$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56f14968-4b5a-3844-aaa6-17c93358fd1c.roa File: 56f14968-4b5a-3844-aaa6-17c93358fd1c.roa (raw, json) Hash identifier: prWhXTe27tRlndluLGcXWR6BY+mGYoxp2xG1H11vsV4= Subject key identifier: 68:93:C6:BD:EF:40:DB:37:42:F3:C9:E9:BE:68:2A:EB:F5:69:A8:E0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCCEAD90DDAEC3EAF387A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56f14968-4b5a-3844-aaa6-17c93358fd1c.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 174.161.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:ce:ad:90:dd:ae:c3:ea:f3:87:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=d6cae697-a929-4be4-a595-29e70d40170a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bd:dc:b9:17:ff:8a:0c:43:c8:53:b0:70:24: 73:04:93:c0:d1:da:f6:96:57:8a:2a:d7:86:f4:fb: 9d:cc:92:aa:dd:93:03:2d:ee:ba:7d:b6:b3:ee:de: ab:38:5e:58:5c:8b:1d:62:1b:d0:13:8b:66:a6:79: ba:12:e5:40:54:09:fe:41:e3:c6:ce:01:39:cf:97: cb:70:0c:63:54:76:d8:6f:ed:5c:94:9f:8d:99:34: 02:eb:a2:35:8f:4e:82:bb:57:5c:83:52:35:bf:50: 9f:84:0f:bd:be:51:59:31:cc:3e:2b:21:d1:bb:b2: 15:b9:2a:da:9d:40:e1:90:28:ba:aa:60:bb:29:f1: 73:c2:6c:8e:26:15:d0:b7:8f:ac:04:02:4b:50:cf: aa:1c:17:a6:fc:65:a4:3a:b9:bc:cc:b9:a1:91:24: 6e:e7:71:f2:6c:94:db:db:0c:ad:03:37:3b:04:13: 3e:46:6c:6b:33:8c:e9:31:38:2e:3f:a5:3b:e3:5a: ca:69:18:45:8a:b8:e9:15:98:e9:44:7b:60:58:84: bb:4b:90:15:23:30:21:ee:5e:93:82:2a:00:f5:23: e1:ed:6a:58:28:45:90:04:e6:7d:64:64:2d:3c:82: aa:7c:2c:47:d6:25:e9:25:15:98:43:73:5e:dc:93: 8e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:93:C6:BD:EF:40:DB:37:42:F3:C9:E9:BE:68:2A:EB:F5:69:A8:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56f14968-4b5a-3844-aaa6-17c93358fd1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.161.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:b6:77:f9:3b:fb:38:98:7a:e3:b3:9d:6c:b8:7b:5a:b7:29: 46:5e:51:0d:4e:f6:80:d9:23:e7:32:44:38:18:ff:a5:02:5f: e4:8c:3f:fa:c7:e8:d9:9f:f5:54:b0:29:86:e7:e8:f9:63:ee: ff:79:d8:2a:5d:16:07:0a:98:eb:77:1d:99:51:51:a0:a2:40: ee:2f:c3:95:09:5d:e3:20:4b:12:37:82:74:81:6f:36:29:67: ab:30:71:c5:da:68:ae:48:6b:65:b5:ee:e2:9b:d5:5c:99:5d: 78:9a:08:73:ed:7a:98:53:12:2f:8c:21:30:58:7e:ea:d4:3a: 47:46:c8:c7:52:a9:30:e7:53:fd:97:cd:84:d5:69:8d:9d:26: 6c:86:57:45:72:3d:78:1c:a7:12:31:87:af:64:03:35:03:b4: df:b4:01:84:00:e4:86:bf:77:43:9c:28:36:11:ab:d7:09:f7: ff:52:08:06:ae:3b:66:1b:0e:5d:08:e3:60:c1:ce:b8:61:f7: 46:58:c9:90:47:36:a8:d7:20:a5:f6:38:2c:be:2f:27:aa:56: 8d:70:64:ba:23:f0:98:e0:35:3c:ad:1c:68:c1:05:c5:34:26: 3a:67:fb:c6:de:a0:7f:45:6d:db:48:5e:e0:cb:66:44:da:e5: b2:a5:24:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/M6tkN2uw+rzh6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZDZjYWU2OTctYTkyOS00YmU0LWE1OTUtMjllNzBkNDAxNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL3cuRf/igxDyFOwcCRzBJPA0dr2lleKKteG 9PudzJKq3ZMDLe66fbaz7t6rOF5YXIsdYhvQE4tmpnm6EuVAVAn+QePGzgE5z5fL cAxjVHbYb+1clJ+NmTQC66I1j06Cu1dcg1I1v1CfhA+9vlFZMcw+KyHRu7IVuSra nUDhkCi6qmC7KfFzwmyOJhXQt4+sBAJLUM+qHBem/GWkOrm8zLmhkSRu53HybJTb 2wytAzc7BBM+RmxrM4zpMTguP6U741rKaRhFirjpFZjpRHtgWIS7S5AVIzAh7l6T gioA9SPh7WpYKEWQBOZ9ZGQtPIKqfCxH1iXpJRWYQ3Ne3JOOKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiTxr3vQNs3QvPJ6b5oKuv1aajgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTZmMTQ5NjgtNGI1YS0z ODQ0LWFhYTYtMTdjOTMzNThmZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAy2d/k7+ziYeuOznWy4e1q3KUZeUQ1O9oDZI+cyRDgY/6UCX+SMP/rH 6Nmf9VSwKYbn6Plj7v952CpdFgcKmOt3HZlRUaCiQO4vw5UJXeMgSxI3gnSBbzYp Z6swccXaaK5Ia2W17uKb1VyZXXiaCHPtephTEi+MITBYfurUOkdGyMdSqTDnU/2X zYTVaY2dJmyGV0VyPXgcpxIxh69kAzUDtN+0AYQA5Ia/d0OcKDYRq9cJ9/9SCAau O2YbDl0I42DBzrhh90ZYyZBHNqjXIKX2OCy+LyeqVo1wZLoj8JjgNTytHGjBBcU0 Jjpn+8beoH9FbdtIXuDLZkTa5bKlJPI= -----END CERTIFICATE-----Generated at Tue Jul 1 19:56:04 2025 by rpki-client