$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4539af44-b1d7-3831-874b-da0f8ea61018.roa File: 4539af44-b1d7-3831-874b-da0f8ea61018.roa (raw, json) Hash identifier: rPckhPXZ3aSFvpeeXZu4zw68TnV5VnkPFq//ew6JT7M= Subject key identifier: FF:BC:00:1A:FF:F3:1B:AB:DB:D9:F4:F0:BA:D5:0D:10:A8:F3:B6:1B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4315BE3BF753B9168103780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4539af44-b1d7-3831-874b-da0f8ea61018.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 174.168.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:5b:e3:bf:75:3b:91:68:10:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=f65da931-5163-45c2-9f02-22242f872e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3a:c8:45:30:53:6d:2d:6f:2e:92:2d:f7:9b: 9c:04:72:9c:02:52:91:8d:08:45:30:10:a3:61:94: 47:93:82:d1:74:55:28:ce:c6:4e:e6:15:80:8c:aa: f1:19:c0:d8:ee:b7:28:4d:8e:f4:1b:e1:ff:76:a3: 7b:87:ec:b8:a2:d9:57:ee:af:1b:29:d8:12:37:54: 0a:c4:32:c5:47:92:b0:48:08:d5:61:54:06:63:20: 68:33:e2:b1:7a:26:06:5a:81:7a:bc:8c:0c:f6:2a: a1:d9:9c:79:4d:00:85:bc:04:8e:61:79:ab:01:32: 43:54:fe:01:2c:aa:3d:25:c2:d9:0f:0e:dc:98:00: fe:6d:22:39:b1:c3:ab:8a:16:49:6c:66:f9:38:e6: 04:df:8f:53:a9:c0:df:56:2e:e2:59:a6:3b:d4:02: 6f:a5:0e:b1:6c:b0:1a:5c:b0:a5:41:9c:91:e6:32: c3:07:27:e5:b1:de:c6:83:d3:6e:f8:0c:8a:d6:d1: ae:ae:ec:e2:86:7b:53:5c:49:1f:1b:0b:60:2c:91: 47:ae:a1:89:16:aa:52:92:ce:57:3d:85:b5:57:ae: 97:48:b7:ec:8c:3f:b1:b8:ea:4d:b8:b3:eb:7f:07: ea:95:a6:c8:04:ed:2b:d3:5d:5e:98:de:8c:35:90: 63:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BC:00:1A:FF:F3:1B:AB:DB:D9:F4:F0:BA:D5:0D:10:A8:F3:B6:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4539af44-b1d7-3831-874b-da0f8ea61018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.168.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:42:65:6e:33:30:0c:0f:d3:e5:73:c0:55:02:49:23:c3:82: 32:f3:b9:4a:61:7c:0b:07:56:79:29:fc:93:4a:da:17:58:8b: 76:8a:9a:30:69:8a:6c:31:a5:fd:2b:e5:6a:d0:5f:c2:e3:e7: 56:1d:f9:a9:27:62:5e:2c:57:63:84:2b:9e:04:1b:8b:e9:9b: 18:51:71:65:5a:11:3b:96:72:9a:00:3c:38:ba:a1:88:d3:81: 14:8c:e5:1a:0b:bd:52:18:b5:8a:64:76:c9:0b:cb:40:c5:43: 30:c2:82:91:9c:1d:48:f0:e8:ce:4d:49:a4:bd:db:a3:d7:8a: cc:fe:86:27:fd:cf:68:6b:14:5f:d8:14:8e:7a:02:92:67:c8: d7:a0:b3:cf:5c:f3:cc:5a:27:0b:13:c4:b2:56:fb:84:35:98: 67:dd:f3:4c:e8:08:84:81:fd:d8:27:db:00:33:95:93:8c:94: c9:d2:43:33:01:92:15:61:c0:3f:4d:3a:80:60:3e:6b:17:a1: 5c:b1:a4:cf:63:ca:cd:e6:02:f8:06:eb:fe:26:96:03:58:b2: 25:87:28:95:ea:9f:d6:ae:29:f1:2a:23:a5:de:b1:64:ec:5b: 03:98:a2:ae:34:0f:d9:0d:b6:3a:b2:25:ec:b5:71:28:7b:6d: d6:f6:e8:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMVvjv3U7kWgQN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjY1ZGE5MzEtNTE2My00NWMyLTlmMDItMjIyNDJmODcyZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjrIRTBTbS1vLpIt95ucBHKcAlKRjQhFMBCj YZRHk4LRdFUozsZO5hWAjKrxGcDY7rcoTY70G+H/dqN7h+y4otlX7q8bKdgSN1QK xDLFR5KwSAjVYVQGYyBoM+KxeiYGWoF6vIwM9iqh2Zx5TQCFvASOYXmrATJDVP4B LKo9JcLZDw7cmAD+bSI5scOrihZJbGb5OOYE349TqcDfVi7iWaY71AJvpQ6xbLAa XLClQZyR5jLDByflsd7Gg9Nu+AyK1tGuruzihntTXEkfGwtgLJFHrqGJFqpSks5X PYW1V66XSLfsjD+xuOpNuLPrfwfqlabIBO0r011emN6MNZBjgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+8ABr/8xur29n08LrVDRCo87YbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDUzOWFmNDQtYjFkNy0z ODMxLTg3NGItZGEwZjhlYTYxMDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdCZW4zMAwP0+VzwFUCSSPDgjLzuUphfAsHVnkp/JNK2hdYi3aKmjBp imwxpf0r5WrQX8Lj51Yd+aknYl4sV2OEK54EG4vpmxhRcWVaETuWcpoAPDi6oYjT gRSM5RoLvVIYtYpkdskLy0DFQzDCgpGcHUjw6M5NSaS926PXisz+hif9z2hrFF/Y FI56ApJnyNegs89c88xaJwsTxLJW+4Q1mGfd80zoCISB/dgn2wAzlZOMlMnSQzMB khVhwD9NOoBgPmsXoVyxpM9jys3mAvgG6/4mlgNYsiWHKJXqn9auKfEqI6XesWTs WwOYoq40D9kNtjqyJey1cSh7bdb26Ng= -----END CERTIFICATE-----Generated at Mon May 12 21:51:56 2025 by rpki-client