$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/814b1e1a-ad20-3de3-a735-e358f988599a.roa File: 814b1e1a-ad20-3de3-a735-e358f988599a.roa (raw, json) Hash identifier: 5CgIMEKz/Yep81wEeOM/mA/zFRlX7mpBhUMV1MZBZHo= Subject key identifier: 5B:91:AE:2F:D5:03:D9:7C:A4:15:99:9A:E2:63:A6:FE:EE:EA:75:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB5002785A593AD621F900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/814b1e1a-ad20-3de3-a735-e358f988599a.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 71.228.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:50:02:78:5a:59:3a:d6:21:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=a32e9f9f-db0f-462f-943d-1f99363bd377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:35:1e:db:54:95:3e:d7:15:75:72:ab:00: 32:3d:46:87:81:0d:00:7f:97:6c:a7:32:cc:89:83: ab:c0:bf:2e:46:c1:f2:2b:c5:cf:99:48:41:1e:f4: 6a:d1:6c:15:fa:dc:0b:d6:43:60:f0:24:9c:c9:63: 18:f6:72:ff:1c:b4:be:a9:d0:ab:78:78:8b:4f:c1: 25:0d:0c:3a:c9:9d:9f:52:7b:04:4b:74:06:36:f2: 16:a8:62:c0:9f:93:81:93:e5:01:9f:59:fd:56:aa: 96:49:bc:ae:18:16:2a:02:50:f5:b6:c5:66:9b:5b: 9c:16:0b:2e:57:43:28:4f:2d:3e:2e:41:d4:7d:76: 38:aa:79:29:5c:b1:a8:5e:36:f4:77:9b:ee:0f:a1: d6:29:62:a7:25:35:8d:de:94:71:8e:47:8a:6a:8d: 11:8a:89:c6:2e:91:78:3f:93:b1:4e:28:a4:5a:47: 76:d9:9b:44:78:dc:65:12:c6:e8:8c:d9:05:d6:52: e6:93:27:8e:81:ad:b7:4c:75:50:75:82:be:de:22: 72:6b:ad:13:cd:bd:16:21:0f:1a:86:0b:bf:29:ea: 1f:98:46:b8:2c:77:da:1c:52:7a:70:06:a4:28:b4: 5a:21:b1:17:d3:bb:45:92:af:8b:a6:2c:fb:d3:82: 00:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:91:AE:2F:D5:03:D9:7C:A4:15:99:9A:E2:63:A6:FE:EE:EA:75:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/814b1e1a-ad20-3de3-a735-e358f988599a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.228.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a5:30:c7:10:42:bc:8d:9e:f1:64:7c:c2:f6:f4:4b:a3:ee: 69:49:2a:02:8c:b3:e8:1f:ce:68:66:80:f2:61:73:35:36:d7: 9c:fe:2f:6f:31:23:62:80:a7:e3:b9:08:da:21:d9:27:92:13: 78:58:c4:98:9b:a0:48:b0:43:cb:39:db:1f:b0:af:28:37:75: 21:fc:9f:d9:8d:da:ed:e2:20:bb:7d:55:83:c0:e7:59:5c:b9: e3:6f:79:08:66:07:40:65:1e:1e:4f:54:b0:43:3b:de:16:fa: 3a:9c:be:7c:40:29:96:ea:8c:f6:c9:b7:85:23:b3:b2:98:00: 15:b2:e1:56:7e:76:a5:ac:d3:a4:9d:08:a9:29:dc:0a:c2:09: bb:6c:21:ce:48:36:dc:f3:76:e1:4b:9e:3f:6c:19:5b:18:a1: d7:47:6e:bb:ac:90:a4:62:1d:0c:8c:c0:be:db:94:d5:29:06: 57:09:58:51:d1:b9:37:4f:32:2b:a6:7d:31:cd:99:20:69:eb: cd:80:c5:ec:b5:9d:d1:c8:4e:2b:29:75:7e:a1:c3:9a:87:60: 32:6e:fb:2e:95:a5:a4:d9:ea:50:46:f2:aa:e5:36:89:e8:b9: 71:ab:bc:80:e4:b0:03:a6:ba:eb:6f:ee:b3:c3:cc:d0:98:79: 2b:52:f1:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+1ACeFpZOtYh+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YTMyZTlmOWYtZGIwZi00NjJmLTk0M2QtMWY5OTM2M2JkMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxg1HttUlT7XFXVyqwAyPUaHgQ0Af5dspzLM iYOrwL8uRsHyK8XPmUhBHvRq0WwV+twL1kNg8CScyWMY9nL/HLS+qdCreHiLT8El DQw6yZ2fUnsES3QGNvIWqGLAn5OBk+UBn1n9VqqWSbyuGBYqAlD1tsVmm1ucFgsu V0MoTy0+LkHUfXY4qnkpXLGoXjb0d5vuD6HWKWKnJTWN3pRxjkeKao0RionGLpF4 P5OxTiikWkd22ZtEeNxlEsbojNkF1lLmkyeOga23THVQdYK+3iJya60Tzb0WIQ8a hgu/KeofmEa4LHfaHFJ6cAakKLRaIbEX07tFkq+Lpiz704IA+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuRri/VA9l8pBWZmuJjpv7u6nW3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODE0YjFlMWEtYWQyMC0z ZGUzLWE3MzUtZTM1OGY5ODg1OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+T8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOlMMcQQryNnvFkfML29Euj7mlJKgKMs+gfzmhmgPJhczU215z+L28x I2KAp+O5CNoh2SeSE3hYxJiboEiwQ8s52x+wryg3dSH8n9mN2u3iILt9VYPA51lc ueNveQhmB0BlHh5PVLBDO94W+jqcvnxAKZbqjPbJt4Ujs7KYABWy4VZ+dqWs06Sd CKkp3ArCCbtsIc5INtzzduFLnj9sGVsYoddHbruskKRiHQyMwL7blNUpBlcJWFHR uTdPMiumfTHNmSBp682Axey1ndHITispdX6hw5qHYDJu+y6VpaTZ6lBG8qrlNono uXGrvIDksAOmuutv7rPDzNCYeStS8cw= -----END CERTIFICATE-----Generated at Mon Jun 30 17:21:42 2025 by rpki-client