$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3fe13b7-55b9-3926-9b20-1dc2aab1e5de.roa File: d3fe13b7-55b9-3926-9b20-1dc2aab1e5de.roa (raw, json) Hash identifier: dH0MEZK4FyFLBAXUc25lNGHm4xoNxpeFSTq5RozwDu8= Subject key identifier: 95:4D:A1:C4:BD:E4:3D:F2:49:20:49:A5:1B:AA:B9:F6:22:B7:B4:A0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4317A558D34EEB62A942500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3fe13b7-55b9-3926-9b20-1dc2aab1e5de.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 71.233.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:7a:55:8d:34:ee:b6:2a:94:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=7a6db54b-7858-4ef6-85f4-18d3cf3b8e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8c:cb:49:fe:85:0f:5f:dc:35:4b:cd:92:81: b3:82:7a:07:2c:fe:e4:07:16:e3:91:19:e1:cb:da: ff:01:a8:34:5c:b3:8d:1c:09:ad:e3:fc:e6:84:16: 5c:43:09:c5:4c:95:e3:96:36:f9:4c:76:e4:c3:9a: 55:01:aa:8b:a1:19:0a:49:ad:13:99:05:82:79:a7: 01:4f:e1:33:4b:8f:a8:32:1b:c6:0b:03:13:ac:ee: af:4a:f6:8b:50:bd:0d:70:06:b5:b3:c0:47:e4:4a: 24:fb:f7:6c:ad:07:31:46:4c:ac:63:77:a7:50:2c: 11:85:05:e4:ab:ba:ad:e1:9f:29:bd:f0:e8:5c:cd: f1:7d:5e:1e:1f:7c:6c:56:03:d5:86:28:ac:2d:51: 45:28:4d:f7:00:b7:2b:07:d2:f2:cc:13:a7:f6:42: 29:7b:c4:be:94:3f:51:bb:a7:fa:61:f7:8e:0d:49: f2:b5:ae:66:9e:50:2f:fc:ed:68:6c:d3:5c:3d:c6: 40:c3:14:31:30:00:0a:92:b5:30:07:a5:64:a7:3e: fb:b5:2c:32:e4:99:e1:67:4a:bc:ec:46:c8:ed:ae: b5:c5:85:d9:20:13:c7:b3:c8:2e:e5:5e:f3:1f:51: 76:bb:a0:21:63:02:dc:a1:f1:d6:f2:24:3c:62:c4: b3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4D:A1:C4:BD:E4:3D:F2:49:20:49:A5:1B:AA:B9:F6:22:B7:B4:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3fe13b7-55b9-3926-9b20-1dc2aab1e5de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.233.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:40:06:bd:6b:fa:9e:a3:c8:48:d3:43:61:77:d1:93:dc:cc: 58:12:98:a9:bc:0f:48:2f:fb:eb:d6:3e:ff:d1:04:c0:03:ac: 59:13:a8:16:0e:d0:d6:cf:7d:ff:0a:80:83:4c:3f:a9:c2:19: d0:bd:79:d4:ba:9a:26:6c:61:d0:ee:db:5a:ca:f1:31:f7:a1: 9d:07:9d:cf:86:f8:7f:91:ba:09:a5:9b:c3:9c:ed:ce:a4:44: 0a:7a:e5:04:5c:c9:eb:2d:f4:6a:2e:38:48:73:88:10:b1:71: b0:56:ad:42:fe:25:59:63:c0:7b:20:ab:34:02:fc:88:31:e9: 07:72:38:77:e5:bf:17:e6:b5:43:7a:61:a3:15:ef:bc:b6:82: 75:06:60:c5:61:08:6c:88:c0:a5:b3:54:1b:ae:60:cf:5c:31: 8f:4b:aa:48:a2:36:72:87:57:ab:99:b5:50:89:44:35:83:01: 2b:b4:3d:c5:cd:d6:85:f6:78:6d:cd:a2:e6:b1:33:b9:06:9f: a7:e6:02:08:1e:ef:f7:5f:ed:80:68:d3:d0:2a:46:9d:45:2e: c3:e3:9a:99:66:f7:f2:2a:60:a1:29:3d:24:f8:2b:c7:1d:ae: 73:b2:48:bc:e7:b4:dc:ff:a8:3f:c6:9a:90:c3:80:04:04:67: ee:7b:88:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMXpVjTTutiqUJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk N2E2ZGI1NGItNzg1OC00ZWY2LTg1ZjQtMThkM2NmM2I4ZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsozLSf6FD1/cNUvNkoGzgnoHLP7kBxbjkRnh y9r/Aag0XLONHAmt4/zmhBZcQwnFTJXjljb5THbkw5pVAaqLoRkKSa0TmQWCeacB T+EzS4+oMhvGCwMTrO6vSvaLUL0NcAa1s8BH5Eok+/dsrQcxRkysY3enUCwRhQXk q7qt4Z8pvfDoXM3xfV4eH3xsVgPVhiisLVFFKE33ALcrB9LyzBOn9kIpe8S+lD9R u6f6YfeODUnyta5mnlAv/O1obNNcPcZAwxQxMAAKkrUwB6Vkpz77tSwy5JnhZ0q8 7EbI7a61xYXZIBPHs8gu5V7zH1F2u6AhYwLcofHW8iQ8YsSzUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVNocS95D3ySSBJpRuqufYit7SgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNmZTEzYjctNTViOS0z OTI2LTliMjAtMWRjMmFhYjFlNWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDR+nQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdABr1r+p6jyEjTQ2F30ZPczFgSmKm8D0gv++vWPv/RBMADrFkTqBYO 0NbPff8KgINMP6nCGdC9edS6miZsYdDu21rK8TH3oZ0Hnc+G+H+Rugmlm8Oc7c6k RAp65QRcyest9GouOEhziBCxcbBWrUL+JVljwHsgqzQC/Igx6QdyOHflvxfmtUN6 YaMV77y2gnUGYMVhCGyIwKWzVBuuYM9cMY9LqkiiNnKHV6uZtVCJRDWDASu0PcXN 1oX2eG3NouaxM7kGn6fmAgge7/df7YBo09AqRp1FLsPjmplm9/IqYKEpPST4K8cd rnOySLzntNz/qD/GmpDDgAQEZ+57iKo= -----END CERTIFICATE-----Generated at Mon Jun 16 04:05:35 2025 by rpki-client