$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aa2bbf2-8f4a-3773-b11e-99bc2ab56bf5.roa File: 0aa2bbf2-8f4a-3773-b11e-99bc2ab56bf5.roa (raw, json) Hash identifier: 5O0u3UADQK1NtmGha5RnJO3N4OhM3MGGfBAccgaAdTk= Subject key identifier: CC:F7:2B:F4:49:C9:0E:75:23:0A:1C:28:B5:B5:DF:A0:B5:5D:54:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCA82950B38ED89AFBFB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aa2bbf2-8f4a-3773-b11e-99bc2ab56bf5.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 69.138.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:a8:29:50:b3:8e:d8:9a:fb:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=1f1356c5-7f33-4d2b-a85f-0be67ac5a83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:98:42:78:e1:91:c5:8d:de:bf:f1:55:4f:2e: 34:c5:d9:a5:0f:b8:e3:22:22:da:cc:51:10:84:42: 43:fe:de:6b:6a:a4:92:56:20:61:c1:b8:6b:00:63: 13:50:df:7d:79:13:f4:87:91:16:20:2a:3b:68:0b: 56:37:ed:dd:1a:8f:de:40:d6:fe:63:f3:4c:91:f9: af:c0:1b:52:77:22:a5:69:ce:d4:23:15:37:57:ba: 69:6e:2d:cb:b3:77:e1:05:15:09:2a:e8:87:a4:66: d7:8d:02:a9:1b:8f:97:0d:5c:83:7b:2f:61:89:09: 72:fa:88:90:dc:33:28:b6:7d:57:fd:f9:5d:18:8d: 8f:58:3a:b4:7a:a3:98:9f:21:97:cb:8d:89:28:b1: d0:0e:af:b2:99:ad:88:67:dc:5d:d1:8f:65:41:8f: a5:c0:68:16:12:bf:c0:56:6d:63:71:0e:d7:f1:ec: d0:19:b8:7a:87:5c:f4:b8:9b:b0:d4:62:bc:07:31: 25:c4:43:e6:01:a9:b9:28:cd:d7:ad:23:77:57:1f: 9e:20:32:fd:61:a3:ed:ba:c4:d6:bf:2f:b9:25:34: c6:15:43:b1:ad:00:50:95:0c:83:84:a4:d0:28:4a: 17:3e:b5:a7:8f:d5:21:cb:20:90:69:09:1e:d6:d8: 07:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F7:2B:F4:49:C9:0E:75:23:0A:1C:28:B5:B5:DF:A0:B5:5D:54:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0aa2bbf2-8f4a-3773-b11e-99bc2ab56bf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.138.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:ca:2d:49:63:e4:f2:f5:51:ce:15:67:41:0d:1e:06:72:e7: 54:3c:4e:27:75:9d:2e:26:d5:0c:68:86:07:39:a1:ef:8b:57: 34:ee:1c:0e:92:2a:db:38:b9:52:f4:26:64:bb:86:fb:83:20: a4:40:09:04:3e:4d:93:1a:5e:70:bd:de:1c:79:3c:f9:0d:e0: 21:4f:ec:a5:e7:55:04:dc:ed:28:aa:a7:9c:26:c1:dc:8d:44: b2:5b:99:5a:ac:3d:52:5e:fe:bd:61:1e:15:36:39:ff:c0:67: b2:c5:be:38:f2:b5:bc:69:c3:11:ac:f6:1d:11:4d:22:5a:33: 47:54:ac:4b:2d:0a:cf:5e:42:dd:e8:e6:cb:03:17:e4:a9:d0: 1f:43:fb:fe:cf:9f:e0:54:6f:b3:00:8d:1a:3b:f8:14:cd:30: 8a:d5:cd:93:83:fe:20:bd:e6:0f:da:34:af:05:31:97:28:0d: a7:98:cd:9f:2b:03:da:09:d8:87:41:65:23:93:ee:d8:8c:bf: 41:9e:2a:3c:b6:15:f6:3d:a9:62:97:b0:17:37:71:b3:db:13: ac:aa:11:97:7c:ba:a1:73:8b:df:b1:2c:fb:48:2f:01:0b:41: c5:1c:a9:73:ee:1f:82:9b:4e:4f:8a:d8:d3:30:ff:f6:cc:62: cb:1c:28:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/KgpULOO2Jr7+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MWYxMzU2YzUtN2YzMy00ZDJiLWE4NWYtMGJlNjdhYzVhODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JhCeOGRxY3ev/FVTy40xdmlD7jjIiLazFEQ hEJD/t5raqSSViBhwbhrAGMTUN99eRP0h5EWICo7aAtWN+3dGo/eQNb+Y/NMkfmv wBtSdyKlac7UIxU3V7ppbi3Ls3fhBRUJKuiHpGbXjQKpG4+XDVyDey9hiQly+oiQ 3DMotn1X/fldGI2PWDq0eqOYnyGXy42JKLHQDq+yma2IZ9xd0Y9lQY+lwGgWEr/A Vm1jcQ7X8ezQGbh6h1z0uJuw1GK8BzElxEPmAam5KM3XrSN3Vx+eIDL9YaPtusTW vy+5JTTGFUOxrQBQlQyDhKTQKEoXPrWnj9UhyyCQaQke1tgHVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMz3K/RJyQ51IwocKLW136C1XVTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGFhMmJiZjItOGY0YS0z NzczLWIxMWUtOTliYzJhYjU2YmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRYooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzKLUlj5PL1Uc4VZ0ENHgZy51Q8Tid1nS4m1Qxohgc5oe+LVzTuHA6S Kts4uVL0JmS7hvuDIKRACQQ+TZMaXnC93hx5PPkN4CFP7KXnVQTc7Siqp5wmwdyN RLJbmVqsPVJe/r1hHhU2Of/AZ7LFvjjytbxpwxGs9h0RTSJaM0dUrEstCs9eQt3o 5ssDF+Sp0B9D+/7Pn+BUb7MAjRo7+BTNMIrVzZOD/iC95g/aNK8FMZcoDaeYzZ8r A9oJ2IdBZSOT7tiMv0GeKjy2FfY9qWKXsBc3cbPbE6yqEZd8uqFzi9+xLPtILwEL QcUcqXPuH4KbTk+K2NMw//bMYsscKIk= -----END CERTIFICATE-----Generated at Mon Jun 30 21:05:45 2025 by rpki-client