$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea13a1d9-09ad-3344-8485-b327fda245f0.roa File: ea13a1d9-09ad-3344-8485-b327fda245f0.roa (raw, json) Hash identifier: ekLdla0iJNrJkyce8xCBm8IaX41NbGoapOFYJNKbDA4= Subject key identifier: 80:60:37:22:5C:D8:70:00:7C:3D:4D:6C:76:E1:D1:70:3D:F7:46:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D1651AF1DB37C0E9EF319550 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea13a1d9-09ad-3344-8485-b327fda245f0.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 22258 IP address blocks: 174.161.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:1a:f1:db:37:c0:e9:ef:31:95:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=58a26072-4360-4cdc-8793-5aa55d79595b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:27:31:23:80:d2:4b:a5:79:6a:0d:43:57: 82:7f:62:34:86:0f:c7:40:ea:3f:5a:4c:9d:97:de: 4a:aa:ee:60:ac:6e:2f:ab:60:8b:2c:53:27:81:41: 9a:02:c4:d2:50:3c:37:e9:e2:33:5f:6e:3c:af:64: d3:e4:3f:c7:21:be:69:ff:10:b7:1f:a3:19:0e:bc: 57:4e:9c:c5:27:9e:08:d4:a1:11:3c:3c:64:21:2b: 19:b7:b0:7b:34:6b:a7:bf:24:ee:40:e9:dd:4a:12: 55:55:1d:fa:0d:bf:21:c6:5f:88:e6:88:4a:d6:d5: 1f:58:96:38:6c:fc:50:21:2f:ff:b7:b5:19:ae:f2: 97:cb:74:e9:ea:fe:a0:38:23:bd:56:23:e4:f4:85: 0e:09:4d:0f:fc:bb:f7:42:e6:9b:c3:97:56:25:50: 57:9d:ee:88:51:87:6f:56:25:c1:b6:75:75:97:79: 7c:97:53:25:ad:9a:2b:00:cd:84:bb:b0:52:5f:f0: 82:8b:c2:2d:6e:ca:b0:79:9a:a0:d0:36:29:74:29: a0:20:c1:34:33:46:02:e5:23:83:83:87:3b:21:1e: e3:3d:d1:2b:39:6c:cc:58:54:6f:9f:27:0f:c5:74: d6:f2:db:8b:c8:98:d8:5c:28:59:b4:d5:e9:51:8d: 77:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:60:37:22:5C:D8:70:00:7C:3D:4D:6C:76:E1:D1:70:3D:F7:46:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea13a1d9-09ad-3344-8485-b327fda245f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:9b:1b:37:2d:1a:0f:fe:f4:84:de:29:36:61:63:e9:17:e2: a9:0f:a4:e0:66:5c:b9:11:8a:07:f9:9f:fa:24:f8:1c:bc:31: c9:e2:b2:3f:46:85:4e:bf:52:b8:70:65:db:fe:74:e5:6f:b7: 8a:33:2f:bb:60:53:ac:bf:e2:62:f9:0a:46:74:f7:c0:ef:9c: 6b:63:7c:67:29:22:f6:79:dd:54:80:58:e8:b5:ae:6f:78:d3: 45:11:00:58:95:d5:4e:ea:7d:6d:89:5f:24:6a:d9:3a:22:05: 04:9d:18:ab:e6:1f:df:04:39:0a:6a:31:20:ea:f8:55:31:28: 36:ec:2a:58:51:ce:39:f9:b0:3a:d6:19:f3:ef:3a:05:ef:ef: c0:e8:1e:50:92:2b:b1:e3:c8:9a:c6:90:96:5c:5e:7d:cb:5d: e2:48:86:9e:f1:c9:83:8e:6e:6d:b6:05:6e:bd:e2:75:e4:1b: fa:71:a3:18:f4:89:98:d9:be:5b:95:47:d8:54:c1:09:a3:2d: 9b:13:2d:22:16:09:18:ea:a8:b8:f4:c8:67:e1:11:1c:cc:91: 8f:b3:eb:f1:98:4d:b2:54:ad:1c:d5:8e:df:da:aa:91:ef:3d: b0:35:88:c2:93:eb:d7:23:35:09:04:71:00:9d:89:27:49:01: e4:6b:c8:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRrx2zfA6e8xlVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NThhMjYwNzItNDM2MC00Y2RjLTg3OTMtNWFhNTVkNzk1OTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmMnMSOA0kuleWoNQ1eCf2I0hg/HQOo/Wkyd l95Kqu5grG4vq2CLLFMngUGaAsTSUDw36eIzX248r2TT5D/HIb5p/xC3H6MZDrxX TpzFJ54I1KERPDxkISsZt7B7NGunvyTuQOndShJVVR36Db8hxl+I5ohK1tUfWJY4 bPxQIS//t7UZrvKXy3Tp6v6gOCO9ViPk9IUOCU0P/Lv3Quabw5dWJVBXne6IUYdv ViXBtnV1l3l8l1MlrZorAM2Eu7BSX/CCi8ItbsqweZqg0DYpdCmgIME0M0YC5SOD g4c7IR7jPdErOWzMWFRvnycPxXTW8tuLyJjYXChZtNXpUY13cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBgNyJc2HAAfD1NbHbh0XA990aEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWExM2ExZDktMDlhZC0z MzQ0LTg0ODUtYjMyN2ZkYTI0NWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANybGzctGg/+9ITeKTZhY+kX4qkPpOBmXLkRigf5n/ok+By8Mcnisj9G hU6/UrhwZdv+dOVvt4ozL7tgU6y/4mL5CkZ098DvnGtjfGcpIvZ53VSAWOi1rm94 00URAFiV1U7qfW2JXyRq2ToiBQSdGKvmH98EOQpqMSDq+FUxKDbsKlhRzjn5sDrW GfPvOgXv78DoHlCSK7HjyJrGkJZcXn3LXeJIhp7xyYOObm22BW694nXkG/pxoxj0 iZjZvluVR9hUwQmjLZsTLSIWCRjqqLj0yGfhERzMkY+z6/GYTbJUrRzVjt/aqpHv PbA1iMKT69cjNQkEcQCdiSdJAeRryDI= -----END CERTIFICATE-----Generated at Tue Jun 3 06:04:50 2025 by rpki-client