$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/042c0262-8d76-34d5-bdbe-32b8ad530b33.roa File: 042c0262-8d76-34d5-bdbe-32b8ad530b33.roa (raw, json) Hash identifier: jhtWeUSv6fQ3RVWcNEx4lD9Wtw/tWOy59SGLj4pggRA= Subject key identifier: E1:25:3D:5B:2D:9F:21:BC:07:91:FE:C5:2B:86:17:B2:EE:47:71:7C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5EF4BED8DC5C337008C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/042c0262-8d76-34d5-bdbe-32b8ad530b33.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 174.161.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:ef:4b:ed:8d:c5:c3:37:00:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=0ec3e1f2-36e4-4f91-b36e-e2ed180e464e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:17:6e:c6:2f:fd:1b:f6:93:8c:f4:22:f6:a2: 92:01:6e:cf:ba:dc:08:c9:c1:40:f4:f6:e4:e8:78: 3b:13:86:88:3b:7c:1e:84:97:60:57:76:a2:f0:53: 95:e3:62:ed:ad:6b:be:77:f5:20:b1:90:98:86:49: f2:e5:84:40:72:dc:62:b9:ae:8c:51:f3:f5:97:31: 4c:59:a4:4d:cb:d5:76:63:9f:0b:1c:63:30:ef:77: b1:c9:e8:83:ad:87:81:1c:d2:91:28:cc:c4:75:be: 66:ee:29:d1:be:9b:ce:f7:c8:90:0c:66:5c:30:d6: ba:cd:ce:9f:ed:51:8e:f7:b3:2e:5c:65:d5:8f:77: 8b:1f:29:b0:32:78:98:0c:b4:b8:3c:00:83:19:d1: 4a:95:39:82:a5:1f:0f:b9:88:77:ca:8d:69:9e:09: 2e:03:42:22:96:04:7b:f8:eb:32:37:23:ba:0b:a5: 8c:6e:6a:17:58:81:21:cc:80:34:a9:81:80:f4:fd: 6b:4d:45:2b:ed:f3:7a:a5:3b:0d:6c:2b:88:24:f4: 95:22:d2:37:39:c0:40:4c:41:21:5f:a0:04:0e:67: cd:9e:77:33:31:21:1e:e7:e2:01:81:f2:94:6e:b2: 9e:df:da:bb:77:58:c1:85:ef:07:d3:c1:ce:18:35: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:25:3D:5B:2D:9F:21:BC:07:91:FE:C5:2B:86:17:B2:EE:47:71:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/042c0262-8d76-34d5-bdbe-32b8ad530b33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:7d:e7:d5:1b:b9:53:ec:ef:64:a1:0a:37:d7:ba:a7:17:f8: b6:86:d2:18:f7:60:d4:ea:34:76:33:39:16:43:59:1c:d7:3b: 2b:75:ed:da:89:f9:00:c2:96:39:f4:ca:29:11:9b:74:84:7c: 41:77:4a:95:14:1f:12:53:d2:e9:80:aa:cc:f8:a3:da:36:c1: 08:2c:e2:1a:ce:0d:cb:90:52:01:cc:f7:d2:a8:83:dd:b5:96: ce:b7:72:43:35:f1:ff:f0:d9:f5:60:ff:b1:9c:10:e1:28:48: 98:f6:cd:c6:e9:6d:5b:eb:db:bd:9b:52:8e:58:8a:36:ac:94: 52:0b:2a:81:0a:18:30:8a:d2:9d:e3:2e:51:f0:52:0c:c2:4c: fb:05:e3:05:d5:11:1d:6c:de:7d:22:37:b0:ba:02:5f:81:26: 5e:3e:b6:6e:d6:8b:a0:14:70:ce:37:3e:ac:d9:8b:6b:3f:92: 79:cb:95:43:a5:96:3c:18:f2:14:4f:c3:43:fc:9c:c2:7f:e7: c6:fe:41:6b:a8:b2:bd:15:61:24:51:e9:fd:2b:e0:d1:9a:de: b7:2d:0c:71:8e:64:1e:f2:da:8d:00:fe:0b:c8:70:d7:30:18: 8f:67:21:3b:14:36:fa:59:b4:c5:78:74:89:1f:da:92:5d:ae: cf:43:5d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pe9L7Y3FwzcAjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MGVjM2UxZjItMzZlNC00ZjkxLWIzNmUtZTJlZDE4MGU0NjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRduxi/9G/aTjPQi9qKSAW7PutwIycFA9Pbk 6Hg7E4aIO3wehJdgV3ai8FOV42LtrWu+d/UgsZCYhkny5YRActxiua6MUfP1lzFM WaRNy9V2Y58LHGMw73exyeiDrYeBHNKRKMzEdb5m7inRvpvO98iQDGZcMNa6zc6f 7VGO97MuXGXVj3eLHymwMniYDLS4PACDGdFKlTmCpR8PuYh3yo1pngkuA0IilgR7 +OsyNyO6C6WMbmoXWIEhzIA0qYGA9P1rTUUr7fN6pTsNbCuIJPSVItI3OcBATEEh X6AEDmfNnnczMSEe5+IBgfKUbrKe39q7d1jBhe8H08HOGDUxowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOElPVstnyG8B5H+xSuGF7LuR3F8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDQyYzAyNjItOGQ3Ni0z NGQ1LWJkYmUtMzJiOGFkNTMwYjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGp959UbuVPs72ShCjfXuqcX+LaG0hj3YNTqNHYzORZDWRzXOyt17dqJ +QDCljn0yikRm3SEfEF3SpUUHxJT0umAqsz4o9o2wQgs4hrODcuQUgHM99Kog921 ls63ckM18f/w2fVg/7GcEOEoSJj2zcbpbVvr272bUo5YijaslFILKoEKGDCK0p3j LlHwUgzCTPsF4wXVER1s3n0iN7C6Al+BJl4+tm7Wi6AUcM43PqzZi2s/knnLlUOl ljwY8hRPw0P8nMJ/58b+QWuosr0VYSRR6f0r4NGa3rctDHGOZB7y2o0A/gvIcNcw GI9nITsUNvpZtMV4dIkf2pJdrs9DXSE= -----END CERTIFICATE-----Generated at Sun Apr 27 10:32:55 2025 by rpki-client