$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9aaf4be-2a9f-3d3a-96d5-83e3cd55a97e.roa File: d9aaf4be-2a9f-3d3a-96d5-83e3cd55a97e.roa (raw, json) Hash identifier: znCeW70jXFCcFcXfw75LlZFPEwD2Kmz5D20PKFF8Xbw= Subject key identifier: 70:7E:A3:E4:45:DE:26:0E:F5:71:3C:99:B6:4D:B1:71:60:8E:A8:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FCCA5A292650E56E96B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9aaf4be-2a9f-3d3a-96d5-83e3cd55a97e.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 71.237.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:cc:a5:a2:92:65:0e:56:e9:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=c8036f67-63f7-472d-8508-ebb7ffc9d7d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:46:ca:1e:09:54:bb:9f:2e:9f:6e:0e:3b:e9: b4:cf:5e:c3:e9:ad:57:9f:d4:5c:cf:df:f7:df:bf: 4c:1a:8a:a3:84:c2:c9:20:39:c7:cd:50:33:3f:e6: 1f:22:3d:1d:45:b9:32:e4:eb:20:8e:49:4c:04:e0: 93:be:7a:3e:de:8c:fd:fc:ec:fb:79:dd:49:e4:25: ad:7b:a6:e5:10:cf:f2:df:a9:40:2d:9f:78:0e:74: c6:4b:8f:50:b6:cb:7c:53:13:48:49:74:5c:66:86: fd:2e:40:be:21:ef:61:89:e1:aa:92:d8:32:07:06: f9:f4:37:b8:04:ac:e4:b8:be:ee:31:7e:70:62:d7: ac:29:8d:fe:9d:cf:cc:8d:2e:00:c8:34:3a:2f:65: a6:63:24:c7:63:3d:3d:8f:f7:0d:aa:cf:4d:ce:66: 18:3b:f9:bf:d1:e9:bc:97:55:34:70:80:e4:2e:d0: fe:33:04:d0:19:ec:55:33:e0:9c:b2:4a:1b:65:2d: ac:c3:e2:05:96:c6:5c:79:2e:8f:c5:1e:ba:ef:f1: d6:cd:71:c9:39:ec:f1:cb:76:c8:f6:66:2f:45:ae: d1:2f:05:04:3e:10:7f:20:62:a3:77:8f:b6:8d:7d: c6:0d:40:97:da:54:ff:89:f4:38:37:3e:3a:71:ff: 00:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7E:A3:E4:45:DE:26:0E:F5:71:3C:99:B6:4D:B1:71:60:8E:A8:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9aaf4be-2a9f-3d3a-96d5-83e3cd55a97e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.237.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:81:ef:9e:be:f9:36:f6:46:35:a5:fc:2f:21:55:ea:38:41: 3f:94:6b:50:25:9c:f2:c9:3d:28:6c:f8:db:00:34:b9:7e:40: 79:fd:5c:94:6d:eb:74:72:26:0d:d5:00:b0:b5:7b:29:5a:54: 2c:64:65:46:82:36:28:74:e2:6d:c7:6e:43:32:6c:9a:7f:aa: d6:3d:16:37:92:5d:a0:4c:60:0d:2e:fe:32:73:8f:9e:04:6b: 89:71:7f:30:84:3c:dc:3b:2c:ce:e9:ed:b7:0c:6f:66:28:e3: bf:b6:03:20:7d:2a:b2:07:38:c5:5c:d5:64:b7:f2:e6:ed:f4: 68:84:03:97:28:ff:f7:8f:17:9c:3d:3c:2d:26:45:b8:19:cf: 35:2e:e9:c5:a6:a2:61:31:14:50:a1:d8:fc:e5:41:97:97:13: 46:3d:df:3c:a9:94:0c:66:fe:b9:a3:2b:e2:21:da:1a:3b:ab: 70:fe:e3:31:50:4a:c5:cc:83:1c:03:bb:1e:47:2d:c8:72:f6: 83:12:dd:58:cf:56:1d:c7:c1:63:4c:30:0b:83:60:1d:3a:2e: 92:ab:4d:76:e5:ea:61:1e:da:71:de:3e:af:89:0e:03:f8:a9: c2:06:31:77:aa:39:10:6e:29:46:af:33:01:20:1a:47:fd:a9: 44:f7:24:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL8ylopJlDlbpa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzgwMzZmNjctNjNmNy00NzJkLTg1MDgtZWJiN2ZmYzlkN2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0bKHglUu58un24OO+m0z17D6a1Xn9Rcz9/3 379MGoqjhMLJIDnHzVAzP+YfIj0dRbky5OsgjklMBOCTvno+3oz9/Oz7ed1J5CWt e6blEM/y36lALZ94DnTGS49Qtst8UxNISXRcZob9LkC+Ie9hieGqktgyBwb59De4 BKzkuL7uMX5wYtesKY3+nc/MjS4AyDQ6L2WmYyTHYz09j/cNqs9NzmYYO/m/0em8 l1U0cIDkLtD+MwTQGexVM+CcskobZS2sw+IFlsZceS6PxR667/HWzXHJOezxy3bI 9mYvRa7RLwUEPhB/IGKjd4+2jX3GDUCX2lT/ifQ4Nz46cf8AQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHB+o+RF3iYO9XE8mbZNsXFgjqixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDlhYWY0YmUtMmE5Zi0z ZDNhLTk2ZDUtODNlM2NkNTVhOTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWB756++Tb2RjWl/C8hVeo4QT+Ua1AlnPLJPShs+NsANLl+QHn9XJRt 63RyJg3VALC1eylaVCxkZUaCNih04m3HbkMybJp/qtY9FjeSXaBMYA0u/jJzj54E a4lxfzCEPNw7LM7p7bcMb2Yo47+2AyB9KrIHOMVc1WS38ubt9GiEA5co//ePF5w9 PC0mRbgZzzUu6cWmomExFFCh2PzlQZeXE0Y93zyplAxm/rmjK+Ih2ho7q3D+4zFQ SsXMgxwDux5HLchy9oMS3VjPVh3HwWNMMAuDYB06LpKrTXbl6mEe2nHePq+JDgP4 qcIGMXeqORBuKUavMwEgGkf9qUT3JL4= -----END CERTIFICATE-----Generated at Tue Jun 3 04:50:24 2025 by rpki-client