$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6db06a1-08e2-37f2-a3a8-8f910856e66b.roa File: e6db06a1-08e2-37f2-a3a8-8f910856e66b.roa (raw, json) Hash identifier: pY0BzSeLoEJMptQf8M0JxMDixbTSpqjGbaokwVXF6bg= Subject key identifier: E4:E7:11:1F:C9:97:4E:62:C0:AE:10:31:F6:53:62:AA:63:10:B5:9F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FD0A8EC60B61C4D825900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6db06a1-08e2-37f2-a3a8-8f910856e66b.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 71.63.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:d0:a8:ec:60:b6:1c:4d:82:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=88ccb84b-a565-46b7-aa9a-a4585f93c118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b2:67:b9:e1:a2:e3:22:e9:9c:dc:69:ef:d9: bb:4f:a9:76:c1:1a:1b:84:6f:b1:a7:a9:ee:ca:bc: d9:49:a6:04:91:35:de:42:e4:9b:8f:5c:7f:57:7c: 03:92:e7:21:79:dc:2a:50:f2:69:da:8f:bd:bd:7a: 1f:54:51:56:2f:52:05:57:72:b6:e5:a9:9b:e3:e4: cc:7c:3f:58:cd:71:3b:0f:0b:17:8e:18:a8:59:90: ea:fe:d5:54:37:6b:73:cf:fd:0a:fe:fb:54:69:06: 0b:30:26:96:89:0d:c9:bd:14:27:18:5e:41:56:d4: cc:57:ae:33:52:5f:70:29:5a:79:1b:1f:1c:70:ce: 2e:4d:cf:e0:47:c5:23:c3:ba:21:3b:5f:1d:0c:70: 6d:a5:ca:27:04:5e:77:3b:cc:0f:83:70:b0:7d:94: 6a:25:88:ac:25:2c:8a:67:37:e7:75:40:6e:94:d8: 7a:f8:fe:fb:30:28:d5:86:89:c3:10:b9:9d:34:6b: ce:be:eb:4e:e0:4a:3b:d4:03:5a:4a:57:e1:9e:a8: 71:34:f3:69:54:e6:0a:b9:77:7a:92:a1:f1:19:20: 4a:30:e1:17:c3:18:1e:f7:64:22:ed:15:c8:c0:82: 55:b1:c0:d8:93:29:71:8f:f6:16:df:92:22:20:e7: bc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E7:11:1F:C9:97:4E:62:C0:AE:10:31:F6:53:62:AA:63:10:B5:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6db06a1-08e2-37f2-a3a8-8f910856e66b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.63.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:24:54:02:85:52:47:d7:fb:db:7a:4c:93:b4:1a:ca:9a:0a: 2c:fc:d4:6e:82:3a:0e:9f:7c:96:0c:ea:65:e4:29:ba:54:08: cc:50:ca:32:bb:50:b5:dd:ae:cb:2b:64:cb:e5:80:b3:e5:76: 89:39:31:34:91:1d:b4:f7:90:31:f4:61:9a:c2:8a:57:14:cc: d7:d4:ef:1a:dd:05:4c:9d:a4:72:82:40:67:59:3b:e9:5e:f7: 17:35:cc:16:5a:78:3d:22:cf:34:2a:71:57:50:64:17:62:36: 7f:cd:62:44:ca:8b:72:c3:23:ea:98:15:a5:e0:b7:cb:5e:65: 00:54:b1:28:84:b1:f2:a1:cb:cc:62:a0:da:3a:28:73:48:41: ac:19:1e:51:bc:13:97:bf:ce:96:75:64:37:af:b4:90:69:d3: 1e:0a:40:56:bf:47:3a:dc:a9:ce:2f:60:ff:51:0e:05:01:b6: 07:a5:17:48:df:4f:48:94:b1:c5:a9:cd:35:79:2c:af:11:8d: c6:3c:00:55:39:e1:ec:e0:07:96:5b:40:f5:8e:e0:d3:f9:b5: 84:c7:7a:a5:00:94:1a:18:88:d7:44:ab:0c:5a:44:7b:7c:ef: 9e:30:fc:df:2d:45:d4:0f:ff:70:2e:4a:a2:43:a8:85:ce:6c: ff:e3:ae:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL9Co7GC2HE2CWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODhjY2I4NGItYTU2NS00NmI3LWFhOWEtYTQ1ODVmOTNjMTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirJnueGi4yLpnNxp79m7T6l2wRobhG+xp6nu yrzZSaYEkTXeQuSbj1x/V3wDkuchedwqUPJp2o+9vXofVFFWL1IFV3K25amb4+TM fD9YzXE7DwsXjhioWZDq/tVUN2tzz/0K/vtUaQYLMCaWiQ3JvRQnGF5BVtTMV64z Ul9wKVp5Gx8ccM4uTc/gR8Ujw7ohO18dDHBtpconBF53O8wPg3CwfZRqJYisJSyK ZzfndUBulNh6+P77MCjVhonDELmdNGvOvutO4Eo71ANaSlfhnqhxNPNpVOYKuXd6 kqHxGSBKMOEXwxge92Qi7RXIwIJVscDYkylxj/YW35IiIOe8eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTnER/Jl05iwK4QMfZTYqpjELWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTZkYjA2YTEtMDhlMi0z N2YyLWEzYTgtOGY5MTA4NTZlNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRz+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkkVAKFUkfX+9t6TJO0GsqaCiz81G6COg6ffJYM6mXkKbpUCMxQyjK7 ULXdrssrZMvlgLPldok5MTSRHbT3kDH0YZrCilcUzNfU7xrdBUydpHKCQGdZO+le 9xc1zBZaeD0izzQqcVdQZBdiNn/NYkTKi3LDI+qYFaXgt8teZQBUsSiEsfKhy8xi oNo6KHNIQawZHlG8E5e/zpZ1ZDevtJBp0x4KQFa/Rzrcqc4vYP9RDgUBtgelF0jf T0iUscWpzTV5LK8RjcY8AFU54ezgB5ZbQPWO4NP5tYTHeqUAlBoYiNdEqwxaRHt8 754w/N8tRdQP/3AuSqJDqIXObP/jrjQ= -----END CERTIFICATE-----Generated at Tue Jun 3 04:50:42 2025 by rpki-client