$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc72a0cb-05b7-32b9-bbe9-51e7599539b6.roa File: dc72a0cb-05b7-32b9-bbe9-51e7599539b6.roa (raw, json) Hash identifier: 1VShrPG/IVJIkyA2SoHpvEUeXfvGxtevzAjc3RsCSnk= Subject key identifier: 86:B9:5E:04:D8:FE:E3:F2:2F:3F:BF:3C:32:A3:10:42:39:D8:E6:E0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FF4997217F32E6BAC7A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc72a0cb-05b7-32b9-bbe9-51e7599539b6.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 174.168.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:f4:99:72:17:f3:2e:6b:ac:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=eb5cdb87-5412-4830-98ff-9f6a2a47ae10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:57:b8:c6:af:b5:b4:9a:67:d8:94:e3:40:df: 45:7b:cc:68:c2:98:57:64:71:89:5a:fc:16:f7:81: 31:17:b2:be:b1:c0:ec:00:44:3f:d1:2c:36:e9:36: 2f:05:b5:94:da:92:6b:f8:45:93:13:72:b1:9d:31: 08:48:cc:83:fc:9f:cb:d2:d5:df:6f:2c:0f:cf:6a: ed:69:59:38:c8:36:dd:58:2b:3e:9f:24:db:92:91: 2b:a3:96:8b:a1:3a:ab:fa:61:06:79:f1:4e:ac:8e: c8:de:2d:8a:27:0d:5d:3d:e6:f5:7b:0d:9d:20:3c: 22:a5:df:ab:07:50:e2:db:de:d2:93:dd:2e:36:d9: 3e:39:65:4c:97:b6:b8:e6:fb:db:b5:76:72:50:e4: 6b:0d:08:f6:59:87:59:9e:2c:c6:3c:c9:5b:05:31: 9d:22:42:45:12:8b:0f:95:7f:c7:79:7e:8e:86:88: e5:cc:b4:b1:bd:0a:6d:95:4c:67:aa:9f:25:77:55: 3c:86:da:4c:d9:9a:42:0c:df:67:c7:a3:79:77:bc: 39:24:8e:e0:e7:e0:21:08:89:a7:ac:c6:60:90:b4: 4e:bd:15:62:8b:f0:bf:e3:33:8f:03:ae:f9:da:89: bd:4e:7a:65:03:8c:cc:73:f9:44:91:ff:12:00:5d: b6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B9:5E:04:D8:FE:E3:F2:2F:3F:BF:3C:32:A3:10:42:39:D8:E6:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc72a0cb-05b7-32b9-bbe9-51e7599539b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.168.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:8c:88:cd:47:b2:f0:56:89:b6:65:1d:4f:2e:d6:1d:0e:c3: 59:e6:25:e6:b5:0b:7f:b1:7a:9a:d5:9c:6c:e0:48:c8:9c:5c: 89:ea:59:de:70:3c:9e:21:9f:0c:73:b2:a5:c6:be:a9:14:94: cd:12:61:3b:65:f4:d9:43:30:bf:72:6c:3c:63:09:90:34:ef: 77:d4:91:28:ea:c8:95:4c:a4:fd:15:fe:9c:b2:f7:85:b3:bc: c3:20:87:d7:f2:99:ce:22:e9:71:99:aa:1b:8d:3f:a3:8c:ae: 4b:bf:b3:97:d0:2f:d1:f6:85:df:d9:60:83:fb:9a:29:90:5a: 4b:b5:ed:0a:76:8c:57:af:88:88:fe:10:78:90:c2:e4:de:da: b1:93:92:3f:b2:40:7f:77:1e:73:1a:81:7b:5a:2a:3b:7c:3f: 85:91:1f:8d:78:64:53:2c:ef:79:a0:1e:47:ff:97:9e:e7:b6: e2:d5:e2:a6:3e:b8:46:a2:42:ba:66:57:7e:1b:2a:fe:39:2c: aa:94:3b:84:17:8b:da:c0:d2:7e:32:48:33:82:41:8d:c7:4b: 25:dd:ce:d1:18:40:b5:88:6e:66:54:a4:93:e8:19:6f:31:aa: 0f:f0:7b:57:8c:47:17:aa:9b:95:25:48:49:6f:b2:55:6b:b9: 90:50:d8:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL/SZchfzLmusegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZWI1Y2RiODctNTQxMi00ODMwLTk4ZmYtOWY2YTJhNDdhZTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFe4xq+1tJpn2JTjQN9Fe8xowphXZHGJWvwW 94ExF7K+scDsAEQ/0Sw26TYvBbWU2pJr+EWTE3KxnTEISMyD/J/L0tXfbywPz2rt aVk4yDbdWCs+nyTbkpEro5aLoTqr+mEGefFOrI7I3i2KJw1dPeb1ew2dIDwipd+r B1Di297Sk90uNtk+OWVMl7a45vvbtXZyUORrDQj2WYdZnizGPMlbBTGdIkJFEosP lX/HeX6OhojlzLSxvQptlUxnqp8ld1U8htpM2ZpCDN9nx6N5d7w5JI7g5+AhCImn rMZgkLROvRVii/C/4zOPA6752om9TnplA4zMc/lEkf8SAF225QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIa5XgTY/uPyLz+/PDKjEEI52ObgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGM3MmEwY2ItMDViNy0z MmI5LWJiZTktNTFlNzU5OTUzOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaMiM1HsvBWibZlHU8u1h0Ow1nmJea1C3+xeprVnGzgSMicXInqWd5w PJ4hnwxzsqXGvqkUlM0SYTtl9NlDML9ybDxjCZA073fUkSjqyJVMpP0V/pyy94Wz vMMgh9fymc4i6XGZqhuNP6OMrku/s5fQL9H2hd/ZYIP7mimQWku17Qp2jFeviIj+ EHiQwuTe2rGTkj+yQH93HnMagXtaKjt8P4WRH414ZFMs73mgHkf/l57ntuLV4qY+ uEaiQrpmV34bKv45LKqUO4QXi9rA0n4ySDOCQY3HSyXdztEYQLWIbmZUpJPoGW8x qg/we1eMRxeqm5UlSElvslVruZBQ2MI= -----END CERTIFICATE-----Generated at Wed Jun 4 23:15:05 2025 by rpki-client