$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cf68f20-1b50-385e-982e-750f487f4964.roa File: 8cf68f20-1b50-385e-982e-750f487f4964.roa (raw, json) Hash identifier: 0ineUlFJqbhLr7bTOrEQ0poYte4duBrrJI/Asoncge4= Subject key identifier: D8:7C:70:43:D6:6C:6A:4F:68:65:A0:F3:B1:D6:78:72:FB:DE:81:56 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06CC23FB8354A6657ABC60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cf68f20-1b50-385e-982e-750f487f4964.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 24.4.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:cc:23:fb:83:54:a6:65:7a:bc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=170bea8a-6692-479a-9197-214c28ab7fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f4:45:c0:28:71:c2:d1:a9:df:7e:74:13:8c: 53:16:aa:23:9e:11:3b:52:11:55:27:60:d8:3c:f0: 88:18:1f:59:61:a9:65:cf:2a:b5:94:9f:15:ff:70: 0a:31:b1:40:48:ec:ba:3e:1e:dd:4e:50:71:cc:e8: 4a:6e:b5:50:a2:b2:2c:0a:25:ef:48:5a:a1:59:88: 52:7a:61:43:e5:f5:2b:fd:2a:cd:2a:04:75:3b:e4: 22:e4:33:40:62:56:58:d0:d8:91:20:a3:67:31:1a: ae:86:6b:77:3b:da:9a:26:56:c5:c4:3d:4f:82:37: eb:61:57:47:5e:73:bd:0b:5d:f9:81:67:15:d5:1c: 63:97:1c:37:fc:df:e0:7c:58:93:89:4c:36:af:6a: f4:78:d9:68:1d:2a:e7:db:9a:cc:cd:54:41:a5:91: 68:ff:1a:71:02:f7:02:20:ee:8d:98:9c:8f:fd:24: fa:27:be:6f:ce:c5:c1:47:c8:8e:09:e7:fd:d4:7b: 54:1a:2e:b7:8e:aa:41:33:0c:4b:82:95:fa:74:32: aa:3d:5e:af:b6:37:7b:80:c5:ef:90:d5:19:74:ba: 4f:f2:31:00:02:12:bf:97:c0:a5:5a:16:47:dc:1e: 06:9a:88:08:fc:a3:01:f1:63:cc:74:ed:e5:61:a9: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7C:70:43:D6:6C:6A:4F:68:65:A0:F3:B1:D6:78:72:FB:DE:81:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cf68f20-1b50-385e-982e-750f487f4964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.4.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:b3:fd:84:74:88:54:39:be:37:e6:e2:7b:97:5a:a0:8d:bd: 80:ec:a8:44:ec:12:9c:fe:a1:79:99:d6:06:d5:12:72:9a:1d: 92:90:60:94:51:44:97:34:9d:16:9c:2d:72:cc:71:27:9c:1d: b0:dc:97:4c:14:23:40:3b:61:bb:cf:0f:c7:00:87:a7:ce:30: f3:c5:0b:f9:58:4e:d5:5d:48:f9:09:77:13:57:c7:43:7c:b8: ac:0c:72:54:bc:9a:62:ef:0d:1f:e6:73:4e:bf:1e:0e:61:85: e9:be:1d:d9:d5:30:a5:0d:5a:7c:2b:65:49:24:9f:c9:65:d3: 6b:9e:22:40:c3:23:5b:6d:1d:93:e1:3b:2f:c9:b3:cf:73:a8: a7:44:19:2e:79:21:cd:94:21:2f:cb:32:a1:98:4b:e2:a0:dc: 77:bc:54:b1:bc:93:b7:1f:ec:e5:68:cc:77:9b:6c:0d:60:9e: ca:bf:0a:5d:4c:ab:39:92:29:41:bb:cd:03:52:70:4f:57:24: ca:32:7e:61:45:fc:f1:80:db:1f:f0:00:a0:a6:29:1f:4f:21: 39:03:63:ff:a2:64:8c:de:ef:94:18:61:79:8d:58:ee:97:9c: 3e:76:1f:b1:6e:70:99:0b:be:44:10:a1:c5:7c:45:0f:e2:5c: ee:3c:6c:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBswj+4NUpmV6vGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MTcwYmVhOGEtNjY5Mi00NzlhLTkxOTctMjE0YzI4YWI3ZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvRFwChxwtGp3350E4xTFqojnhE7UhFVJ2DY PPCIGB9ZYallzyq1lJ8V/3AKMbFASOy6Ph7dTlBxzOhKbrVQorIsCiXvSFqhWYhS emFD5fUr/SrNKgR1O+Qi5DNAYlZY0NiRIKNnMRquhmt3O9qaJlbFxD1PgjfrYVdH XnO9C135gWcV1Rxjlxw3/N/gfFiTiUw2r2r0eNloHSrn25rMzVRBpZFo/xpxAvcC IO6NmJyP/ST6J75vzsXBR8iOCef91HtUGi63jqpBMwxLgpX6dDKqPV6vtjd7gMXv kNUZdLpP8jEAAhK/l8ClWhZH3B4GmogI/KMB8WPMdO3lYambCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNh8cEPWbGpPaGWg87HWeHL73oFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGNmNjhmMjAtMWI1MC0z ODVlLTk4MmUtNzUwZjQ4N2Y0OTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGARMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6z/YR0iFQ5vjfm4nuXWqCNvYDsqETsEpz+oXmZ1gbVEnKaHZKQYJRR RJc0nRacLXLMcSecHbDcl0wUI0A7YbvPD8cAh6fOMPPFC/lYTtVdSPkJdxNXx0N8 uKwMclS8mmLvDR/mc06/Hg5hhem+HdnVMKUNWnwrZUkkn8ll02ueIkDDI1ttHZPh Oy/Js89zqKdEGS55Ic2UIS/LMqGYS+Kg3He8VLG8k7cf7OVozHebbA1gnsq/Cl1M qzmSKUG7zQNScE9XJMoyfmFF/PGA2x/wAKCmKR9PITkDY/+iZIze75QYYXmNWO6X nD52H7FucJkLvkQQocV8RQ/iXO48bPk= -----END CERTIFICATE-----Generated at Mon Jun 16 23:04:24 2025 by rpki-client