$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d35b81e3-4fd2-3450-b391-a4e53ef86368.roa File: d35b81e3-4fd2-3450-b391-a4e53ef86368.roa (raw, json) Hash identifier: ylbGJcaVIEeQGjbi05QXsVUECaQDYxN5wum80eFKotg= Subject key identifier: D8:E5:B9:46:46:8F:11:CC:69:C4:03:F7:6D:FA:89:46:03:27:DA:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0605E85010E98582E97500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d35b81e3-4fd2-3450-b391-a4e53ef86368.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33287 IP address blocks: 174.173.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:05:e8:50:10:e9:85:82:e9:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=865beffa-5e50-431a-b683-e9904444fa42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d9:10:de:c9:c8:13:c1:04:04:3d:cf:bb:d2: af:29:f8:87:5c:2d:f3:fd:36:11:e3:3d:d6:d9:e9: 6f:35:71:f1:27:8c:86:2c:e9:80:ba:d6:50:5d:5c: 14:1f:af:63:39:20:ea:7b:a4:77:d3:fd:0d:18:ab: 75:4c:6a:3b:0f:cc:0f:15:59:c6:7e:31:2a:be:a5: cb:29:05:26:4e:36:aa:b1:64:4e:fc:34:27:70:7a: b0:67:4c:4d:1a:17:37:ce:c0:6c:19:43:3e:a3:8e: c1:6a:69:1d:7b:38:b1:ac:f2:a2:21:41:38:15:8f: 5f:99:bd:7b:92:da:4a:ab:5e:c4:67:b9:70:c7:ed: 63:81:03:98:92:54:ec:bf:9c:55:19:05:a6:c1:43: 4b:09:0b:35:77:64:87:90:5d:9c:89:86:c3:dc:79: 56:c9:b2:ac:3a:a0:c5:11:42:6b:2c:d4:5c:36:dd: 25:79:c5:19:a0:5e:8e:c3:ad:cd:cf:3f:f8:81:2f: 2e:e1:7e:8d:d8:d4:e5:38:f6:07:b6:32:05:ff:9b: 89:c6:87:8f:56:e9:86:0c:2a:40:d3:78:66:8d:fb: 65:9a:94:1b:b0:fd:c9:5c:b5:1b:1d:6a:26:bc:8a: 13:21:cd:25:6d:92:5d:90:b3:dc:50:0c:63:c8:4f: ed:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E5:B9:46:46:8F:11:CC:69:C4:03:F7:6D:FA:89:46:03:27:DA:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d35b81e3-4fd2-3450-b391-a4e53ef86368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.173.62.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a5:2e:44:85:06:b7:30:db:e2:64:b7:89:50:cf:0a:28:d8: ff:ba:22:f9:74:6d:33:9b:cc:85:f4:b6:59:6d:f0:9a:34:be: de:d4:74:2c:89:ac:38:5c:6c:96:10:8d:12:0c:6c:de:1b:35: f6:08:75:09:47:13:9f:4b:d7:21:dd:33:05:d3:ba:71:f9:ed: e9:c1:bf:59:f2:00:4e:64:07:46:89:9b:80:d0:f8:e0:0d:7f: b9:77:e4:d8:12:e7:a8:f5:5e:bb:b4:fa:a6:e2:91:98:70:20: 46:d8:1a:98:ce:05:30:64:8f:47:90:8b:06:45:39:ab:23:cc: e6:bb:a8:ae:77:ab:a0:19:b4:f2:53:43:b1:5b:98:a6:ed:85: 5e:c3:f8:41:a5:d5:46:5a:81:6f:58:94:a7:c8:38:a8:ec:f1: 13:f4:2d:b0:68:d7:74:7c:9a:f2:61:f7:c6:92:e6:20:36:6a: 5a:e6:33:1c:f5:79:83:2f:39:23:a2:15:3e:38:a9:93:95:b0: 0d:41:37:8a:bd:13:32:c7:92:fa:bc:32:28:aa:dd:59:7b:d0: d3:9d:78:e5:e6:ef:df:10:0c:61:31:fb:13:58:14:ea:7f:2d: 6b:0f:42:f2:fb:b5:95:09:9a:0e:70:f8:34:33:9a:ef:ca:3a: f9:f9:40:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBgXoUBDphYLpdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ODY1YmVmZmEtNWU1MC00MzFhLWI2ODMtZTk5MDQ0NDRmYTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9kQ3snIE8EEBD3Pu9KvKfiHXC3z/TYR4z3W 2elvNXHxJ4yGLOmAutZQXVwUH69jOSDqe6R30/0NGKt1TGo7D8wPFVnGfjEqvqXL KQUmTjaqsWRO/DQncHqwZ0xNGhc3zsBsGUM+o47BamkdezixrPKiIUE4FY9fmb17 ktpKq17EZ7lwx+1jgQOYklTsv5xVGQWmwUNLCQs1d2SHkF2ciYbD3HlWybKsOqDF EUJrLNRcNt0lecUZoF6Ow63Nzz/4gS8u4X6N2NTlOPYHtjIF/5uJxoePVumGDCpA 03hmjftlmpQbsP3JXLUbHWomvIoTIc0lbZJdkLPcUAxjyE/tCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjluUZGjxHMacQD9236iUYDJ9o4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDM1YjgxZTMtNGZkMi0z NDUwLWIzOTEtYTRlNTNlZjg2MzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrq0+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADelLkSFBrcw2+Jkt4lQzwoo2P+6Ivl0bTObzIX0tllt8Jo0vt7UdCyJ rDhcbJYQjRIMbN4bNfYIdQlHE59L1yHdMwXTunH57enBv1nyAE5kB0aJm4DQ+OAN f7l35NgS56j1Xru0+qbikZhwIEbYGpjOBTBkj0eQiwZFOasjzOa7qK53q6AZtPJT Q7FbmKbthV7D+EGl1UZagW9YlKfIOKjs8RP0LbBo13R8mvJh98aS5iA2alrmMxz1 eYMvOSOiFT44qZOVsA1BN4q9EzLHkvq8Miiq3Vl70NOdeOXm798QDGEx+xNYFOp/ LWsPQvL7tZUJmg5w+DQzmu/KOvn5QKo= -----END CERTIFICATE-----Generated at Thu Jun 19 09:09:19 2025 by rpki-client