$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebfe2dab-f767-3bce-894a-e4660f1b05c2.roa File: ebfe2dab-f767-3bce-894a-e4660f1b05c2.roa (raw, json) Hash identifier: Gx+fYZ81MrKVvIoGSsaKdYPIgRGdxF8W1jk2og5Zicg= Subject key identifier: 84:B7:3B:B6:6C:66:B4:2F:21:71:A1:74:E8:2C:0D:35:13:83:08:8D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FCD7C503479E3AFB54180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebfe2dab-f767-3bce-894a-e4660f1b05c2.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 71.238.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:cd:7c:50:34:79:e3:af:b5:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=1e50acba-ee76-439c-9cc5-a027aea18807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1e:6d:fb:ab:10:4f:a5:7a:ae:fa:1d:a4:cb: 47:c7:f5:b4:a1:a0:bb:68:04:67:e8:52:28:5a:df: 86:f6:d9:c9:83:20:b0:8d:ab:0b:48:15:0a:0c:06: a9:1e:e4:54:76:f1:66:f5:07:cf:60:12:d2:44:0f: d8:cc:a4:82:19:a2:ff:e7:fd:13:51:1b:e7:91:6e: eb:07:73:1d:02:41:76:b5:bc:15:c3:0e:a7:92:0b: 7a:19:64:90:3b:86:32:36:48:46:57:37:8c:f1:af: e0:0f:63:38:d1:50:d2:89:dc:a3:31:87:44:67:0d: 36:7a:9b:46:bc:81:07:61:e6:3b:c3:42:11:57:83: 4b:e0:ca:78:e9:5f:ce:07:33:ad:3c:39:7d:f7:38: 08:cf:23:38:24:60:82:e8:85:83:a6:3a:a7:4a:28: 17:d1:e2:7f:7e:68:b6:b9:7b:07:68:4c:b9:48:d9: 3f:85:b7:69:4c:8c:f1:1b:cd:ff:e7:60:11:fd:5c: 84:15:d5:c8:99:a2:4a:6d:2c:81:b3:61:53:0a:07: 88:82:70:68:e0:a9:b2:48:fe:58:fb:1f:c6:5d:0f: 01:94:9a:a8:7b:7d:7f:7a:08:23:fb:00:15:2b:86: f6:32:0d:77:db:ea:68:a0:86:02:25:c2:f2:44:a7: 73:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B7:3B:B6:6C:66:B4:2F:21:71:A1:74:E8:2C:0D:35:13:83:08:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebfe2dab-f767-3bce-894a-e4660f1b05c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:de:d7:76:e7:db:37:11:1f:9b:72:5c:bf:7c:9a:33:2f:f2: 74:a3:02:1e:75:73:21:c2:a4:1d:3c:89:8a:26:32:1e:ad:e2: 10:a0:ff:cf:4d:e5:4f:da:e5:9b:68:2d:53:ea:c2:f8:09:05: 6b:ce:01:bc:c7:fc:b5:ef:70:60:07:ab:ec:72:7b:5e:54:e9: 88:59:05:c2:a9:b1:49:98:39:37:17:fe:1d:a3:bd:25:c8:2a: 5d:a5:39:a7:f2:c0:71:a8:18:5c:3b:dd:e2:29:e0:19:08:df: c3:97:cd:53:49:6d:9b:dd:fb:0c:1e:54:b8:f7:ae:ee:df:69: d2:82:9e:3f:ee:6f:f2:f1:bb:0b:03:66:f9:31:9e:52:3a:c5: e3:8a:8b:6c:29:6f:a3:b2:34:bf:76:3d:f2:cf:b1:a2:24:12: 07:a3:f8:ef:07:68:6c:e3:b1:b8:0c:25:92:23:61:f9:50:1e: 11:68:87:20:ec:6a:81:c1:9a:5c:53:1e:f2:36:81:c5:b2:93: 0f:57:8e:50:c5:a4:e8:0e:5c:48:6b:05:78:b8:a4:c2:ae:a4: 6d:ee:85:61:67:c3:85:50:86:5d:f5:7f:b2:4d:64:12:49:da: 61:56:89:37:52:78:b7:cc:33:f0:86:73:35:e2:75:f9:c9:33: 45:8f:66:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL818UDR546+1QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MWU1MGFjYmEtZWU3Ni00MzljLTljYzUtYTAyN2FlYTE4ODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x5t+6sQT6V6rvodpMtHx/W0oaC7aARn6FIo Wt+G9tnJgyCwjasLSBUKDAapHuRUdvFm9QfPYBLSRA/YzKSCGaL/5/0TURvnkW7r B3MdAkF2tbwVww6nkgt6GWSQO4YyNkhGVzeM8a/gD2M40VDSidyjMYdEZw02eptG vIEHYeY7w0IRV4NL4Mp46V/OBzOtPDl99zgIzyM4JGCC6IWDpjqnSigX0eJ/fmi2 uXsHaEy5SNk/hbdpTIzxG83/52AR/VyEFdXImaJKbSyBs2FTCgeIgnBo4KmySP5Y +x/GXQ8BlJqoe31/eggj+wAVK4b2Mg132+pooIYCJcLyRKdz5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS3O7ZsZrQvIXGhdOgsDTUTgwiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWJmZTJkYWItZjc2Ny0z YmNlLTg5NGEtZTQ2NjBmMWIwNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLe13bn2zcRH5tyXL98mjMv8nSjAh51cyHCpB08iYomMh6t4hCg/89N 5U/a5ZtoLVPqwvgJBWvOAbzH/LXvcGAHq+xye15U6YhZBcKpsUmYOTcX/h2jvSXI Kl2lOafywHGoGFw73eIp4BkI38OXzVNJbZvd+wweVLj3ru7fadKCnj/ub/LxuwsD ZvkxnlI6xeOKi2wpb6OyNL92PfLPsaIkEgej+O8HaGzjsbgMJZIjYflQHhFohyDs aoHBmlxTHvI2gcWykw9XjlDFpOgOXEhrBXi4pMKupG3uhWFnw4VQhl31f7JNZBJJ 2mFWiTdSeLfMM/CGczXidfnJM0WPZuM= -----END CERTIFICATE-----Generated at Tue Jun 3 05:59:53 2025 by rpki-client