87:9c:ee:06:00:f3:42:3a:19:37:6b:57:ac:23:2a:e3: d4:5a:c7:4f:44:a7:d0:b3:b0:64:0d:14:68:2f:b1:c4:16:96: 3b:c9:ad:b6:a2:14:11:5c:f9:ce:8b:be:9c:78:4e:60:6e:2f: c1:a3:93:7d:d9:d3:91:a2:d5:c7:5d:70:80:8c:49:d5:8f:ad: fa:4f:f6:6a:70:b2:6c:2e:b5:a2:fd:f6:46:cd:4f:d6:23:e0: a6:f7:c1:ad:7d:49:95:bf:45:ec:d2:92:7b:ef:2b:0b:68:b7: 18:d1:72:3e:67:b5:88:24:79:12:f1:ab:63:c0:e5:e4:fc:95: b2:f3:3d:84:a0:70:30:3c:3d:24:b7:47:cd:6b:23:8f:71:35: 81:40:f2:dd:c0:39:83:92:b4:29:c0:bf:25:47:a5:87:38:b0: 00:3c:7b:26:68:03:08:44:f8:a7:b0:00:5d:10:1a:0e:6f:8d: 45:52:ae:2e:73:79:68:18:d0:82:01:cf:94:8a:81:26:d2:5b: d0:4e:c2:55:29:13:c8:32:fb:f8:7f:5c:36:19:22:85:69:c3: e0:3e:e9:b2:5a:5d:16:85:1a:f3:63:17:3c:da:d6:2f:94:9c: 40:40:29:08:f4:29:fe:30:b6:a9:67:e1:d1:c8:3f:90:39:b1: b5:65:47:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBekUrWgv6vhFygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZmNlMjc3NjAtMjI2Zi00ZmRlLTg5YmEtY2JiN2EyNWMyY2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkucRUOFiPwaMOd/QnirhqAHTmKnPy2GcCM2 JqNVvk9J1MUq1ly8wVhg59CzK0B/JEKyCs27i059ArWjWikIvDrFdWwR+eYHrEAk KEzr3lOlne+2UsSLD/q6E2qMWT4Kk1F027W8k5vM4mVmwRwxcaIi7UZe0QvoYHG+ 7oAJbZJftAwWet5ubQQ6gw/2l99guD4PgQH21QUANDzKwYlh/6BZyl+gnLa2jYsy TXz26udOvjT3beu9myoc53gu6dZtZIrVEJDlrXXa6YsmasQFIS1zh93MDai1vLrU Rq7jjoOlH4JY3Kayv6019Ng67ohnM9bOrV8Yt44taw12bbcUhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJbBIYW7oS/kmrtQet/yRPl1Gx5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY3ZGVhNzMtYTEyZi0z MTQwLWE0ZDQtY2FmN2Y5ODI0ZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+ZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALSch5zuBgDzQjoZN2tXrCMq49Rax09Ep9CzsGQNFGgvscQWljvJrbai FBFc+c6Lvpx4TmBuL8Gjk33Z05Gi1cddcICMSdWPrfpP9mpwsmwutaL99kbNT9Yj 4Kb3wa19SZW/RezSknvvKwtotxjRcj5ntYgkeRLxq2PA5eT8lbLzPYSgcDA8PSS3 R81rI49xNYFA8t3AOYOStCnAvyVHpYc4sAA8eyZoAwhE+KewAF0QGg5vjUVSri5z eWgY0IIBz5SKgSbSW9BOwlUpE8gy+/h/XDYZIoVpw+A+6bJaXRaFGvNjFzza1i+U nEBAKQj0Kf4wtqln4dHIP5A5sbVlR6E= -----END CERTIFICATE-----Generated at Tue Jun 3 04:58:11 2025 by rpki-client