$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88094d3e-9f23-37c6-861e-cdf48089bce3.roa File: 88094d3e-9f23-37c6-861e-cdf48089bce3.roa (raw, json) Hash identifier: zD1hnN5PFQCNuR/qFWhCVpw8WwWMhCB+771o8ljGNTg= Subject key identifier: 48:E4:1D:76:3D:25:F1:68:B2:BF:77:2D:A3:A5:D7:09:51:5D:00:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06D7B00DC955976A4B6E60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88094d3e-9f23-37c6-861e-cdf48089bce3.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 67.170.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:d7:b0:0d:c9:55:97:6a:4b:6e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=ad462121-f8ff-4371-84e5-6092322474a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:ec:8b:06:a7:87:fd:a0:31:4d:1c:db:73: e5:81:1d:fe:c3:1a:91:05:8f:df:95:49:0d:94:5c: e1:95:72:5e:75:c9:0a:5f:ad:0d:eb:15:6c:24:3d: ab:7d:59:d2:13:17:be:19:5e:37:41:5e:ce:1b:55: b8:37:14:84:32:8e:35:4e:14:49:f7:8c:4a:95:e9: 10:09:04:f3:84:ee:10:59:7e:83:a7:37:f6:1f:f6: 50:40:93:67:da:3f:3e:5c:5a:b0:7e:11:d0:f7:8a: e1:fa:ca:b8:f8:2e:12:7f:0b:3d:26:2d:4a:de:70: 0a:ad:63:d5:ec:d8:e1:ee:70:cf:6a:b7:cc:83:0a: 04:59:ca:97:43:64:3b:9c:c7:55:eb:e6:97:a3:41: 97:3c:b8:25:bf:f5:b7:ce:f7:da:12:93:17:30:02: 9d:1f:00:ab:b3:b6:c6:91:36:13:8e:e7:f3:84:64: aa:bf:0f:14:0a:bf:b8:e5:da:a0:6e:28:be:4f:a6: 93:f2:96:0e:ed:e7:ef:b2:77:7c:30:e9:e4:52:e2: 01:a2:ef:4e:4c:9a:25:aa:88:50:ad:8e:25:ba:bd: 3c:36:07:9a:03:58:6e:15:81:e5:c2:34:3d:a4:da: 90:79:59:f6:4b:79:22:71:76:3c:ca:d3:db:09:e9: 0b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E4:1D:76:3D:25:F1:68:B2:BF:77:2D:A3:A5:D7:09:51:5D:00:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88094d3e-9f23-37c6-861e-cdf48089bce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c6:1a:42:cc:92:15:a2:b1:7c:27:b5:1d:79:2f:37:cb:5f: 10:cd:0d:d3:31:38:0c:aa:99:ba:f1:29:6c:ee:de:0b:db:b3: 99:1e:bf:24:9e:29:c0:ce:98:23:04:03:e4:be:c9:e8:0e:b1: 69:9b:92:80:2d:bf:0c:7c:2b:78:04:69:c8:05:53:08:6e:e6: 55:fa:6f:a3:ce:fd:c1:b7:7d:4f:79:9c:9c:19:3a:10:07:da: 82:9c:d9:61:9f:aa:74:55:7c:43:be:07:d4:34:47:1e:b4:98: 4c:76:14:c3:be:16:10:4e:81:06:20:ef:fb:2b:b6:5d:68:75: c0:01:97:9f:88:fc:36:ea:30:83:29:29:54:5b:4e:bb:49:73: 4a:dd:5e:5b:ae:86:7f:94:b6:bb:3f:77:b3:84:9a:1c:fe:2b: bb:19:32:62:1b:d6:4b:aa:37:01:d0:a7:41:1d:de:71:1c:5c: 97:25:a0:3c:d0:41:93:eb:bd:d0:8b:68:54:7c:b1:b4:d6:83: 42:99:a2:e0:f2:70:98:17:bb:c0:7a:f1:e2:97:f6:50:db:ce: 99:71:ad:aa:43:27:68:57:aa:75:e1:05:b1:a2:d9:1f:2d:e1: 7f:2c:ee:69:32:69:20:84:9c:00:af:b2:b3:15:ad:ca:0e:95: f0:5d:f5:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBtewDclVl2pLbmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YWQ0NjIxMjEtZjhmZi00MzcxLTg0ZTUtNjA5MjMyMjQ3NGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo03siwanh/2gMU0c23PlgR3+wxqRBY/flUkN lFzhlXJedckKX60N6xVsJD2rfVnSExe+GV43QV7OG1W4NxSEMo41ThRJ94xKlekQ CQTzhO4QWX6Dpzf2H/ZQQJNn2j8+XFqwfhHQ94rh+sq4+C4Sfws9Ji1K3nAKrWPV 7Njh7nDParfMgwoEWcqXQ2Q7nMdV6+aXo0GXPLglv/W3zvfaEpMXMAKdHwCrs7bG kTYTjufzhGSqvw8UCr+45dqgbii+T6aT8pYO7efvsnd8MOnkUuIBou9OTJolqohQ rY4lur08NgeaA1huFYHlwjQ9pNqQeVn2S3kicXY8ytPbCekL6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjkHXY9JfFosr93LaOl1wlRXQAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODgwOTRkM2UtOWYyMy0z N2M2LTg2MWUtY2RmNDgwODliY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6reMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXGGkLMkhWisXwntR15LzfLXxDNDdMxOAyqmbrxKWzu3gvbs5kevySe KcDOmCMEA+S+yegOsWmbkoAtvwx8K3gEacgFUwhu5lX6b6PO/cG3fU95nJwZOhAH 2oKc2WGfqnRVfEO+B9Q0Rx60mEx2FMO+FhBOgQYg7/srtl1odcABl5+I/DbqMIMp KVRbTrtJc0rdXluuhn+Utrs/d7OEmhz+K7sZMmIb1kuqNwHQp0Ed3nEcXJcloDzQ QZPrvdCLaFR8sbTWg0KZouDycJgXu8B68eKX9lDbzplxrapDJ2hXqnXhBbGi2R8t 4X8s7mkyaSCEnACvsrMVrcoOlfBd9Zs= -----END CERTIFICATE-----Generated at Mon Jun 16 23:04:24 2025 by rpki-client