$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a4caed9-74ba-3385-b8b2-5265261df681.roa File: 2a4caed9-74ba-3385-b8b2-5265261df681.roa (raw, json) Hash identifier: w+uPfChQYNiRY0VGWGGDfvcxBeHI5lTZbS3Xt2V1SAM= Subject key identifier: 13:66:7E:C7:6C:F5:11:BC:B9:88:6F:80:C1:D0:E4:05:73:EB:D6:BD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCCD1C68F9192D57D44720 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a4caed9-74ba-3385-b8b2-5265261df681.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 173.162.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:cd:1c:68:f9:19:2d:57:d4:47:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=fc575e5f-e7d1-4a9c-a3aa-77fc12847c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d8:8b:aa:ac:84:22:bb:cf:9c:7a:41:f7:34: 30:fb:b5:5f:de:6e:d3:a5:d7:77:ef:b0:23:04:64: 83:86:f4:76:a9:d0:0f:16:ba:d4:23:da:bb:82:6a: 96:0b:33:8b:24:66:e3:71:6e:5b:41:8d:56:a4:0f: ee:03:75:ed:5e:c3:1b:92:0a:b8:80:14:07:3c:c2: 8a:f5:15:41:95:94:a4:bc:59:a1:26:5c:73:63:23: 9b:9e:e7:b4:7f:a9:a2:15:6f:13:d5:eb:6f:76:b1: cc:1f:aa:c4:1d:27:15:28:74:8a:49:77:ae:66:f1: 28:10:fc:7d:26:8c:7f:9c:55:a9:ae:3e:da:6b:42: 00:96:ee:35:3d:83:45:03:05:4c:78:f6:3f:60:56: 1f:a1:0e:df:d6:67:91:3d:c5:cf:5d:53:7d:f1:ac: 14:9e:0b:09:72:c6:89:5d:3f:1f:b8:99:de:db:59: f6:82:00:57:a5:ab:f2:8e:59:cc:75:d2:e1:27:a5: 08:11:fc:49:17:63:45:56:d8:93:64:c0:2f:76:41: 24:5d:13:34:e3:e2:d5:40:dd:2f:57:8c:7f:b6:14: 8e:18:b1:7a:85:14:ac:36:d5:d7:27:2a:fb:20:d3: 05:83:d2:57:b1:f5:11:02:57:27:51:05:4e:cf:31: 18:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:66:7E:C7:6C:F5:11:BC:B9:88:6F:80:C1:D0:E4:05:73:EB:D6:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a4caed9-74ba-3385-b8b2-5265261df681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 173.162.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:16:1f:49:f2:c9:f2:bd:67:70:35:01:7b:df:f2:98:b6:c4: df:4c:c9:83:96:18:e5:35:2b:08:f7:c6:20:82:6a:2b:c5:a8: c0:e8:61:08:d3:ac:4e:35:78:4f:6a:75:90:95:b6:19:9b:16: ce:66:78:01:e2:bc:59:c7:e2:7c:98:c2:c4:82:88:c8:fa:ae: 8c:46:12:60:37:ba:27:4b:1e:0e:6b:c3:10:de:8b:f2:63:81: 09:91:7a:47:2e:a2:44:1e:9d:3d:5b:cb:5f:18:0a:d0:00:7a: ea:1a:c5:c2:0f:a4:94:34:d0:ab:dd:23:6a:72:30:aa:13:dd: 1c:e1:57:8c:f3:23:77:d7:22:9b:47:32:bc:a6:2d:11:6e:4e: 61:6e:ee:91:69:66:9b:84:0c:be:91:29:e5:01:41:c9:06:33: db:43:a7:9f:49:8f:33:73:7c:31:8d:c2:bc:1d:71:0b:ea:32: 4b:6b:a9:e9:78:98:a2:d6:1a:12:b7:d5:70:dc:c6:50:6c:cc: 50:64:05:60:d6:7f:30:ba:0d:11:f7:20:e0:78:1c:a2:de:8e: c1:de:f3:50:02:b8:cf:9a:af:c5:36:f7:cc:4d:94:45:b2:3f: b5:74:5c:4a:af:ca:f5:df:a8:75:50:24:5d:18:25:20:e1:08: 45:77:b8:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/M0caPkZLVfURyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZmM1NzVlNWYtZTdkMS00YTljLWEzYWEtNzdmYzEyODQ3YzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtiLqqyEIrvPnHpB9zQw+7Vf3m7Tpdd377Aj BGSDhvR2qdAPFrrUI9q7gmqWCzOLJGbjcW5bQY1WpA/uA3XtXsMbkgq4gBQHPMKK 9RVBlZSkvFmhJlxzYyObnue0f6miFW8T1etvdrHMH6rEHScVKHSKSXeuZvEoEPx9 Jox/nFWprj7aa0IAlu41PYNFAwVMePY/YFYfoQ7f1meRPcXPXVN98awUngsJcsaJ XT8fuJne21n2ggBXpavyjlnMddLhJ6UIEfxJF2NFVtiTZMAvdkEkXRM04+LVQN0v V4x/thSOGLF6hRSsNtXXJyr7INMFg9JXsfURAlcnUQVOzzEYFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNmfsds9RG8uYhvgMHQ5AVz69a9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmE0Y2FlZDktNzRiYS0z Mzg1LWI4YjItNTI2NTI2MWRmNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEraIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4WH0nyyfK9Z3A1AXvf8pi2xN9MyYOWGOU1Kwj3xiCCaivFqMDoYQjT rE41eE9qdZCVthmbFs5meAHivFnH4nyYwsSCiMj6roxGEmA3uidLHg5rwxDei/Jj gQmRekcuokQenT1by18YCtAAeuoaxcIPpJQ00KvdI2pyMKoT3RzhV4zzI3fXIptH MrymLRFuTmFu7pFpZpuEDL6RKeUBQckGM9tDp59JjzNzfDGNwrwdcQvqMktrqel4 mKLWGhK31XDcxlBszFBkBWDWfzC6DRH3IOB4HKLejsHe81ACuM+ar8U298xNlEWy P7V0XEqvyvXfqHVQJF0YJSDhCEV3uDU= -----END CERTIFICATE-----Generated at Tue Jul 1 12:29:50 2025 by rpki-client