$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca1f9248-172d-3de1-9ca1-9118ba234c72.roa File: ca1f9248-172d-3de1-9ca1-9118ba234c72.roa (raw, json) Hash identifier: teHCURM7jNsE6iv8IZJFm81y80KnjWqucSG+AZFR1ik= Subject key identifier: 56:CA:38:55:1D:BD:6A:4F:DA:99:95:74:4B:90:31:50:44:E0:D5:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C078CA21645881BB792CE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca1f9248-172d-3de1-9ca1-9118ba234c72.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33287 IP address blocks: 71.225.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:8c:a2:16:45:88:1b:b7:92:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=3fe7dd89-3782-40e3-b1e6-cb347aa0cabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1d:2a:fc:68:e3:8e:53:14:76:0e:3e:d9:12: 49:81:07:af:e2:b9:74:30:df:80:f7:09:e5:ab:1b: 7b:e7:3c:ca:89:b3:e4:84:ed:d1:87:13:18:c4:ac: c6:d3:74:dd:40:20:c3:dc:13:e8:e3:6b:31:52:2f: f5:f4:1f:b3:1b:99:f8:87:0a:b8:23:86:1a:fc:34: 79:9d:8b:28:26:c0:16:c1:bc:7d:c8:29:0f:cc:b0: 9a:75:9e:c6:6b:62:c3:2a:af:eb:9a:22:11:20:78: f3:e9:6d:d1:f3:b8:82:91:8f:ac:67:7f:e5:a2:3a: 73:1a:98:87:77:fc:2f:a3:95:69:5c:f1:38:b7:c4: ff:17:20:ef:0c:da:a1:ab:e5:e8:90:b2:f4:23:b8: 52:15:0d:8e:09:3f:60:29:5c:29:9c:c0:6d:69:98: 3e:19:ea:ac:02:a4:27:49:38:9d:e2:87:08:95:e7: ed:6b:d7:74:75:4c:75:26:da:f0:1e:4b:9d:16:43: 1c:d2:c7:c1:03:b5:a8:47:c9:85:18:54:f5:90:17: b0:ab:9a:f6:8d:63:e4:ba:72:04:70:5c:77:02:89: a8:6b:28:21:4c:fc:f8:7b:c1:e3:70:e9:cc:5c:bf: c9:58:73:65:97:85:b5:40:73:ed:42:75:24:7e:96: 67:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CA:38:55:1D:BD:6A:4F:DA:99:95:74:4B:90:31:50:44:E0:D5:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca1f9248-172d-3de1-9ca1-9118ba234c72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.225.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:22:2d:9d:e8:0f:9f:95:3c:2f:67:23:7d:ea:19:5c:11:87: 5e:d6:80:46:78:fb:6e:6a:e3:b7:4a:7b:d1:8c:ef:61:e5:f9: 20:d7:dc:e9:64:de:4a:19:c5:b2:ed:21:02:53:f2:9e:32:84: 7d:1c:82:65:8c:0e:23:db:4e:4e:e8:db:5a:96:86:6a:dd:d9: a6:c7:d4:ee:39:77:bb:80:d0:8c:e7:74:90:bf:95:77:a7:0d: 59:33:01:d9:3c:0c:7f:91:79:b2:ea:5e:91:70:47:b3:46:e8: 11:10:ce:79:67:9a:fd:f5:1c:76:6f:e7:9f:51:96:a5:4a:2e: 96:35:7c:75:b7:d5:ea:d6:1c:92:7b:17:58:f4:d1:54:36:f8: c3:36:a1:10:fa:84:51:c4:c6:b2:22:1c:d4:29:7a:ab:31:ea: 37:14:b2:a1:f8:87:90:87:1c:79:96:64:fc:f3:8b:f3:22:09: 52:50:a6:c9:b5:25:fe:9c:7b:22:0d:eb:c1:24:6a:f2:e2:4d: dd:7e:ee:f7:3f:57:11:ca:42:6c:a6:4f:c7:96:be:69:45:19: 0e:5e:ee:1e:75:63:da:98:08:a9:21:5f:8c:f9:81:74:16:ad: a0:da:b8:6e:8c:07:ce:0c:0a:9e:35:81:41:5a:a0:08:f8:59: 35:d8:b3:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB4yiFkWIG7eSzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk M2ZlN2RkODktMzc4Mi00MGUzLWIxZTYtY2IzNDdhYTBjYWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x0q/GjjjlMUdg4+2RJJgQev4rl0MN+A9wnl qxt75zzKibPkhO3RhxMYxKzG03TdQCDD3BPo42sxUi/19B+zG5n4hwq4I4Ya/DR5 nYsoJsAWwbx9yCkPzLCadZ7Ga2LDKq/rmiIRIHjz6W3R87iCkY+sZ3/lojpzGpiH d/wvo5VpXPE4t8T/FyDvDNqhq+XokLL0I7hSFQ2OCT9gKVwpnMBtaZg+GeqsAqQn STid4ocIlefta9d0dUx1JtrwHkudFkMc0sfBA7WoR8mFGFT1kBewq5r2jWPkunIE cFx3AomoayghTPz4e8HjcOnMXL/JWHNll4W1QHPtQnUkfpZnjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbKOFUdvWpP2pmVdEuQMVBE4NW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ExZjkyNDgtMTcyZC0z ZGUxLTljYTEtOTExOGJhMjM0YzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUiLZ3oD5+VPC9nI33qGVwRh17WgEZ4+25q47dKe9GM72Hl+SDX3Olk 3koZxbLtIQJT8p4yhH0cgmWMDiPbTk7o21qWhmrd2abH1O45d7uA0IzndJC/lXen DVkzAdk8DH+RebLqXpFwR7NG6BEQznlnmv31HHZv559RlqVKLpY1fHW31erWHJJ7 F1j00VQ2+MM2oRD6hFHExrIiHNQpeqsx6jcUsqH4h5CHHHmWZPzzi/MiCVJQpsm1 Jf6ceyIN68EkavLiTd1+7vc/VxHKQmymT8eWvmlFGQ5e7h51Y9qYCKkhX4z5gXQW raDauG6MB84MCp41gUFaoAj4WTXYsz4= -----END CERTIFICATE-----Generated at Tue Jun 3 06:12:58 2025 by rpki-client