$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b571aa1-6f32-3058-a653-f83b3de42373.roa File: 4b571aa1-6f32-3058-a653-f83b3de42373.roa (raw, json) Hash identifier: jFsDB53AydSks8CnBb2MweRZH5WonHA21KRfZMDpI7Y= Subject key identifier: 0E:64:A9:8D:59:96:D3:E6:FD:D7:34:75:3C:E9:E2:E9:02:C1:A3:35 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A14658014BB1E5F39ED44F6C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b571aa1-6f32-3058-a653-f83b3de42373.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 0 IP address blocks: 69.36.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:80:14:bb:1e:5f:39:ed:44:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=d1ece277-b207-4a43-b9bf-23837c04a63b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:b3:e5:4b:bc:a9:b8:e4:64:0d:6a:21:27: ea:81:b6:d6:2a:99:3f:f2:66:cd:59:76:e1:2b:99: 37:5d:2b:d5:db:09:3e:69:b9:a7:74:ac:5e:92:e6: 44:1c:03:9e:74:15:a0:6b:3d:bb:02:97:8e:cc:28: 4e:aa:d9:8a:f7:b0:61:6a:3d:a8:90:c2:1b:13:8e: 08:16:41:e1:ed:c1:9c:6e:c4:d3:42:62:43:1f:e1: 21:53:56:88:f0:b3:67:ed:0f:6e:1b:91:95:59:c5: 10:de:da:b5:53:27:a7:0a:b7:aa:bc:5d:04:f9:77: 55:68:d3:ca:13:05:e6:23:33:9b:9a:53:4d:29:e8: 7d:18:f7:93:27:67:ab:70:03:cd:3e:b3:59:7d:da: 34:03:c4:f5:ec:ae:e2:66:53:15:f7:0a:a2:29:23: 16:7f:5a:b2:1b:54:56:4c:92:80:55:77:75:41:d7: 00:4a:9e:f3:35:ca:ec:fe:da:8f:11:e5:be:4d:30: 99:99:76:62:a3:0b:6a:f0:f5:d3:c6:99:8c:5e:5e: 5c:2c:75:64:3d:ca:09:f6:13:8e:79:0f:65:4a:2c: b2:f3:d5:22:fe:e3:80:b5:e0:33:a4:40:65:9c:de: 21:4f:09:1d:83:80:e2:59:74:3a:97:b8:47:9a:a7: c8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:64:A9:8D:59:96:D3:E6:FD:D7:34:75:3C:E9:E2:E9:02:C1:A3:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4b571aa1-6f32-3058-a653-f83b3de42373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 69.36.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1a:92:b1:1f:92:50:e9:7c:80:e6:ae:44:8a:92:1d:8c:b4: 65:c4:fc:25:4b:64:fc:ba:89:f9:88:83:36:c1:26:a6:eb:a7: 80:55:44:25:7e:16:eb:2a:c0:ae:03:ae:26:69:30:a6:83:83: a7:4e:c2:a4:4a:d5:c2:21:d2:8e:c4:e9:74:25:e9:d8:7b:c2: d2:3d:51:16:11:cd:10:52:43:b4:1e:56:45:67:c2:c3:81:0a: 88:20:b1:79:90:f3:48:ab:b6:bb:8b:33:9a:8a:f4:64:50:8d: 1c:69:b7:85:ba:ed:d5:5c:95:f3:40:b8:7b:26:60:0f:58:10: 2c:e0:31:2d:ae:30:91:15:86:4f:90:80:c3:be:ee:3a:31:5b: d9:5d:c2:27:7c:fd:c4:49:a4:52:71:39:a0:5a:0c:87:51:74: ff:19:d8:3b:3a:de:99:b6:6a:10:08:8d:b0:5f:9a:50:1d:3e: 9c:1d:29:b5:04:b4:69:f6:3b:bf:46:bc:56:b6:66:c0:52:a4: 04:fc:ab:e5:2a:d6:4c:1d:76:a7:24:1b:70:be:25:7b:c7:34: 9a:3c:b5:d4:7a:6d:b4:ad:63:14:64:a7:e5:bf:9e:f3:0f:70: 41:fb:b4:ae:1a:07:49:90:e7:cf:7a:d6:4e:1f:8f:09:f9:2b: 81:d3:9b:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZYAUux5fOe1E9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDFlY2UyNzctYjIwNy00YTQzLWI5YmYtMjM4MzdjMDRhNjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWqz5Uu8qbjkZA1qISfqgbbWKpk/8mbNWXbh K5k3XSvV2wk+abmndKxekuZEHAOedBWgaz27ApeOzChOqtmK97Bhaj2okMIbE44I FkHh7cGcbsTTQmJDH+EhU1aI8LNn7Q9uG5GVWcUQ3tq1UyenCreqvF0E+XdVaNPK EwXmIzObmlNNKeh9GPeTJ2ercAPNPrNZfdo0A8T17K7iZlMV9wqiKSMWf1qyG1RW TJKAVXd1QdcASp7zNcrs/tqPEeW+TTCZmXZiowtq8PXTxpmMXl5cLHVkPcoJ9hOO eQ9lSiyy89Ui/uOAteAzpEBlnN4hTwkdg4DiWXQ6l7hHmqfIyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5kqY1ZltPm/dc0dTzp4ukCwaM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNGI1NzFhYTEtNmYzMi0z MDU4LWE2NTMtZjgzYjNkZTQyMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSSTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoakrEfklDpfIDmrkSKkh2MtGXE/CVLZPy6ifmIgzbBJqbrp4BVRCV+ FusqwK4DriZpMKaDg6dOwqRK1cIh0o7E6XQl6dh7wtI9URYRzRBSQ7QeVkVnwsOB CoggsXmQ80irtruLM5qK9GRQjRxpt4W67dVclfNAuHsmYA9YECzgMS2uMJEVhk+Q gMO+7joxW9ldwid8/cRJpFJxOaBaDIdRdP8Z2Ds63pm2ahAIjbBfmlAdPpwdKbUE tGn2O79GvFa2ZsBSpAT8q+Uq1kwddqckG3C+JXvHNJo8tdR6bbStYxRkp+W/nvMP cEH7tK4aB0mQ58961k4fjwn5K4HTm7g= -----END CERTIFICATE-----Generated at Sun Jun 15 13:06:03 2025 by rpki-client