$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/295f163b-0c2e-3fef-aa0d-f2dc00248bda.roa File: 295f163b-0c2e-3fef-aa0d-f2dc00248bda.roa (raw, json) Hash identifier: xXIB5B5XMr6P3lA7Xvu4KbpitexMTL4JUV8cFLxnsDg= Subject key identifier: 49:B0:4A:34:19:8C:70:C6:21:DD:B1:DF:00:BA:D9:55:E2:53:BF:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4323A7E7C72008C06027DC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/295f163b-0c2e-3fef-aa0d-f2dc00248bda.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 174.171.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:3a:7e:7c:72:00:8c:06:02:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=cdbe2676-3516-4004-86ea-49fb25d62559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:07:4d:99:cf:b9:e9:77:72:18:c3:60:ea:c7: dd:7a:a9:a9:2e:c6:1d:31:84:f1:35:fe:ff:a5:c0: b1:ae:3f:8f:9e:dd:e6:23:4a:e5:56:ca:7c:05:41: c4:79:b1:e4:25:e4:07:e8:3b:8c:5c:3e:17:1b:71: ae:ae:ba:a6:1b:fa:76:72:2b:ff:55:6a:1a:29:c4: f8:e9:31:5b:c1:9a:31:01:95:37:64:d4:a2:3c:6d: ea:d1:ce:13:19:a4:da:67:62:84:1b:58:1c:9d:6b: d2:dd:90:58:5e:ad:4e:47:84:6d:b9:70:c8:7f:28: 13:99:ac:d3:f4:24:64:77:ce:5d:4a:b1:11:be:fd: a3:39:ca:fc:84:b2:6c:a4:ae:a7:f7:53:72:84:47: b5:8c:ed:bd:42:9a:c6:aa:e3:61:6b:f2:92:fd:76: 79:de:ea:91:68:6e:a9:f1:ad:c1:d0:b7:31:c9:27: ec:6c:b4:cc:89:0f:e2:74:8b:69:4c:77:a5:8a:64: c8:fa:37:ce:01:59:02:ae:dc:64:71:28:ba:22:c4: 5e:00:fc:3b:30:bc:e0:5f:e8:62:f8:6c:2f:03:0f: a0:d4:81:3d:d3:26:4f:f0:34:b8:30:c3:b6:41:23: 41:6e:f4:f0:dc:ed:91:65:9d:d2:17:af:cc:50:fe: 49:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B0:4A:34:19:8C:70:C6:21:DD:B1:DF:00:BA:D9:55:E2:53:BF:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/295f163b-0c2e-3fef-aa0d-f2dc00248bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.171.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:4c:fc:c7:38:1e:d4:bb:46:86:85:8f:3b:d5:dc:46:bb:49: b4:2d:37:39:14:9d:59:2f:34:da:7e:05:76:40:2d:a0:22:57: e3:03:ff:9e:b3:5e:c8:b3:61:74:88:03:4f:ec:56:9a:34:41: 92:0a:29:39:d4:1a:50:b8:af:33:1b:06:63:f7:07:ef:a9:64: d2:c7:d1:d5:b9:95:65:61:5c:b0:34:e6:09:70:4c:78:7e:63: d0:a6:10:0f:0c:63:44:a8:f4:f7:76:43:8f:21:df:dd:17:4b: 6d:ad:3d:52:56:e5:f2:09:3d:67:fc:43:9b:f7:73:a0:d7:e6: 20:53:e3:86:0a:be:d6:66:94:6b:b0:bd:f0:5c:ba:6a:ec:be: 93:c4:0f:20:ea:e5:4a:be:38:de:78:88:bf:59:2b:61:e2:de: db:2e:05:41:24:16:0e:a4:aa:dd:b7:94:aa:fa:d7:51:7e:5f: 2e:c0:39:2a:0b:9e:3e:5c:cf:bc:1a:7f:6a:ef:de:ea:b2:5b: a9:0c:06:c2:8f:0f:11:3b:64:c6:23:20:3d:94:98:8b:c3:a7: 6f:b8:b0:5b:77:e8:c3:e3:99:52:a0:98:a3:79:15:28:61:aa: b2:95:4b:3a:97:e2:50:97:01:9d:f5:ca:8e:88:89:1a:c3:ee: c3:12:bc:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMjp+fHIAjAYCfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2RiZTI2NzYtMzUxNi00MDA0LTg2ZWEtNDlmYjI1ZDYyNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAdNmc+56XdyGMNg6sfdeqmpLsYdMYTxNf7/ pcCxrj+Pnt3mI0rlVsp8BUHEebHkJeQH6DuMXD4XG3GurrqmG/p2civ/VWoaKcT4 6TFbwZoxAZU3ZNSiPG3q0c4TGaTaZ2KEG1gcnWvS3ZBYXq1OR4RtuXDIfygTmazT 9CRkd85dSrERvv2jOcr8hLJspK6n91NyhEe1jO29QprGquNha/KS/XZ53uqRaG6p 8a3B0LcxySfsbLTMiQ/idItpTHelimTI+jfOAVkCrtxkcSi6IsReAPw7MLzgX+hi +GwvAw+g1IE90yZP8DS4MMO2QSNBbvTw3O2RZZ3SF6/MUP5J4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmwSjQZjHDGId2x3wC62VXiU783MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjk1ZjE2M2ItMGMyZS0z ZmVmLWFhMGQtZjJkYzAwMjQ4YmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhM/Mc4HtS7RoaFjzvV3Ea7SbQtNzkUnVkvNNp+BXZALaAiV+MD/56z XsizYXSIA0/sVpo0QZIKKTnUGlC4rzMbBmP3B++pZNLH0dW5lWVhXLA05glwTHh+ Y9CmEA8MY0So9Pd2Q48h390XS22tPVJW5fIJPWf8Q5v3c6DX5iBT44YKvtZmlGuw vfBcumrsvpPEDyDq5Uq+ON54iL9ZK2Hi3tsuBUEkFg6kqt23lKr611F+Xy7AOSoL nj5cz7waf2rv3uqyW6kMBsKPDxE7ZMYjID2UmIvDp2+4sFt36MPjmVKgmKN5FShh qrKVSzqX4lCXAZ31yo6IiRrD7sMSvHs= -----END CERTIFICATE-----Generated at Mon Jun 16 21:35:20 2025 by rpki-client