$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ddf8f89-f042-3192-9ce9-c7b462aa7e3e.roa File: 2ddf8f89-f042-3192-9ce9-c7b462aa7e3e.roa (raw, json) Hash identifier: lNsv4VT2u7AYlfLidiDuX8uf4RDuXFr103pxVxNmDhk= Subject key identifier: 42:6F:6A:75:8F:3B:AB:D5:1F:3D:25:77:3A:C5:1A:34:0B:55:C0:DC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431364C5C898ECC950A7640 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ddf8f89-f042-3192-9ce9-c7b462aa7e3e.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 71.236.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:36:4c:5c:89:8e:cc:95:0a:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=f2388b17-b99f-4d2c-8dde-ebb46127177f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4e:e8:02:77:b1:71:3d:5e:80:41:86:48:b1: d5:af:ec:9c:d3:19:65:5d:81:51:aa:08:03:29:79: 98:f5:2b:9f:cd:b9:9f:1c:71:0f:dd:d5:36:61:91: 52:6a:15:43:13:16:53:e6:f9:a3:f7:20:aa:00:0e: 68:4b:5e:4b:1e:53:ed:69:1b:d7:f4:a3:24:d2:3a: f7:d3:8c:59:1c:cb:0a:b1:2c:ef:5c:e2:a8:34:c4: b8:19:af:fd:99:fe:e3:ae:f7:2e:2b:f6:53:c5:48: 5a:58:be:c3:57:ee:f5:c1:8c:5b:b6:08:ac:27:7c: a0:09:4a:d0:45:f9:5e:33:63:f8:d6:11:bb:b1:76: 8f:88:80:a5:2f:8c:81:96:5a:f5:34:dd:97:90:95: a7:b2:57:8c:44:6b:0d:92:ae:47:54:8d:f8:85:f7: e6:8e:97:5e:11:d6:a0:61:cf:34:d3:be:5e:c7:03: 53:5f:62:72:1e:e5:b7:ce:91:d3:01:74:53:03:7c: 84:cf:32:68:30:48:56:d6:f2:ec:2b:66:09:0a:a3: 74:cb:59:0e:56:47:43:fb:b4:b4:0c:47:46:2c:d0: b5:aa:da:73:04:bd:12:de:ca:16:47:de:e5:f4:0b: 90:e5:20:d3:4a:4f:8d:f9:fc:ff:aa:9f:13:be:ea: fe:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6F:6A:75:8F:3B:AB:D5:1F:3D:25:77:3A:C5:1A:34:0B:55:C0:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ddf8f89-f042-3192-9ce9-c7b462aa7e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.236.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:0f:55:09:8c:ec:ad:31:22:bc:ff:22:81:00:0e:9f:45:99: ab:5d:cd:93:e1:bd:0f:44:76:dc:35:32:95:cc:58:29:9a:69: 1d:73:8b:e7:86:bd:0e:34:54:b2:ee:a8:84:79:c1:7b:82:28: 1a:24:b6:2c:50:72:dc:9a:a7:2f:f0:e4:0e:8f:0a:42:64:ea: c7:91:87:33:26:bb:70:01:06:29:ac:e5:78:e8:44:d9:f6:fb: 93:f8:8f:24:d7:72:07:83:c6:ff:d5:25:c5:ca:25:75:3e:3d: 7b:4c:d7:55:02:e8:a4:6b:b8:5e:69:a0:3b:c8:6a:ae:fe:df: d7:79:fe:29:92:f8:84:44:66:06:56:8a:f2:03:74:c9:fa:30: cd:f1:c7:10:ec:c1:d5:c2:75:10:73:c5:6c:55:a6:71:96:f5: bd:a9:45:a5:4f:81:17:2b:a7:3b:7e:70:c0:a3:07:d9:83:3b: e7:0f:28:6e:d6:68:74:0c:65:e6:7f:94:b9:ed:7f:50:95:30: d0:91:14:55:da:68:2f:f5:03:c2:fd:4b:02:dc:b9:0e:89:75: 88:77:29:bd:4f:17:83:61:f7:ed:08:a9:c9:05:9a:c3:6a:c4: 25:53:16:6e:d7:16:54:62:1f:ab:00:60:3f:5a:3b:9d:b8:97: 9e:c1:ab:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMTZMXImOzJUKdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjIzODhiMTctYjk5Zi00ZDJjLThkZGUtZWJiNDYxMjcxNzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU7oAnexcT1egEGGSLHVr+yc0xllXYFRqggD KXmY9SufzbmfHHEP3dU2YZFSahVDExZT5vmj9yCqAA5oS15LHlPtaRvX9KMk0jr3 04xZHMsKsSzvXOKoNMS4Ga/9mf7jrvcuK/ZTxUhaWL7DV+71wYxbtgisJ3ygCUrQ RfleM2P41hG7sXaPiIClL4yBllr1NN2XkJWnsleMRGsNkq5HVI34hffmjpdeEdag Yc80075exwNTX2JyHuW3zpHTAXRTA3yEzzJoMEhW1vLsK2YJCqN0y1kOVkdD+7S0 DEdGLNC1qtpzBL0S3soWR97l9AuQ5SDTSk+N+fz/qp8Tvur+QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJvanWPO6vVHz0ldzrFGjQLVcDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmRkZjhmODktZjA0Mi0z MTkyLTljZTktYzdiNDYyYWE3ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+zIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkPVQmM7K0xIrz/IoEADp9FmatdzZPhvQ9Edtw1MpXMWCmaaR1zi+eG vQ40VLLuqIR5wXuCKBoktixQctyapy/w5A6PCkJk6seRhzMmu3ABBims5XjoRNn2 +5P4jyTXcgeDxv/VJcXKJXU+PXtM11UC6KRruF5poDvIaq7+39d5/imS+IREZgZW ivIDdMn6MM3xxxDswdXCdRBzxWxVpnGW9b2pRaVPgRcrpzt+cMCjB9mDO+cPKG7W aHQMZeZ/lLntf1CVMNCRFFXaaC/1A8L9SwLcuQ6JdYh3Kb1PF4Nh9+0IqckFmsNq xCVTFm7XFlRiH6sAYD9aO524l57Bq/g= -----END CERTIFICATE-----Generated at Mon Jun 16 04:02:59 2025 by rpki-client