$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a410c5-1155-3e9e-abe3-ce74451bd458.roa File: c8a410c5-1155-3e9e-abe3-ce74451bd458.roa (raw, json) Hash identifier: 8tFQ4xcVpozvqTzi+PsLjafdtvHXcaxM9jbkAvgWEhg= Subject key identifier: D9:69:B7:A9:62:A2:D2:BC:16:37:D1:C7:7E:DA:9B:21:E3:F0:93:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06C5D48C9877DFACEEA800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a410c5-1155-3e9e-abe3-ce74451bd458.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 174.160.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:c5:d4:8c:98:77:df:ac:ee:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=f2365288-60da-4b5e-97f6-5862cd6306f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3f:37:f3:26:a7:8c:e4:02:83:03:0b:9f:b6: ea:78:b0:a9:cc:89:ec:ca:b6:8f:78:e0:55:5a:4a: df:76:23:ee:f2:29:f1:3f:97:20:9a:ff:c5:56:5a: 43:2e:9c:5b:af:ea:e4:1e:8e:14:e6:96:31:30:46: 3b:fd:e5:6d:fd:df:34:05:40:4d:d2:16:c7:db:b2: 94:93:15:4c:3e:97:dd:0c:e7:5c:ed:cf:ca:60:3e: bb:0a:8c:81:5c:94:36:9c:b0:50:5c:f7:6c:b3:52: 86:75:5a:32:1c:b9:79:4c:2c:52:50:79:21:d6:e6: c7:f5:2b:08:ed:bd:20:ae:52:c6:cb:b1:a0:e3:3f: d8:96:0e:a1:d9:10:07:30:2f:0e:cb:fe:10:7f:09: 67:dd:43:ac:e5:1c:e4:9f:f7:72:e7:82:86:8e:02: 89:03:a4:9f:1f:38:74:e5:37:dd:12:26:f7:22:23: d3:83:68:26:b1:e8:c5:e4:e6:91:99:50:c3:f3:69: cc:6e:d3:d4:d6:dc:fd:36:57:7e:17:3b:9f:7c:43: 57:19:35:ea:bc:c7:fe:fe:db:47:df:2b:f4:76:42: fe:c5:b9:1f:ae:70:60:16:a3:f1:85:53:0c:f6:d7: b8:0a:3b:dd:ee:87:7c:56:65:ee:0c:66:60:cf:c4: d9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:69:B7:A9:62:A2:D2:BC:16:37:D1:C7:7E:DA:9B:21:E3:F0:93:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c8a410c5-1155-3e9e-abe3-ce74451bd458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.160.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:37:2f:34:69:94:76:59:2e:46:bd:be:a6:94:7d:e3:1b:f0: fc:af:4e:b2:08:0b:86:14:a8:ad:23:ce:66:3d:fa:27:d9:84: 1f:c9:28:23:bd:55:3c:57:36:ea:a6:b1:93:46:65:af:a9:86: d7:ee:59:20:3a:b0:4a:42:a9:5a:42:f7:6c:51:8b:7a:7b:41: 4d:f9:9b:13:f1:18:d4:52:c5:3b:31:4b:95:2d:69:30:28:01: 4d:c5:4a:6b:2f:36:27:07:0f:03:ab:93:ea:4c:41:53:54:15: e7:6e:d1:92:6e:9a:ce:6e:ac:b7:7c:fd:82:f1:12:0b:c9:8f: f2:a8:c7:1e:52:d0:d2:f0:97:49:56:82:96:06:76:a1:3f:9a: 6e:c6:da:83:3f:19:1f:17:dd:95:9d:a2:04:01:a5:a9:0d:59: ba:f2:18:05:2e:d8:6c:e9:bf:13:57:79:58:1e:2d:18:c0:ce: bc:c6:9a:92:9a:6f:f3:40:ff:04:c5:84:19:41:a8:c2:5c:63: 32:19:cc:40:49:0e:d8:e0:27:0f:01:b1:e0:ba:c3:53:c2:fb: 8a:a2:3a:27:5c:0c:3b:a6:f7:c0:be:8a:0d:80:e5:7d:56:1f: d9:75:70:94:bb:a0:51:73:c1:8a:a7:8c:b6:23:6e:c0:76:e4: a3:4f:d7:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBsXUjJh336zuqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZjIzNjUyODgtNjBkYS00YjVlLTk3ZjYtNTg2MmNkNjMwNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz838yanjOQCgwMLn7bqeLCpzInsyraPeOBV WkrfdiPu8inxP5cgmv/FVlpDLpxbr+rkHo4U5pYxMEY7/eVt/d80BUBN0hbH27KU kxVMPpfdDOdc7c/KYD67CoyBXJQ2nLBQXPdss1KGdVoyHLl5TCxSUHkh1ubH9SsI 7b0grlLGy7Gg4z/Ylg6h2RAHMC8Oy/4Qfwln3UOs5Rzkn/dy54KGjgKJA6SfHzh0 5TfdEib3IiPTg2gmsejF5OaRmVDD82nMbtPU1tz9Nld+FzuffENXGTXqvMf+/ttH 3yv0dkL+xbkfrnBgFqPxhVMM9te4Cjvd7od8VmXuDGZgz8TZMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlpt6liotK8FjfRx37amyHj8JPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzhhNDEwYzUtMTE1NS0z ZTllLWFiZTMtY2U3NDQ1MWJkNDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU3LzRplHZZLka9vqaUfeMb8PyvTrIIC4YUqK0jzmY9+ifZhB/JKCO9 VTxXNuqmsZNGZa+phtfuWSA6sEpCqVpC92xRi3p7QU35mxPxGNRSxTsxS5UtaTAo AU3FSmsvNicHDwOrk+pMQVNUFedu0ZJums5urLd8/YLxEgvJj/Koxx5S0NLwl0lW gpYGdqE/mm7G2oM/GR8X3ZWdogQBpakNWbryGAUu2GzpvxNXeVgeLRjAzrzGmpKa b/NA/wTFhBlBqMJcYzIZzEBJDtjgJw8BseC6w1PC+4qiOidcDDum98C+ig2A5X1W H9l1cJS7oFFzwYqnjLYjbsB25KNP170= -----END CERTIFICATE-----Generated at Tue Jun 3 06:28:00 2025 by rpki-client