$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b2aae65-fb26-39f7-854f-cef22569f49e.roa File: 5b2aae65-fb26-39f7-854f-cef22569f49e.roa (raw, json) Hash identifier: qI1Q4akfkq9c7mXjHA1h5BDUJ0OdhY93xO8DA8frEG4= Subject key identifier: E9:78:E3:E1:3A:F4:30:F3:46:FD:A4:67:C6:D6:F9:67:EF:FF:66:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFDA2CE918BCCD95B0A4100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b2aae65-fb26-39f7-854f-cef22569f49e.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33491 IP address blocks: 67.173.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:a2:ce:91:8b:cc:d9:5b:0a:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=e3acc2ba-57ea-4a39-aa80-55353c01370a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:03:b1:bd:c8:a1:2f:bf:4c:09:07:d3:d9:f5: f2:9e:54:40:1b:83:d0:6e:77:fd:c1:d3:94:9e:c4: 1e:41:fd:13:b8:48:c8:32:96:4b:c2:45:d7:3c:6e: 57:ab:50:56:a0:3b:74:87:17:30:cd:52:e7:15:58: 18:29:98:06:7f:cd:39:cd:6e:31:4d:4e:15:57:07: 48:a2:fc:1b:c8:8f:69:68:3b:5e:49:80:89:13:23: 77:1e:96:4d:b0:d2:b0:87:33:8e:b2:dd:26:f7:bf: c2:f1:b8:2e:de:3d:74:51:b6:06:b7:5b:a9:a5:18: 75:60:04:82:11:9d:05:f6:f1:a9:87:56:85:7a:c6: 09:67:14:3d:62:2c:ac:d0:d0:25:34:9f:d2:15:f1: 5c:23:f6:04:55:be:3c:e3:c1:b2:40:93:05:20:15: ea:32:22:c2:8f:a0:ff:01:ce:05:2d:3e:5a:1a:33: 5a:6b:c4:68:75:34:e1:8a:98:20:a6:cf:aa:d5:a6: 78:2c:e0:8d:ff:4a:b6:ba:2d:52:39:fe:e4:85:42: 3d:5e:1e:e6:3a:13:bc:8d:1d:13:b4:bc:0c:a8:9f: 9d:20:ff:c9:b2:b1:98:a2:a9:4c:3b:11:01:ee:a4: 11:6c:a0:f6:b4:0b:75:e0:52:26:17:45:1a:84:ed: 05:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:78:E3:E1:3A:F4:30:F3:46:FD:A4:67:C6:D6:F9:67:EF:FF:66:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b2aae65-fb26-39f7-854f-cef22569f49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.173.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:e0:4f:4d:61:fc:79:40:3e:53:9c:37:02:b6:cc:bb:dd:05: b8:25:34:94:0b:a2:1d:fd:5c:50:0d:7a:4f:e0:75:a3:fa:1a: 0b:7e:2a:3f:21:19:37:46:e0:3c:2e:24:6d:02:e8:d1:32:1a: 07:b8:04:e7:4a:d4:08:a0:0f:c8:88:6b:9c:10:70:b7:19:2f: de:61:e8:46:cb:86:2e:40:69:b9:cc:57:be:7e:1e:77:e1:d5: e3:16:ef:0c:f7:b9:33:8b:9d:6b:51:fb:a7:63:b2:6a:14:98: 27:0a:1e:2b:24:92:f2:f6:86:58:ce:42:c4:9b:2f:76:e9:59: 8a:56:29:e1:bb:49:b0:ad:e3:27:3c:b1:a8:d1:9d:5f:11:8b: fd:6e:4f:4f:9a:d1:8a:28:62:c8:fd:bb:47:68:ac:ee:cb:43: 22:74:d6:11:a7:dd:cf:79:ff:f2:df:85:1a:d7:25:85:44:88: b7:72:25:3f:9d:2a:42:dd:67:7d:89:f0:e8:03:ab:50:cd:1f: c6:5e:95:46:26:7e:f8:7d:d5:c0:14:47:af:36:89:b2:cb:e0: 9d:a5:a7:1e:b4:55:28:66:71:be:20:79:b1:c5:68:bc:76:ba: fa:c1:14:12:2a:c4:2d:99:87:ce:eb:bd:22:3b:2e:94:75:75: a4:11:68:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/aLOkYvM2VsKQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZTNhY2MyYmEtNTdlYS00YTM5LWFhODAtNTUzNTNjMDEzNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwOxvcihL79MCQfT2fXynlRAG4PQbnf9wdOU nsQeQf0TuEjIMpZLwkXXPG5Xq1BWoDt0hxcwzVLnFVgYKZgGf805zW4xTU4VVwdI ovwbyI9paDteSYCJEyN3HpZNsNKwhzOOst0m97/C8bgu3j10UbYGt1uppRh1YASC EZ0F9vGph1aFesYJZxQ9Yiys0NAlNJ/SFfFcI/YEVb4848GyQJMFIBXqMiLCj6D/ Ac4FLT5aGjNaa8RodTThipggps+q1aZ4LOCN/0q2ui1SOf7khUI9Xh7mOhO8jR0T tLwMqJ+dIP/JsrGYoqlMOxEB7qQRbKD2tAt14FImF0UahO0FxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOl44+E69DDzRv2kZ8bW+Wfv/2ZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWIyYWFlNjUtZmIyNi0z OWY3LTg1NGYtY2VmMjI1NjlmNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQ62AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLgT01h/HlAPlOcNwK2zLvdBbglNJQLoh39XFANek/gdaP6Ggt+Kj8h GTdG4DwuJG0C6NEyGge4BOdK1AigD8iIa5wQcLcZL95h6EbLhi5AabnMV75+Hnfh 1eMW7wz3uTOLnWtR+6djsmoUmCcKHiskkvL2hljOQsSbL3bpWYpWKeG7SbCt4yc8 sajRnV8Ri/1uT0+a0YooYsj9u0dorO7LQyJ01hGn3c95//LfhRrXJYVEiLdyJT+d KkLdZ32J8OgDq1DNH8ZelUYmfvh91cAUR682ibLL4J2lpx60VShmcb4gebHFaLx2 uvrBFBIqxC2Zh87rvSI7LpR1daQRaFQ= -----END CERTIFICATE-----Generated at Tue Jul 1 13:06:53 2025 by rpki-client