$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b995fae-deb4-3b6a-9ca8-675702df32b7.roa File: 6b995fae-deb4-3b6a-9ca8-675702df32b7.roa (raw, json) Hash identifier: zdgloMyeqfRCRq7a2UTZoc6uyNQkgJq0eUeFACwU1x4= Subject key identifier: 6F:98:41:AE:6D:CD:9E:21:A7:A9:92:06:A2:A0:5E:CC:85:70:72:27 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849FCAA7E411EA6490E19C51440 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b995fae-deb4-3b6a-9ca8-675702df32b7.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 20940 IP address blocks: 128.241.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7e:41:1e:a6:49:0e:19:c5:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=53345b98-b7db-495e-97b5-7caa9821aa7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7d:23:be:81:21:95:88:ba:ae:4b:f0:7b:22: 17:cb:30:50:5c:68:70:16:fa:93:1c:d6:68:02:67: 7f:a9:23:f1:c5:9f:9b:7a:97:0f:5f:e1:f5:20:a0: ea:fe:ed:ad:0f:d2:84:82:6f:3b:f0:92:e1:3d:e9: bb:d6:26:e5:6d:a3:96:27:55:19:28:e1:24:c8:94: cd:32:4d:ee:58:f5:9f:56:91:28:2e:da:89:fb:90: 19:46:2b:de:9e:11:20:b5:98:d7:29:8c:02:d6:f5: 77:14:7a:c6:a8:f1:4c:51:43:1e:67:1c:96:d5:21: c1:58:4b:cd:e4:66:62:bf:c5:e7:7d:8a:f0:cb:1b: 2e:98:b0:af:7c:d1:75:de:36:12:70:03:61:9b:15: e4:07:1e:04:8d:30:86:7f:3d:f2:dc:74:5c:23:40: b4:54:d5:13:81:fc:07:bf:32:ec:d2:a3:37:b2:f3: 3d:95:6f:b5:38:01:1b:c0:03:6e:af:40:a3:1e:16: c4:d3:0d:ea:f2:4b:f9:40:b7:c9:47:c6:6b:53:cf: a8:75:62:87:36:99:04:18:50:d8:75:e0:73:f9:19: c5:f5:8b:64:0e:f3:31:e4:8c:b8:de:51:4f:28:f7: 31:85:f5:56:e0:45:2e:f9:8e:af:5f:b4:9a:61:0a: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:98:41:AE:6D:CD:9E:21:A7:A9:92:06:A2:A0:5E:CC:85:70:72:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b995fae-deb4-3b6a-9ca8-675702df32b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:90:56:1b:22:1e:4a:f3:65:66:4d:5a:79:ff:1f:1c:ae:2c: 6e:98:68:d2:3c:03:57:4f:41:87:88:a7:9a:33:04:17:ad:5f: 49:29:22:77:3a:42:d5:19:b6:79:dc:6f:f2:bc:da:61:34:8c: cc:6a:23:90:bf:46:fb:33:9a:44:4d:c9:88:62:5e:c1:9e:69: 26:98:36:59:74:b4:37:00:83:b3:ee:7a:df:7e:59:4e:68:f1: 8e:d2:15:32:f3:54:60:e1:00:14:d0:ef:03:21:cf:da:33:ff: 09:ad:34:0d:b3:59:31:53:46:a5:bf:cf:3c:e3:70:df:23:1d: 72:91:82:e8:20:2c:ce:7c:65:6c:6a:f4:28:a6:74:a7:c1:0d: 7d:14:ec:1a:45:3c:d5:8a:f2:36:2f:64:c9:62:8b:8d:f6:0e: 19:71:1f:0c:44:4d:70:13:69:a5:5d:fd:53:42:74:71:1d:88: 68:e0:37:8c:a6:2e:c7:7b:4f:2a:90:80:45:dd:ea:89:ca:be: 73:21:33:10:88:55:ba:fe:d9:02:f1:6b:b5:8a:ac:22:8d:c2: 4d:1d:ea:02:f0:f9:c9:17:c9:6e:dd:36:fa:90:28:94:3a:b1: 9c:3e:1a:7e:67:00:58:8a:e1:6c:47:00:e6:b5:ad:9d:95:17: 65:1c:45:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qn5BHqZJDhnFFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NTMzNDViOTgtYjdkYi00OTVlLTk3YjUtN2NhYTk4MjFhYTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn0jvoEhlYi6rkvweyIXyzBQXGhwFvqTHNZo Amd/qSPxxZ+bepcPX+H1IKDq/u2tD9KEgm878JLhPem71iblbaOWJ1UZKOEkyJTN Mk3uWPWfVpEoLtqJ+5AZRivenhEgtZjXKYwC1vV3FHrGqPFMUUMeZxyW1SHBWEvN 5GZiv8XnfYrwyxsumLCvfNF13jYScANhmxXkBx4EjTCGfz3y3HRcI0C0VNUTgfwH vzLs0qM3svM9lW+1OAEbwANur0CjHhbE0w3q8kv5QLfJR8ZrU8+odWKHNpkEGFDY deBz+RnF9YtkDvMx5Iy43lFPKPcxhfVW4EUu+Y6vX7SaYQq6TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+YQa5tzZ4hp6mSBqKgXsyFcHInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNmI5OTVmYWUtZGViNC0z YjZhLTljYTgtNjc1NzAyZGYzMmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgPFbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSQVhsiHkrzZWZNWnn/HxyuLG6YaNI8A1dPQYeIp5ozBBetX0kpInc6 QtUZtnncb/K82mE0jMxqI5C/RvszmkRNyYhiXsGeaSaYNll0tDcAg7Puet9+WU5o 8Y7SFTLzVGDhABTQ7wMhz9oz/wmtNA2zWTFTRqW/zzzjcN8jHXKRguggLM58ZWxq 9CimdKfBDX0U7BpFPNWK8jYvZMlii432DhlxHwxETXATaaVd/VNCdHEdiGjgN4ym Lsd7TyqQgEXd6onKvnMhMxCIVbr+2QLxa7WKrCKNwk0d6gLw+ckXyW7dNvqQKJQ6 sZw+Gn5nAFiK4WxHAOa1rZ2VF2UcRdk= -----END CERTIFICATE-----Generated at Sun Jun 15 11:47:07 2025 by rpki-client