$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1b93aa3-b3a4-3434-9788-4d310852ff67.roa File: c1b93aa3-b3a4-3434-9788-4d310852ff67.roa (raw, json) Hash identifier: PawaZA3Y78ZVaz9hTqfYOT6dnbgYBls4x5SwhwlMDu0= Subject key identifier: 6B:8A:76:3E:C8:4E:F6:B2:F2:09:02:41:8F:E3:A5:34:E6:E3:1F:33 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43137EC2B25ED2A37723B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1b93aa3-b3a4-3434-9788-4d310852ff67.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 71.238.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:37:ec:2b:25:ed:2a:37:72:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=fcc98c23-43f3-449a-bc3b-c852c673cd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:87:50:87:20:03:6e:9c:ba:4f:cf:6c:1b:be: ff:af:17:94:72:48:1f:e1:3d:19:93:03:2a:86:31: e4:82:c4:78:6d:b5:d2:e5:71:af:b9:64:3d:3d:31: 19:bb:2e:f6:e1:78:cb:4f:46:b4:2e:7c:5c:2f:71: e9:7f:cd:f7:92:bc:ec:ca:bd:38:75:ab:ad:fa:b8: 0f:19:39:02:b5:a0:70:b5:e4:e0:1b:b9:4a:2a:05: 3e:14:19:03:9a:58:f0:98:d0:68:ac:95:a2:da:18: 94:56:da:90:b5:c4:b1:00:d4:85:95:9e:c3:1e:87: 04:52:59:45:85:74:ef:80:0d:76:e8:36:46:09:7d: 56:17:c4:df:9d:14:93:bc:f9:b1:c6:de:7d:56:39: f2:78:4f:d1:0d:c5:8a:46:1c:31:13:e3:69:b3:8b: 1d:24:e1:b1:47:00:8c:b0:a8:7f:6a:ea:cb:a0:24: 11:ff:09:7e:57:b9:07:ab:3b:85:46:63:ce:fe:1f: c5:8f:6f:ad:12:9e:88:5d:33:42:41:29:88:52:0e: 53:a0:94:b1:50:76:3e:44:a3:20:9c:b4:3a:38:50: c5:85:9f:07:f1:e1:83:36:61:67:61:55:06:27:56: 88:d7:51:e7:cb:bc:3d:6e:84:6d:b1:3e:2f:f2:6b: 84:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8A:76:3E:C8:4E:F6:B2:F2:09:02:41:8F:E3:A5:34:E6:E3:1F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1b93aa3-b3a4-3434-9788-4d310852ff67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:11:ac:23:a9:8a:a4:6c:11:b4:34:d8:68:5c:58:11:13:90: 62:45:e1:7f:6b:a4:70:57:d1:3e:2c:c6:75:3f:7a:dd:e4:32: 16:c1:cd:6a:87:3d:b3:e5:ff:39:66:0d:c1:ff:a7:cf:00:ed: 36:0d:78:06:24:ba:dc:46:8b:6c:f1:c5:0d:72:cc:48:45:38: cc:e2:78:bb:26:95:bd:3a:9a:a1:a3:19:70:9a:31:78:1a:e8: 17:7f:c2:9b:37:42:64:a8:97:f8:bf:41:54:e5:3e:54:98:6a: 0c:a0:0b:6c:11:69:30:a5:a3:85:cb:7d:3e:86:44:5d:b5:ea: 8b:2c:1b:5e:e4:8e:ea:8d:67:e4:00:9a:e1:c3:23:07:52:df: a8:89:a8:0e:ec:b0:f9:d4:1b:4d:7e:b4:35:60:79:93:ca:1a: 10:af:27:92:5a:30:6a:88:80:00:df:5d:8d:47:78:04:21:36: 9c:c4:4c:c5:b8:6e:26:03:6a:3f:77:08:c7:71:bf:51:a7:75: 97:a8:28:b9:f6:11:bf:13:ff:4c:b5:a0:92:6a:de:c1:b4:a7: e4:08:c7:bb:28:f3:08:56:e5:b1:75:47:6b:a1:ce:ef:07:34: 62:8c:1f:52:c8:d7:b5:6c:8f:f0:ea:9d:13:d9:b6:08:94:9a: eb:32:7a:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMTfsKyXtKjdyOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZmNjOThjMjMtNDNmMy00NDlhLWJjM2ItYzg1MmM2NzNjZDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YdQhyADbpy6T89sG77/rxeUckgf4T0ZkwMq hjHkgsR4bbXS5XGvuWQ9PTEZuy724XjLT0a0LnxcL3Hpf833krzsyr04daut+rgP GTkCtaBwteTgG7lKKgU+FBkDmljwmNBorJWi2hiUVtqQtcSxANSFlZ7DHocEUllF hXTvgA126DZGCX1WF8TfnRSTvPmxxt59VjnyeE/RDcWKRhwxE+Nps4sdJOGxRwCM sKh/aurLoCQR/wl+V7kHqzuFRmPO/h/Fj2+tEp6IXTNCQSmIUg5ToJSxUHY+RKMg nLQ6OFDFhZ8H8eGDNmFnYVUGJ1aI11Hny7w9boRtsT4v8muERQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuKdj7ITvay8gkCQY/jpTTm4x8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzFiOTNhYTMtYjNhNC0z NDM0LTk3ODgtNGQzMTA4NTJmZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+44MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIRrCOpiqRsEbQ02GhcWBETkGJF4X9rpHBX0T4sxnU/et3kMhbBzWqH PbPl/zlmDcH/p88A7TYNeAYkutxGi2zxxQ1yzEhFOMzieLsmlb06mqGjGXCaMXga 6Bd/wps3QmSol/i/QVTlPlSYagygC2wRaTClo4XLfT6GRF216ossG17kjuqNZ+QA muHDIwdS36iJqA7ssPnUG01+tDVgeZPKGhCvJ5JaMGqIgADfXY1HeAQhNpzETMW4 biYDaj93CMdxv1GndZeoKLn2Eb8T/0y1oJJq3sG0p+QIx7so8whW5bF1R2uhzu8H NGKMH1LI17Vsj/DqnRPZtgiUmusyenQ= -----END CERTIFICATE-----Generated at Tue Jun 3 07:42:51 2025 by rpki-client