$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8a5d8ab-f45e-38fd-a95f-0a261f2c0b33.roa File: e8a5d8ab-f45e-38fd-a95f-0a261f2c0b33.roa (raw, json) Hash identifier: E+TcHo3ivnzITe3+f8ySoMDZAxGm0QPqW287tYUHD3M= Subject key identifier: 46:85:9A:66:60:09:1B:82:44:E9:F4:05:A0:64:5B:21:6E:BB:BB:E7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4315B8B5EA9786076E96380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8a5d8ab-f45e-38fd-a95f-0a261f2c0b33.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 174.168.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:5b:8b:5e:a9:78:60:76:e9:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=a95edb0f-0f43-48d8-9174-dc6154b7e381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:d2:21:2c:95:0d:aa:d0:7f:24:7d:a6:ba: 7b:b3:32:8b:d2:79:ae:c9:b2:0f:84:40:ae:d0:82: 95:6f:d6:5f:89:18:d4:e1:90:71:89:d8:28:be:58: d8:44:a4:c7:88:5f:c7:4e:e2:d2:5a:2b:d4:93:08: 04:67:51:f0:76:ed:f9:aa:f4:37:f4:59:fb:91:ff: ea:81:31:0e:fb:68:3f:9e:21:da:5c:46:d7:4d:a2: 6b:90:72:7d:5b:a7:ba:75:b9:da:38:74:65:09:6a: 87:8e:8f:c4:88:f5:ed:0d:51:75:7f:0d:60:3f:a4: ad:61:75:b8:ef:c3:72:98:ad:be:58:a4:22:cf:be: 90:01:f4:5f:f4:2f:02:5a:d6:fa:02:cc:8e:57:b4: 52:a3:3d:0d:ae:bd:ac:e9:87:5f:89:f8:38:f2:a3: ca:16:a1:b8:e4:0c:b5:6b:1b:f4:c3:51:b4:f4:21: 83:5a:b4:11:4c:a6:46:cb:66:bb:82:c4:0f:7b:da: 44:7d:5f:94:8f:31:8e:50:6f:54:10:5e:d5:e8:0b: 72:6f:1d:fb:f6:af:f8:6a:94:8e:80:c7:97:82:97: c7:06:a9:2f:18:67:02:15:36:e4:b4:62:c4:92:3b: 84:40:96:bb:e4:94:9f:5e:6f:9d:3f:40:26:e8:2e: 85:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:85:9A:66:60:09:1B:82:44:E9:F4:05:A0:64:5B:21:6E:BB:BB:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8a5d8ab-f45e-38fd-a95f-0a261f2c0b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.168.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ff:f6:6a:09:42:a6:27:2e:85:3b:28:b5:36:06:54:5c:84: 6f:8f:6f:e8:2c:5b:3d:3a:5f:25:35:8a:1d:8c:d9:9d:0a:bc: 15:77:c4:d1:95:22:03:42:6d:bc:72:ba:68:8f:4a:d4:84:a9: d8:ab:ed:52:4b:0c:00:8a:80:80:64:7c:3f:b9:05:53:df:65: a7:b2:94:c8:16:d3:1c:f6:5c:3c:18:9c:3a:43:e1:04:89:76: ed:fd:f2:bc:09:84:77:69:ef:f0:90:f8:5b:23:9b:06:cc:f6: c7:16:d4:93:31:59:03:a5:2a:8c:e8:b9:d4:c5:a4:3c:b3:12: 77:2f:9b:6e:0e:4c:b5:45:76:c5:5e:ec:db:10:97:55:08:46: 58:57:25:1b:31:05:26:24:78:73:64:cd:0a:82:5b:89:6d:72: a5:48:a8:75:b0:8c:e5:02:94:e7:de:ab:48:c2:f0:79:1d:cc: 9b:e5:07:da:e3:7d:d1:53:23:d3:72:a0:9f:9d:51:5f:3b:9e: 42:d4:c0:ab:5d:db:9f:dd:2a:b0:4c:f1:12:92:31:e1:35:3c: a7:fe:bb:e9:07:6a:83:75:16:2a:b6:bd:dd:e4:ff:a9:53:70: 68:21:5b:fd:ac:3e:25:1d:ae:cd:fd:48:0d:46:bf:19:3f:df: a1:bd:b1:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMVuLXql4YHbpY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YTk1ZWRiMGYtMGY0My00OGQ4LTkxNzQtZGM2MTU0YjdlMzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxXSISyVDarQfyR9prp7szKL0nmuybIPhECu 0IKVb9ZfiRjU4ZBxidgovljYRKTHiF/HTuLSWivUkwgEZ1Hwdu35qvQ39Fn7kf/q gTEO+2g/niHaXEbXTaJrkHJ9W6e6dbnaOHRlCWqHjo/EiPXtDVF1fw1gP6StYXW4 78NymK2+WKQiz76QAfRf9C8CWtb6AsyOV7RSoz0Nrr2s6Ydfifg48qPKFqG45Ay1 axv0w1G09CGDWrQRTKZGy2a7gsQPe9pEfV+UjzGOUG9UEF7V6Atybx379q/4apSO gMeXgpfHBqkvGGcCFTbktGLEkjuEQJa75JSfXm+dP0Am6C6FsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaFmmZgCRuCROn0BaBkWyFuu7vnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZThhNWQ4YWItZjQ1ZS0z OGZkLWE5NWYtMGEyNjFmMmMwYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD/9moJQqYnLoU7KLU2BlRchG+Pb+gsWz06XyU1ih2M2Z0KvBV3xNGV IgNCbbxyumiPStSEqdir7VJLDACKgIBkfD+5BVPfZaeylMgW0xz2XDwYnDpD4QSJ du398rwJhHdp7/CQ+FsjmwbM9scW1JMxWQOlKozoudTFpDyzEncvm24OTLVFdsVe 7NsQl1UIRlhXJRsxBSYkeHNkzQqCW4ltcqVIqHWwjOUClOfeq0jC8HkdzJvlB9rj fdFTI9NyoJ+dUV87nkLUwKtd25/dKrBM8RKSMeE1PKf+u+kHaoN1Fiq2vd3k/6lT cGghW/2sPiUdrs39SA1Gvxk/36G9sTA= -----END CERTIFICATE-----Generated at Tue Jun 3 04:55:32 2025 by rpki-client