$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/619e48e5-c6a3-35b9-9e50-3f0a1315294f.roa File: 619e48e5-c6a3-35b9-9e50-3f0a1315294f.roa (raw, json) Hash identifier: sK+qLRP/NdLEzZOYuvVFIOSXqeD2LnnEY5lBSooI3uc= Subject key identifier: A6:92:31:E8:49:0C:39:45:FA:63:B8:4A:3C:7E:8F:00:2A:0D:E7:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C07FCA1477401D63467CB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/619e48e5-c6a3-35b9-9e50-3f0a1315294f.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 71.57.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:fc:a1:47:74:01:d6:34:67:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=51c8b20a-12d5-4cf0-a012-46a891f13fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:30:0c:67:dc:27:89:6c:00:84:3b:ca:79: cc:79:75:98:03:74:ce:b8:8b:33:0f:ae:64:0d:b5: e6:8f:2f:80:51:d8:e2:56:94:38:25:e7:49:49:94: 84:ba:f9:d5:be:23:a8:d7:27:3b:06:68:6e:aa:d0: 6d:d0:72:92:3e:c5:9a:1c:a7:0c:3d:43:62:e4:26: dc:0a:a4:90:fc:76:35:92:f6:5c:dd:23:d3:76:c3: ba:c7:1f:3b:6c:36:29:59:e8:aa:02:2c:87:57:86: 0c:bd:28:11:15:31:d9:33:df:f1:d9:62:d1:15:d1: 9f:a4:50:b8:f2:a5:8e:46:97:b8:1c:f4:a8:6f:7c: 60:a7:ed:6f:cf:b8:9b:6d:a0:c9:a5:13:7a:fc:ed: 1b:a6:e1:b7:b0:2a:86:a5:14:7e:66:48:25:90:00: f8:9c:96:da:19:46:45:e4:e1:82:82:a5:2c:c0:82: 96:20:b4:06:04:c9:2f:dc:16:48:ab:67:70:ef:9a: b9:e2:5b:68:5f:f9:01:af:da:22:be:1d:c9:21:a8: 72:a4:fa:88:f8:b4:1f:8e:df:9f:61:94:b2:08:78: d0:61:2b:78:be:95:a4:49:b2:51:b8:41:a3:17:f4: d7:e7:0b:b6:8c:55:0f:69:63:b4:4f:b0:f2:cb:a6: 49:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:92:31:E8:49:0C:39:45:FA:63:B8:4A:3C:7E:8F:00:2A:0D:E7:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/619e48e5-c6a3-35b9-9e50-3f0a1315294f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.57.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:8c:f9:a6:46:bd:94:47:6e:cf:3b:8c:0b:1f:d0:78:34:f8: 8c:69:39:9c:88:35:af:09:44:6d:29:6a:fe:8f:2e:9a:73:ec: 74:b4:96:dd:73:30:c2:af:87:3d:0e:27:59:8b:78:e1:50:b1: 35:65:1c:b1:87:15:94:f1:0b:34:15:2c:17:c6:4a:62:86:99: 35:91:9f:f5:a2:51:8d:28:a0:63:54:55:10:ad:ec:7a:09:de: 7d:ab:41:ba:d6:05:53:2e:d8:0a:6a:59:87:49:b3:1e:30:e4: 61:2b:f1:57:13:68:05:d2:7c:ae:6e:37:0a:eb:f7:4e:f9:ed: 06:39:41:ca:26:56:a1:f9:ed:1e:84:13:80:68:a5:94:92:4c: 17:3e:73:d8:a9:ea:de:60:49:41:ed:3e:a1:a7:e3:ff:52:16: 0c:22:f6:90:a9:35:a5:2b:95:29:ef:00:9f:ab:97:6b:a5:e4: 56:64:ac:8b:d8:41:ea:db:1a:84:03:26:c7:ef:f9:ca:92:2e: 98:0c:1e:1e:93:c8:3b:46:15:df:b3:9e:04:3a:88:b1:fc:a6: 75:fd:53:44:11:07:30:1b:53:75:44:f3:72:ec:c7:db:14:4e: 84:ce:c3:ae:1a:ff:cc:87:9b:d5:ff:af:38:e1:04:61:8a:99: f9:6b:33:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB/yhR3QB1jRny4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NTFjOGIyMGEtMTJkNS00Y2YwLWEwMTItNDZhODkxZjEzZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3gwDGfcJ4lsAIQ7ynnMeXWYA3TOuIszD65k DbXmjy+AUdjiVpQ4JedJSZSEuvnVviOo1yc7BmhuqtBt0HKSPsWaHKcMPUNi5Cbc CqSQ/HY1kvZc3SPTdsO6xx87bDYpWeiqAiyHV4YMvSgRFTHZM9/x2WLRFdGfpFC4 8qWORpe4HPSob3xgp+1vz7ibbaDJpRN6/O0bpuG3sCqGpRR+ZkglkAD4nJbaGUZF 5OGCgqUswIKWILQGBMkv3BZIq2dw75q54ltoX/kBr9oivh3JIahypPqI+LQfjt+f YZSyCHjQYSt4vpWkSbJRuEGjF/TX5wu2jFUPaWO0T7Dyy6ZJkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaSMehJDDlF+mO4Sjx+jwAqDeeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjE5ZTQ4ZTUtYzZhMy0z NWI5LTllNTAtM2YwYTEzMTUyOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRzkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOM+aZGvZRHbs87jAsf0Hg0+IxpOZyINa8JRG0pav6PLppz7HS0lt1z MMKvhz0OJ1mLeOFQsTVlHLGHFZTxCzQVLBfGSmKGmTWRn/WiUY0ooGNUVRCt7HoJ 3n2rQbrWBVMu2ApqWYdJsx4w5GEr8VcTaAXSfK5uNwrr90757QY5QcomVqH57R6E E4BopZSSTBc+c9ip6t5gSUHtPqGn4/9SFgwi9pCpNaUrlSnvAJ+rl2ul5FZkrIvY QerbGoQDJsfv+cqSLpgMHh6TyDtGFd+zngQ6iLH8pnX9U0QRBzAbU3VE83Lsx9sU ToTOw64a/8yHm9X/rzjhBGGKmflrM/Y= -----END CERTIFICATE-----Generated at Mon Jun 30 14:04:34 2025 by rpki-client