$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa File: c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa (raw, json) Hash identifier: SX7hpiY+oTnPuBpbWTWLRPKXEStUldoocI3BlRm+3q4= Subject key identifier: 0E:8C:54:97:40:70:EA:CF:EB:A2:4C:BE:E7:D4:8F:23:FC:2F:C7:7A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C061E770E97FA792492A380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 67.173.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:1e:77:0e:97:fa:79:24:92:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=8ffd03a7-d01b-4165-97a4-085cbf53344c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:89:1d:96:82:63:d3:9b:ba:1e:ba:d2:39:10: 74:aa:ca:68:64:4d:69:bc:aa:2d:07:66:37:71:f2: 51:31:ad:a0:67:ca:c1:bb:12:96:68:b6:86:9a:4e: cf:e7:a5:ec:04:77:a0:06:88:71:6d:ed:49:ff:3f: 22:d4:58:0e:57:4b:d7:ae:4f:6f:73:c0:55:48:0f: 29:0f:48:f4:5d:83:7d:28:4e:52:c2:a4:95:f4:ee: 27:e6:28:7c:43:59:b9:bf:03:a9:46:1e:50:09:53: 0e:4d:1c:e6:55:85:f6:f0:8f:c5:ac:f5:ee:3e:e6: 54:07:c0:c2:79:b3:13:85:18:34:4d:6a:63:2c:83: 80:e4:19:e7:0c:a7:e6:03:fe:e1:64:af:aa:e8:e3: 2a:3f:9b:dc:bf:a7:ed:62:5f:59:10:89:ef:37:14: 16:4b:8c:cd:f7:21:22:e8:e0:0e:13:dd:ff:52:a3: ba:f0:39:cb:56:c5:b5:02:15:4a:32:11:62:1b:7e: c1:c7:61:14:8e:53:8c:de:83:25:ea:40:b1:f7:1a: 75:08:10:dc:f2:c9:c1:1c:2f:87:c4:64:fd:2b:6a: 62:56:bb:71:28:ad:30:80:b9:e5:c1:bc:25:0d:1f: e1:58:47:f9:5f:b3:a7:aa:7e:51:e1:25:71:a9:ee: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8C:54:97:40:70:EA:CF:EB:A2:4C:BE:E7:D4:8F:23:FC:2F:C7:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.173.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ce:b7:03:72:18:a1:75:86:aa:fc:18:8d:b6:88:02:74:ba: 2a:c5:be:28:c8:ab:16:7a:9a:e8:7d:24:24:c9:5c:c2:f6:a2: 8c:0c:74:71:d9:ea:ed:10:63:ab:78:85:4e:01:55:ea:d2:0f: 97:0b:fc:74:0f:59:1e:d4:98:3b:9e:1f:3f:2c:2b:7d:7f:5a: c0:99:0d:2a:45:25:7e:8e:4f:04:43:96:9a:ce:73:85:c9:31: d6:11:b4:32:08:a3:95:93:52:d3:f5:56:3d:cd:45:f8:22:f7: 8a:02:2c:ad:ff:38:d2:ad:2b:b5:90:3f:f5:2b:3a:71:f9:e6: 66:61:68:43:d0:8a:f5:92:44:67:c2:86:3e:af:82:20:b7:f0: 1e:86:13:82:38:af:7a:de:ad:41:58:e9:9b:04:d4:2b:1e:df: bf:dd:ef:8a:42:13:aa:ea:a1:85:a6:0b:a4:f3:70:48:ea:12: 9a:85:d2:b2:b3:92:9a:d8:54:77:95:19:08:21:cd:dc:ed:89: 48:e7:55:6a:84:a1:8b:bb:2a:03:4b:a0:ec:27:07:71:c4:da: b9:2a:aa:1d:53:26:fa:e8:f9:0b:7a:a0:f2:a7:40:46:34:7d: 7b:f7:63:ea:20:8f:d9:d8:e4:c9:e8:00:9e:9a:4d:2f:d0:e8: 36:df:92:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBh53Dpf6eSSSo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk OGZmZDAzYTctZDAxYi00MTY1LTk3YTQtMDg1Y2JmNTMzNDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYkdloJj05u6HrrSORB0qspoZE1pvKotB2Y3 cfJRMa2gZ8rBuxKWaLaGmk7P56XsBHegBohxbe1J/z8i1FgOV0vXrk9vc8BVSA8p D0j0XYN9KE5SwqSV9O4n5ih8Q1m5vwOpRh5QCVMOTRzmVYX28I/FrPXuPuZUB8DC ebMThRg0TWpjLIOA5BnnDKfmA/7hZK+q6OMqP5vcv6ftYl9ZEInvNxQWS4zN9yEi 6OAOE93/UqO68DnLVsW1AhVKMhFiG37Bx2EUjlOM3oMl6kCx9xp1CBDc8snBHC+H xGT9K2piVrtxKK0wgLnlwbwlDR/hWEf5X7Onqn5R4SVxqe4t4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6MVJdAcOrP66JMvufUjyP8L8d6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzFjMjk2N2MtODIwMS0z ZjIyLThhYTctNmI3NjI0ZmE3NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ62kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbOtwNyGKF1hqr8GI22iAJ0uirFvijIqxZ6muh9JCTJXML2oowMdHHZ 6u0QY6t4hU4BVerSD5cL/HQPWR7UmDueHz8sK31/WsCZDSpFJX6OTwRDlprOc4XJ MdYRtDIIo5WTUtP1Vj3NRfgi94oCLK3/ONKtK7WQP/UrOnH55mZhaEPQivWSRGfC hj6vgiC38B6GE4I4r3rerUFY6ZsE1Cse37/d74pCE6rqoYWmC6TzcEjqEpqF0rKz kprYVHeVGQghzdztiUjnVWqEoYu7KgNLoOwnB3HE2rkqqh1TJvro+Qt6oPKnQEY0 fXv3Y+ogj9nY5MnoAJ6aTS/Q6DbfksE= -----END CERTIFICATE-----Generated at Tue Jun 3 05:02:05 2025 by rpki-client