$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d886c28f-4e05-36b4-9820-b5c2f12dd305.roa File: d886c28f-4e05-36b4-9820-b5c2f12dd305.roa (raw, json) Hash identifier: nSY4AX1uDEXo41YIsTBdGkSrrkQ4of0FCpSLojZ28uM= Subject key identifier: 99:D2:7B:82:89:FA:20:FD:E4:60:2E:C4:F2:A7:DF:FB:2A:ED:60:EF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4323B4D0520A502A8800DC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d886c28f-4e05-36b4-9820-b5c2f12dd305.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 174.171.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:3b:4d:05:20:a5:02:a8:80:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=bf99ad0d-1e8f-4685-b4b9-4e54909acb5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c2:51:9d:d3:9f:5b:26:fa:98:4c:11:4b:a1: c8:fb:3c:54:b6:fc:45:11:bc:1e:48:3d:de:a4:c9: 6f:b1:f3:7b:c5:09:fa:06:7c:70:e1:d9:47:07:61: 94:c9:f2:88:c2:9a:d2:6d:e8:67:3d:72:f6:00:e1: c1:df:54:e0:6b:b9:2a:f3:96:aa:e0:b5:5f:16:39: 77:33:86:f0:a7:ac:e1:f2:47:72:ac:e4:11:47:90: 65:a9:44:23:3b:19:de:e2:c3:6e:1d:08:c9:40:85: d0:ac:fb:37:73:0b:57:e0:85:16:2b:fc:2f:cd:3e: 1b:6c:4f:48:0a:15:48:f0:da:80:f3:d5:4c:64:a4: e5:94:87:4d:b4:d7:21:38:8e:68:74:b6:e4:c3:f6: 38:da:4e:a2:16:00:e3:bc:82:77:18:c0:49:27:d6: d7:ad:ab:9d:0d:d7:c1:2b:dd:2a:ee:27:e5:b8:0e: 9e:6a:56:00:82:20:04:63:48:ea:39:54:f2:1e:19: 6e:90:9f:34:03:15:65:95:f7:07:de:65:2b:fd:1a: b6:ff:82:f2:d3:60:ee:d6:6d:61:57:35:50:10:51: bc:5e:25:c4:fe:0c:e6:d4:5c:2e:b0:10:fc:b7:71: ef:61:ac:ff:0b:cf:e5:03:50:6b:b1:f5:f9:c7:2c: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D2:7B:82:89:FA:20:FD:E4:60:2E:C4:F2:A7:DF:FB:2A:ED:60:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d886c28f-4e05-36b4-9820-b5c2f12dd305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:61:55:2e:af:d9:bf:a0:09:9c:a3:7a:38:11:b2:4c:9f:a0: 2d:4e:88:a0:b6:2b:9d:9d:86:cc:be:12:c1:63:06:46:80:42: a1:8b:bf:2d:e3:64:ed:cf:3c:43:80:30:96:c1:27:0d:7e:0d: 63:01:48:4b:82:74:e0:7a:2f:b2:b4:36:d4:62:6a:9b:24:b8: 4c:d1:48:bd:06:e6:97:14:32:8c:c1:aa:39:f5:b9:26:1b:f2: 0b:af:7e:54:4c:3b:37:7f:b9:9a:c3:19:ed:ff:e7:af:44:4c: 40:6d:b8:9d:00:a0:60:e8:4d:64:2b:e0:ad:64:55:0a:6f:27: f8:eb:78:0d:3e:b3:bf:81:b0:ac:3c:64:10:3c:94:a6:d2:c0: 61:61:27:22:66:3a:63:4f:e4:70:fd:a1:54:90:89:55:81:d6: 2a:44:27:85:18:ba:cf:7f:e7:5e:37:de:d9:4e:1b:fe:bf:3c: f3:33:24:91:1e:01:9a:8d:ec:7b:a5:07:4d:91:c9:9a:3f:b4: f0:10:84:a5:51:30:f6:61:63:9c:4b:88:aa:6f:21:22:d3:05: 69:01:82:12:6d:df:cf:3c:30:7f:20:34:92:67:79:d5:96:07: 88:4a:e4:cf:cd:f2:53:9e:e1:85:e6:b5:25:f4:30:3e:a4:03: 79:38:fc:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMjtNBSClAqiADcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YmY5OWFkMGQtMWU4Zi00Njg1LWI0YjktNGU1NDkwOWFjYjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsJRndOfWyb6mEwRS6HI+zxUtvxFEbweSD3e pMlvsfN7xQn6Bnxw4dlHB2GUyfKIwprSbehnPXL2AOHB31Tga7kq85aq4LVfFjl3 M4bwp6zh8kdyrOQRR5BlqUQjOxne4sNuHQjJQIXQrPs3cwtX4IUWK/wvzT4bbE9I ChVI8NqA89VMZKTllIdNtNchOI5odLbkw/Y42k6iFgDjvIJ3GMBJJ9bXraudDdfB K90q7ifluA6ealYAgiAEY0jqOVTyHhlukJ80AxVllfcH3mUr/Rq2/4Ly02Du1m1h VzVQEFG8XiXE/gzm1FwusBD8t3HvYaz/C8/lA1BrsfX5xyxd9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnSe4KJ+iD95GAuxPKn3/sq7WDvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDg4NmMyOGYtNGUwNS0z NmI0LTk4MjAtYjVjMmYxMmRkMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxhVS6v2b+gCZyjejgRskyfoC1OiKC2K52dhsy+EsFjBkaAQqGLvy3j ZO3PPEOAMJbBJw1+DWMBSEuCdOB6L7K0NtRiapskuEzRSL0G5pcUMozBqjn1uSYb 8guvflRMOzd/uZrDGe3/569ETEBtuJ0AoGDoTWQr4K1kVQpvJ/jreA0+s7+BsKw8 ZBA8lKbSwGFhJyJmOmNP5HD9oVSQiVWB1ipEJ4UYus9/51433tlOG/6/PPMzJJEe AZqN7HulB02RyZo/tPAQhKVRMPZhY5xLiKpvISLTBWkBghJt3888MH8gNJJnedWW B4hK5M/N8lOe4YXmtSX0MD6kA3k4/OM= -----END CERTIFICATE-----Generated at Tue Jun 3 05:11:12 2025 by rpki-client