$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c269287c-772e-3218-a446-f8ba1fcc2589.roa File: c269287c-772e-3218-a446-f8ba1fcc2589.roa (raw, json) Hash identifier: XuNS7x/6bYTdv6blCQZ9Lf2fDzbSmxyjFLUyWiU2noM= Subject key identifier: 6D:F5:FE:6E:E0:22:62:1D:9A:E5:79:9C:60:41:F2:CA:9C:9F:BF:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0598FA0E3CB776EA06EC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c269287c-772e-3218-a446-f8ba1fcc2589.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33660 IP address blocks: 174.52.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:98:fa:0e:3c:b7:76:ea:06:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=d90537a8-d619-435e-a2cb-f70ecab22cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:05:f9:06:af:cf:8e:b1:0c:97:5a:31:6e: 4b:98:80:4b:2f:d1:ec:54:7e:4d:70:8d:49:c3:d3: df:af:04:c7:d7:08:85:39:34:d8:65:7c:25:77:a6: 68:d5:e7:6f:1f:04:45:4e:30:9e:61:ff:40:9e:9a: 6b:49:3c:72:b9:d2:2a:0d:43:7d:6b:fe:0b:86:8b: ed:70:4f:a6:fe:f7:15:1d:13:ec:a3:1c:e3:32:1f: d2:18:b4:45:d2:46:28:74:58:91:c7:94:ba:f2:f5: 2b:a3:29:56:71:9c:18:5b:c4:91:62:3e:fd:a5:a1: cd:b1:90:75:7c:50:c0:74:7b:3b:9a:65:30:3d:b4: 50:28:da:5f:68:36:1b:d1:53:3a:17:ea:3f:04:5d: b0:e5:59:d5:f0:3d:18:84:57:2e:b1:50:40:96:21: aa:8e:20:70:e8:1e:3b:9e:d0:25:9c:b8:d4:b2:26: 32:3b:f1:97:1c:9c:8d:24:9f:2c:b3:df:8b:b0:e7: 8a:6a:59:fd:c7:03:61:4a:31:04:d3:36:54:67:b6: bd:13:9e:1a:68:8a:ce:40:b4:34:b6:df:ce:93:f9: 91:cb:af:63:b0:6e:69:1e:a3:31:ec:4c:b8:b9:00: 81:cd:4b:76:8b:3f:0d:42:b0:d6:50:9d:1f:f4:49: 4b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F5:FE:6E:E0:22:62:1D:9A:E5:79:9C:60:41:F2:CA:9C:9F:BF:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c269287c-772e-3218-a446-f8ba1fcc2589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.52.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:aa:1e:e2:72:d4:33:9e:91:87:ec:d9:85:ec:04:08:a5:fb: 09:b0:74:6d:e1:f3:f7:5c:f4:33:2c:ed:f3:26:39:03:d3:80: 4d:48:fb:99:12:ea:14:71:5a:19:28:9d:34:43:70:0b:76:f7: 94:13:c9:37:9a:92:84:ce:e4:45:2d:37:bf:82:20:be:28:eb: a3:78:78:79:00:9d:e0:17:27:7f:92:70:52:fc:53:f3:a3:bd: a0:51:c8:b5:c5:c0:b3:60:c6:6d:f2:47:50:bc:b6:be:46:0e: 9e:f0:9f:55:cf:ce:31:6d:86:d1:d8:f1:fb:59:07:95:ed:bf: 4c:c9:7b:9b:f0:2b:a2:d4:ac:9e:1c:22:cc:05:94:81:ea:ea: 4d:e5:7a:ff:96:8c:bc:51:d9:94:f6:29:87:02:76:03:07:49: 4c:67:67:26:0f:e4:35:d1:fd:af:9a:c7:8b:da:43:06:60:6f: a2:d7:84:0f:00:80:fc:5a:03:6b:dc:93:2b:40:9c:3d:d1:d5: f7:e5:9e:88:b4:fe:8f:68:4a:ca:36:88:7c:d6:ea:7e:07:dd: b4:29:71:18:95:26:ed:32:2c:f5:58:92:12:fe:f7:e8:ba:c2: 78:fa:04:1e:32:6a:da:91:b0:0d:b5:23:18:28:64:9f:ef:03: cf:8c:1f:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBZj6Djy3duoG7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZDkwNTM3YTgtZDYxOS00MzVlLWEyY2ItZjcwZWNhYjIyY2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L4F+Qavz46xDJdaMW5LmIBLL9HsVH5NcI1J w9PfrwTH1wiFOTTYZXwld6Zo1edvHwRFTjCeYf9AnpprSTxyudIqDUN9a/4Lhovt cE+m/vcVHRPsoxzjMh/SGLRF0kYodFiRx5S68vUroylWcZwYW8SRYj79paHNsZB1 fFDAdHs7mmUwPbRQKNpfaDYb0VM6F+o/BF2w5VnV8D0YhFcusVBAliGqjiBw6B47 ntAlnLjUsiYyO/GXHJyNJJ8ss9+LsOeKaln9xwNhSjEE0zZUZ7a9E54aaIrOQLQ0 tt/Ok/mRy69jsG5pHqMx7Ey4uQCBzUt2iz8NQrDWUJ0f9ElL0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG31/m7gImIdmuV5nGBB8sqcn79aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzI2OTI4N2MtNzcyZS0z MjE4LWE0NDYtZjhiYTFmY2MyNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrjT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANOqHuJy1DOekYfs2YXsBAil+wmwdG3h8/dc9DMs7fMmOQPTgE1I+5kS 6hRxWhkonTRDcAt295QTyTeakoTO5EUtN7+CIL4o66N4eHkAneAXJ3+ScFL8U/Oj vaBRyLXFwLNgxm3yR1C8tr5GDp7wn1XPzjFthtHY8ftZB5Xtv0zJe5vwK6LUrJ4c IswFlIHq6k3lev+WjLxR2ZT2KYcCdgMHSUxnZyYP5DXR/a+ax4vaQwZgb6LXhA8A gPxaA2vckytAnD3R1fflnoi0/o9oSso2iHzW6n4H3bQpcRiVJu0yLPVYkhL+9+i6 wnj6BB4yatqRsA21IxgoZJ/vA8+MHzQ= -----END CERTIFICATE-----Generated at Sun Jun 22 21:33:01 2025 by rpki-client