$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f4595c-4623-31ad-82af-aa6e7a6922e3.roa File: a2f4595c-4623-31ad-82af-aa6e7a6922e3.roa (raw, json) Hash identifier: 9JSXs8gWHybi/9ca8J1BVVrBiCBr2BU+V/SsZhQ5V0E= Subject key identifier: 5F:46:4A:8A:5A:60:5E:D9:0C:A7:7E:07:16:46:7E:68:CD:BB:06:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF75A6B5613666FA96AB4380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f4595c-4623-31ad-82af-aa6e7a6922e3.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 7725 IP address blocks: 67.191.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:a6:b5:61:36:66:fa:96:ab:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=b99cd930-e29a-4f3e-a82c-cd6e3f60e3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a7:28:37:b7:1b:8a:e7:48:bd:a0:da:29:e7: 88:56:23:c5:14:54:37:f2:d3:6e:c3:eb:2e:e8:24: 14:ab:f6:d0:31:f1:a4:3b:b7:03:df:5b:4a:3f:36: 90:a7:95:f3:d3:e8:6a:5c:83:1d:ce:85:38:e0:3a: 2c:d9:c7:4d:a3:9f:7f:bb:c7:b0:8f:69:be:c3:13: 5d:e3:cf:e7:3f:d4:f5:77:1f:56:9c:68:bb:da:c6: 73:27:2d:28:cc:ed:ef:34:f6:47:f5:6b:ae:3d:12: 6b:a9:6e:a3:85:4e:fb:21:60:04:7b:d5:92:f4:02: 10:bb:09:b9:d1:e3:c0:36:59:28:cf:48:9f:82:64: 7e:6d:ad:f2:2e:e0:df:1a:2c:19:63:79:53:d4:c1: 79:f6:5c:25:c7:ea:1e:01:10:22:a4:db:03:c4:1a: d4:43:1c:b8:cc:54:4b:70:b6:4a:f7:21:a5:b2:6c: 65:05:4a:4f:9a:d3:ca:36:d8:3d:62:dc:ea:4f:d6: be:bf:bb:c0:c0:97:7c:ee:78:49:09:b3:65:a2:d8: 10:3b:83:6c:ee:5e:6a:f2:79:a1:53:ce:0b:a8:e0: ff:d4:0c:7d:91:8f:b9:9a:35:8a:2e:c0:65:cd:23: 3b:ca:84:53:52:e1:ca:19:20:33:db:1d:99:8d:26: 49:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:46:4A:8A:5A:60:5E:D9:0C:A7:7E:07:16:46:7E:68:CD:BB:06:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2f4595c-4623-31ad-82af-aa6e7a6922e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.191.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:2f:89:7e:cb:55:c7:c2:ca:4b:ae:02:a4:38:ad:9c:52:75: 55:6c:37:e3:47:93:5d:f1:21:49:3f:27:80:c7:95:b0:b3:02: 25:66:8a:5e:21:43:0a:e1:4a:d2:5c:e9:a4:42:40:76:7d:6f: 1d:9f:15:02:ed:43:41:d4:21:75:3b:64:e6:1f:d3:0c:2c:48: 3e:15:3c:b9:7d:15:ae:3e:a1:56:23:4d:ce:28:9d:e1:38:72: ee:ed:61:51:84:ed:92:38:dc:8b:2c:9d:c9:6e:e7:5f:24:80: fe:40:e8:4f:df:b2:d8:bb:bf:4e:08:38:1f:1c:b4:34:a4:ca: ed:d2:4f:9d:ff:9b:e5:8a:12:76:63:fc:73:e1:bc:34:7b:c0: 97:b7:cc:c2:66:ff:7a:19:3d:5c:03:e7:fc:e6:a3:13:7b:4f: a7:57:42:b9:2d:2f:55:c0:52:8d:47:80:0c:eb:a6:2d:7a:17: fd:1c:dd:f6:14:9b:a2:34:c8:f9:ad:64:11:d3:cc:96:c6:b5: a3:88:84:b7:1c:57:55:3f:b0:31:87:cd:5c:5c:c6:80:6b:07: 29:15:fd:58:c7:ff:36:01:89:a1:61:05:fb:f1:0a:0d:17:52: b1:36:e1:7d:06:5a:e4:af:fe:22:12:e9:84:1a:ae:95:2f:18: 43:bc:48:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/daa1YTZm+parQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk Yjk5Y2Q5MzAtZTI5YS00ZjNlLWE4MmMtY2Q2ZTNmNjBlM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6coN7cbiudIvaDaKeeIViPFFFQ38tNuw+su 6CQUq/bQMfGkO7cD31tKPzaQp5Xz0+hqXIMdzoU44Dos2cdNo59/u8ewj2m+wxNd 48/nP9T1dx9WnGi72sZzJy0ozO3vNPZH9WuuPRJrqW6jhU77IWAEe9WS9AIQuwm5 0ePANlkoz0ifgmR+ba3yLuDfGiwZY3lT1MF59lwlx+oeARAipNsDxBrUQxy4zFRL cLZK9yGlsmxlBUpPmtPKNtg9YtzqT9a+v7vAwJd87nhJCbNlotgQO4Ns7l5q8nmh U84LqOD/1Ax9kY+5mjWKLsBlzSM7yoRTUuHKGSAz2x2ZjSZJKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9GSopaYF7ZDKd+BxZGfmjNuwZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTJmNDU5NWMtNDYyMy0z MWFkLTgyYWYtYWE2ZTdhNjkyMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8viX7LVcfCykuuAqQ4rZxSdVVsN+NHk13xIUk/J4DHlbCzAiVmil4h QwrhStJc6aRCQHZ9bx2fFQLtQ0HUIXU7ZOYf0wwsSD4VPLl9Fa4+oVYjTc4oneE4 cu7tYVGE7ZI43Issnclu518kgP5A6E/fsti7v04IOB8ctDSkyu3ST53/m+WKEnZj /HPhvDR7wJe3zMJm/3oZPVwD5/zmoxN7T6dXQrktL1XAUo1HgAzrpi16F/0c3fYU m6I0yPmtZBHTzJbGtaOIhLccV1U/sDGHzVxcxoBrBykV/VjH/zYBiaFhBfvxCg0X UrE24X0GWuSv/iIS6YQarpUvGEO8SJM= -----END CERTIFICATE-----Generated at Mon Jun 30 11:49:08 2025 by rpki-client