$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e0bb5b-39b4-3000-93bb-b7e613ab0961.roa File: 38e0bb5b-39b4-3000-93bb-b7e613ab0961.roa (raw, json) Hash identifier: ZhsOncjqvohBjYovBWMz4juX8bTAvVDBzkmuaEeelAY= Subject key identifier: BA:B9:F1:E5:88:69:AC:ED:28:80:DB:95:5A:E2:42:82:86:55:B8:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D1651A3A1CECED499D287600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e0bb5b-39b4-3000-93bb-b7e613ab0961.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 22258 IP address blocks: 174.161.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:1a:3a:1c:ec:ed:49:9d:28:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=2e09ccae-c60f-4c85-880c-fea12259f510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:66:28:de:b3:da:dc:99:d9:61:9d:30:a8: 70:1f:a3:af:3d:f6:03:8d:2b:96:7b:e7:29:11:81: e5:e1:a1:12:b7:d5:5a:f2:fe:de:4f:09:65:5f:a4: c5:41:66:dd:5b:2e:82:7a:f9:13:31:32:ee:c5:49: 8f:d2:66:f0:a4:ea:3c:39:4a:7b:01:88:c4:b8:1f: ec:e5:eb:3e:8b:8a:cb:62:39:84:7f:9f:46:01:e2: c3:50:45:2d:85:e3:c5:68:8e:00:33:c0:e7:48:30: 04:03:07:9d:fb:cf:0b:ad:79:e2:2e:fc:6a:f1:f7: 41:7e:a8:25:f2:41:b3:6f:40:b6:fd:22:db:a6:92: de:02:f8:0f:d0:67:1d:f5:ca:31:c2:b8:7a:c4:21: 06:e5:f2:75:99:04:7e:a1:33:27:8c:61:1a:34:08: 7b:1d:b2:ad:3a:fa:6c:9d:f0:c9:1d:fa:fe:a9:e3: 36:52:10:c4:27:dd:36:6f:06:c8:59:4e:0d:6a:c1: 0d:cb:3e:ea:e4:56:7b:19:ab:a5:2b:ac:9c:01:25: ed:a1:0a:9a:58:4e:c7:f3:c7:76:c0:b2:49:65:54: 02:fa:a9:8d:a2:70:2f:d1:ec:5e:58:48:3f:0a:fd: 2c:ed:ec:87:1a:c4:21:60:15:b7:91:a7:ea:e0:81: e1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B9:F1:E5:88:69:AC:ED:28:80:DB:95:5A:E2:42:82:86:55:B8:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e0bb5b-39b4-3000-93bb-b7e613ab0961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:38:2a:e7:4a:5d:ab:0b:32:d4:c1:96:7a:bd:f0:46:9a:05: 44:42:85:66:ee:2d:4d:bd:c8:5d:c4:e2:9e:9e:b0:83:20:90: 9f:de:2a:c4:2d:96:ee:e9:4a:58:9f:84:bd:84:4d:10:84:86: f0:30:65:de:ba:65:b8:a3:12:68:2f:2e:97:06:42:8a:59:20: 20:7d:20:b0:8d:eb:00:d7:24:7f:c3:56:eb:e0:8e:ab:fe:84: df:c1:8d:1a:4b:43:b6:f8:55:c0:21:46:ae:22:1e:11:86:12: e1:55:c8:39:98:72:17:e0:ab:50:3e:90:2c:28:5d:e5:dc:99: 6d:cb:11:a9:c4:50:c8:a7:6a:ff:2b:95:07:e1:30:2c:91:84: 47:a4:e4:90:ad:cd:11:c2:31:0d:2b:57:8d:ed:56:8c:24:c0: 76:b8:36:b8:91:86:f1:eb:69:6c:ce:d8:8f:75:12:91:aa:94: ba:a1:aa:35:4e:5f:41:18:4f:e9:6e:cd:ec:29:c2:56:fd:c8: 3c:93:b6:dd:5d:09:93:a7:fe:3c:60:2f:27:b8:5c:7e:8a:b0: 13:5d:9f:6c:96:85:3e:54:67:1b:db:0a:16:77:5a:76:05:dd: 26:f7:2f:09:76:9f:56:a0:00:03:52:d2:17:ab:be:e1:64:77: 57:95:1c:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZRo6HOztSZ0odgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MmUwOWNjYWUtYzYwZi00Yzg1LTg4MGMtZmVhMTIyNTlmNTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAFmKN6z2tyZ2WGdMKhwH6OvPfYDjSuWe+cp EYHl4aESt9Va8v7eTwllX6TFQWbdWy6CevkTMTLuxUmP0mbwpOo8OUp7AYjEuB/s 5es+i4rLYjmEf59GAeLDUEUthePFaI4AM8DnSDAEAwed+88LrXniLvxq8fdBfqgl 8kGzb0C2/SLbppLeAvgP0Gcd9coxwrh6xCEG5fJ1mQR+oTMnjGEaNAh7HbKtOvps nfDJHfr+qeM2UhDEJ902bwbIWU4NasENyz7q5FZ7GaulK6ycASXtoQqaWE7H88d2 wLJJZVQC+qmNonAv0exeWEg/Cv0s7eyHGsQhYBW3kafq4IHhMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLq58eWIaaztKIDblVriQoKGVbjtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhlMGJiNWItMzliNC0z MDAwLTkzYmItYjdlNjEzYWIwOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs4KudKXasLMtTBlnq98EaaBURChWbuLU29yF3E4p6esIMgkJ/eKsQt lu7pSlifhL2ETRCEhvAwZd66ZbijEmgvLpcGQopZICB9ILCN6wDXJH/DVuvgjqv+ hN/BjRpLQ7b4VcAhRq4iHhGGEuFVyDmYchfgq1A+kCwoXeXcmW3LEanEUMinav8r lQfhMCyRhEek5JCtzRHCMQ0rV43tVowkwHa4NriRhvHraWzO2I91EpGqlLqhqjVO X0EYT+luzewpwlb9yDyTtt1dCZOn/jxgLye4XH6KsBNdn2yWhT5UZxvbChZ3WnYF 3Sb3Lwl2n1agAANS0hervuFkd1eVHOQ= -----END CERTIFICATE-----Generated at Sun May 11 15:48:44 2025 by rpki-client