$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c039b0a-d539-3980-b111-7f48e21e1f7f.roa File: 3c039b0a-d539-3980-b111-7f48e21e1f7f.roa (raw, json) Hash identifier: 3jTlrI0oIkxbE94bmU4drSUlr1xxAmGPXEjkpxuIw5I= Subject key identifier: 91:2D:13:17:C4:FA:96:37:C5:1E:06:3E:8A:9F:5F:77:89:20:0C:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5EEC8B445D3615778A820 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c039b0a-d539-3980-b111-7f48e21e1f7f.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 174.161.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:ee:c8:b4:45:d3:61:57:78:a8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=bb41f5a0-5439-4376-8774-dec744c1bd06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:bd:2a:7c:25:a6:a9:32:37:45:e3:ac:11: 7a:27:69:89:8d:78:47:a6:47:58:2b:f3:8c:ff:1d: 52:c0:92:38:b4:4c:02:cf:ee:b3:6a:e2:ea:25:cb: af:06:8e:83:cd:ba:d6:39:68:17:3e:2d:29:f5:dc: 40:69:12:ed:90:7d:ba:11:64:02:66:f0:93:66:b7: 0b:b9:8e:07:7d:38:3a:54:5f:76:9e:54:cc:c6:41: ae:7c:0d:63:df:d2:a2:15:13:ef:b7:48:85:97:75: 0d:64:91:1e:04:d7:64:d3:ce:d2:f2:21:b7:de:75: 59:be:6a:2c:48:d3:13:eb:f8:96:4e:fd:52:e1:0c: 63:97:eb:eb:be:e7:12:6f:f7:31:9d:b6:1a:c8:c7: 14:cc:ab:96:f7:04:37:6c:53:19:77:70:a7:11:c1: b2:6c:a8:70:a7:45:52:00:74:ed:5c:0a:b8:6a:de: 17:80:85:2d:e6:22:af:80:f2:e9:3e:c6:59:04:53: 57:49:4a:cf:c9:22:22:9d:8f:9a:79:fd:bf:7f:60: 5a:25:6d:80:11:f1:a8:ff:ef:25:31:39:8f:b2:ce: c9:fb:23:a3:bb:d2:be:f1:70:ba:65:85:7f:e3:b8: 89:7f:70:85:15:64:08:06:ce:9e:21:ba:ea:c2:45: 54:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2D:13:17:C4:FA:96:37:C5:1E:06:3E:8A:9F:5F:77:89:20:0C:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c039b0a-d539-3980-b111-7f48e21e1f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:cf:ea:97:0c:b5:c0:c8:34:fe:0b:2a:fb:d2:7d:39:ed:84: bd:19:ad:a7:13:0e:ff:96:4b:f3:41:a9:cf:31:24:e1:9a:be: fa:67:14:d0:90:70:e4:d6:d0:3b:56:40:c2:cf:a3:7d:65:71: 4e:c0:dc:d5:a2:27:61:b3:f9:94:f6:e9:72:f9:25:f3:1b:f2: 71:de:d0:e4:8f:97:1f:8d:19:b1:f7:5b:bd:b4:b4:78:64:33: de:80:c2:65:8a:38:bf:d8:90:cc:e6:10:e8:0a:05:ff:5a:ec: 08:47:d9:3e:9f:85:2f:d1:18:f7:e2:9c:46:69:cc:34:f9:05: 92:81:ac:3d:ce:8d:96:31:9b:d6:09:90:b2:8c:e2:42:e2:a0: e6:24:cf:44:c2:0c:76:fd:81:fd:75:a8:8e:98:fb:98:d2:d6: cb:a7:47:41:21:c3:b3:43:36:93:dc:c1:2f:fc:19:43:e0:c0: e6:f3:d6:77:56:1f:c6:fa:63:2e:36:d9:61:dc:65:01:c1:ef: ba:49:ad:cb:4d:88:45:31:7c:86:c4:f6:a8:f2:18:0f:8b:b1: d8:2a:79:a9:c5:e2:a3:4f:1a:5e:d8:85:fb:06:b6:f9:e2:5b: ea:99:de:d5:22:fd:b1:4a:b6:7c:81:79:f7:2a:02:c8:f0:a6: ff:60:e3:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pe7ItEXTYVd4qCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YmI0MWY1YTAtNTQzOS00Mzc2LTg3NzQtZGVjNzQ0YzFiZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0q9KnwlpqkyN0XjrBF6J2mJjXhHpkdYK/OM /x1SwJI4tEwCz+6zauLqJcuvBo6DzbrWOWgXPi0p9dxAaRLtkH26EWQCZvCTZrcL uY4HfTg6VF92nlTMxkGufA1j39KiFRPvt0iFl3UNZJEeBNdk087S8iG33nVZvmos SNMT6/iWTv1S4Qxjl+vrvucSb/cxnbYayMcUzKuW9wQ3bFMZd3CnEcGybKhwp0VS AHTtXAq4at4XgIUt5iKvgPLpPsZZBFNXSUrPySIinY+aef2/f2BaJW2AEfGo/+8l MTmPss7J+yOju9K+8XC6ZYV/47iJf3CFFWQIBs6eIbrqwkVUUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEtExfE+pY3xR4GPoqfX3eJIAy/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2MwMzliMGEtZDUzOS0z OTgwLWIxMTEtN2Y0OGUyMWUxZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrqEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM/P6pcMtcDINP4LKvvSfTnthL0ZracTDv+WS/NBqc8xJOGavvpnFNCQ cOTW0DtWQMLPo31lcU7A3NWiJ2Gz+ZT26XL5JfMb8nHe0OSPlx+NGbH3W720tHhk M96AwmWKOL/YkMzmEOgKBf9a7AhH2T6fhS/RGPfinEZpzDT5BZKBrD3OjZYxm9YJ kLKM4kLioOYkz0TCDHb9gf11qI6Y+5jS1sunR0Ehw7NDNpPcwS/8GUPgwObz1ndW H8b6Yy422WHcZQHB77pJrctNiEUxfIbE9qjyGA+LsdgqeanF4qNPGl7YhfsGtvni W+qZ3tUi/bFKtnyBefcqAsjwpv9g4yw= -----END CERTIFICATE-----Generated at Sun Apr 27 16:53:49 2025 by rpki-client