$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef252f4f-38b8-348a-92ea-6e442da7e159.roa File: ef252f4f-38b8-348a-92ea-6e442da7e159.roa (raw, json) Hash identifier: fHCEHu18eBt9PqAzhwgkpdRRa4QDOEasoaeLJdtxfxw= Subject key identifier: BD:B7:AA:90:D7:37:4B:81:C4:31:32:AF:30:BC:BF:45:B1:9F:B2:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C07CA33AA183713A44EB300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef252f4f-38b8-348a-92ea-6e442da7e159.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 67.162.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:ca:33:aa:18:37:13:a4:4e:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=5e2a2b5b-8550-40fa-88dd-5e89348d1a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c4:7b:92:a2:78:9e:58:ed:bb:46:be:cd:6e: 84:f6:46:b0:f4:f6:62:59:f8:0a:f6:fc:89:71:73: 8b:db:0f:62:b5:39:0c:1d:a9:26:d3:71:f8:4e:39: f1:5b:90:6b:da:d0:12:23:40:17:ef:67:cc:64:28: ed:3e:1e:f5:51:1c:fa:9a:7b:fc:fc:77:1f:97:e3: be:8b:80:e7:7c:02:ad:29:13:98:cd:35:83:b9:3e: 6c:da:9a:2b:ee:78:b5:01:8b:6a:17:0e:79:95:5e: b6:7c:70:99:0d:82:80:8a:0a:e7:58:42:b2:37:04: a3:0e:45:59:f6:22:fd:f6:cd:f8:d6:ed:63:77:fe: da:0f:82:af:77:0e:77:ea:5d:70:c3:d5:f1:c5:23: 5d:cb:c1:ba:e8:1a:0a:c7:b2:41:92:de:0b:c0:de: fa:38:1f:9b:b1:ab:53:e9:37:eb:d8:00:ef:2c:3f: fb:64:c6:16:b1:a0:bf:75:53:4c:f7:2f:61:61:13: cb:5b:c0:8c:87:d7:f3:19:4b:3d:b1:57:81:2e:43: 06:4e:13:ea:9f:8b:69:20:e8:b1:c7:2c:25:3a:6b: 0f:7b:c6:cf:12:cf:d4:67:99:95:19:6d:b7:9e:33: 8d:61:77:8e:81:2c:da:8d:06:66:8d:9c:19:6f:45: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B7:AA:90:D7:37:4B:81:C4:31:32:AF:30:BC:BF:45:B1:9F:B2:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef252f4f-38b8-348a-92ea-6e442da7e159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.162.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e5:8b:7d:fb:58:a1:27:c8:ca:a5:77:64:2e:21:8c:92:ab: 53:53:26:09:74:35:49:b4:54:89:f2:b2:a4:9f:9b:7e:39:9d: f3:2c:7c:97:9d:18:53:00:e8:21:5e:f2:8e:05:43:2a:fa:71: a7:3f:34:57:d8:8f:02:5a:15:77:98:9d:98:0a:26:84:9e:17: 2f:2c:38:f2:f9:e8:31:c4:a7:7d:3c:29:cf:6a:80:14:3b:ff: 81:5f:7d:9e:16:5b:f4:a6:74:45:d7:5e:c6:c3:16:27:87:9e: ed:b7:5e:dc:65:1d:19:f9:0b:25:a1:fa:65:c9:a1:40:6e:08: 59:dd:71:a2:70:d8:08:05:a4:a6:3a:65:51:4b:dd:4c:27:4f: 32:83:5c:32:26:2e:c2:14:59:ed:fb:3b:90:c2:24:b9:f0:b0: a5:0b:43:ba:7e:16:47:c3:9a:ee:97:f2:0d:98:8f:5c:4f:04: 67:3e:54:c8:cf:38:0f:5e:6a:02:42:0d:cf:75:cd:6a:37:cb: cf:bb:dd:1a:38:28:16:b5:56:b1:18:e9:9f:9b:8a:3c:75:9c: 98:83:6c:be:b1:87:b0:9f:f6:c7:de:54:2b:db:cc:0a:d9:d3: 9e:9d:cd:92:24:a1:73:0a:f5:54:18:a6:6d:16:19:b4:a6:6d: 28:80:4b:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB8ozqhg3E6ROswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NWUyYTJiNWItODU1MC00MGZhLTg4ZGQtNWU4OTM0OGQxYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8R7kqJ4nljtu0a+zW6E9kaw9PZiWfgK9vyJ cXOL2w9itTkMHakm03H4TjnxW5Br2tASI0AX72fMZCjtPh71URz6mnv8/Hcfl+O+ i4DnfAKtKROYzTWDuT5s2por7ni1AYtqFw55lV62fHCZDYKAigrnWEKyNwSjDkVZ 9iL99s341u1jd/7aD4Kvdw536l1ww9XxxSNdy8G66BoKx7JBkt4LwN76OB+bsatT 6Tfr2ADvLD/7ZMYWsaC/dVNM9y9hYRPLW8CMh9fzGUs9sVeBLkMGThPqn4tpIOix xywlOmsPe8bPEs/UZ5mVGW23njONYXeOgSzajQZmjZwZb0VD0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL23qpDXN0uBxDEyrzC8v0Wxn7IDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWYyNTJmNGYtMzhiOC0z NDhhLTkyZWEtNmU0NDJkYTdlMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6JsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArli337WKEnyMqld2QuIYySq1NTJgl0NUm0VInysqSfm345nfMsfJed GFMA6CFe8o4FQyr6cac/NFfYjwJaFXeYnZgKJoSeFy8sOPL56DHEp308Kc9qgBQ7 /4FffZ4WW/SmdEXXXsbDFieHnu23XtxlHRn5CyWh+mXJoUBuCFndcaJw2AgFpKY6 ZVFL3UwnTzKDXDImLsIUWe37O5DCJLnwsKULQ7p+FkfDmu6X8g2Yj1xPBGc+VMjP OA9eagJCDc91zWo3y8+73Ro4KBa1VrEY6Z+bijx1nJiDbL6xh7Cf9sfeVCvbzArZ 056dzZIkoXMK9VQYpm0WGbSmbSiAS70= -----END CERTIFICATE-----Generated at Tue Jun 3 06:54:51 2025 by rpki-client