$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6998c58-d1de-3ce2-8961-250f3721dc81.roa File: b6998c58-d1de-3ce2-8961-250f3721dc81.roa (raw, json) Hash identifier: utSsxt2iYyJXrZ+1KzMxeOn+6QPiCx1PMjjVvK4lLUc= Subject key identifier: C3:14:33:A1:AA:EC:76:89:1C:4D:75:EA:B1:DA:D2:FF:55:50:7D:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB9FC28A884D26AEB7B780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6998c58-d1de-3ce2-8961-250f3721dc81.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 21508 IP address blocks: 174.53.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:9f:c2:8a:88:4d:26:ae:b7:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=a0ea1e96-6c27-4905-8ed7-f89ad9fc559a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:23:0d:e8:5b:c6:70:fe:bc:2f:08:5b:c5:c0: a4:30:42:79:5f:6f:a8:4f:a8:27:35:52:40:7d:6e: 3b:81:a2:7d:72:75:72:45:aa:eb:32:4e:75:d1:3d: 88:5b:ea:79:12:11:e2:88:7c:ef:5d:07:58:6b:fc: 10:65:81:ec:b1:78:7c:ce:cf:ae:d3:ea:88:2a:e9: 4b:98:7d:c2:2a:a1:5f:67:96:19:1f:39:07:22:aa: 7f:ee:72:41:ce:e7:56:16:43:e5:cf:dc:81:44:26: 93:a6:00:d5:8d:ff:03:2f:4b:e9:6c:b0:22:b8:de: 8f:af:ce:b2:8c:af:8a:08:b2:3a:cc:0c:95:3d:f3: a3:fd:82:b4:fe:f3:36:fc:fe:80:3e:00:b2:50:29: d3:84:28:2e:e2:8d:43:00:46:42:db:f4:4d:da:20: 0b:85:8b:6c:64:8c:c8:e6:d9:3e:e8:51:54:fb:a4: a2:17:0c:9e:5f:44:e2:4f:ae:02:18:3d:f4:b8:79: df:12:97:d3:3a:4e:31:a9:ad:af:a9:4c:98:eb:a5: 04:59:87:24:45:56:98:fb:19:de:a0:7a:16:34:f8: 18:73:d5:4b:e2:aa:3a:14:48:dd:10:26:d5:e5:ff: b9:bc:a0:c8:b3:b2:53:f7:6b:29:4a:95:d8:ef:c6: b7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:14:33:A1:AA:EC:76:89:1C:4D:75:EA:B1:DA:D2:FF:55:50:7D:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6998c58-d1de-3ce2-8961-250f3721dc81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 174.53.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:00:d5:e5:94:3a:b5:a0:a5:bf:6e:d4:29:4d:28:2d:61:10: b8:62:b6:5f:4f:44:58:44:03:1f:9e:15:4f:25:9a:11:29:1a: cd:c6:cd:01:2b:72:68:a4:26:c7:61:ac:f6:60:bd:25:a9:95: 69:35:12:1b:a3:22:76:ec:53:fe:d7:ac:bb:26:c7:bb:eb:f9: cb:c6:07:b8:6c:05:f9:b9:ae:c4:70:28:39:09:ce:1c:80:4a: 35:07:54:38:71:03:dc:8b:51:96:d2:f8:8f:a4:38:d7:18:10: 20:ce:09:f9:90:34:5f:94:dd:69:66:91:ac:91:33:28:47:e5: b0:15:1d:66:4c:b1:9f:65:99:55:6b:af:d8:5c:a6:78:6e:e1: ec:85:8a:1c:72:62:df:b2:88:be:ad:d2:bb:4f:69:cd:a3:05: 5d:6f:ae:e2:84:55:93:79:04:af:33:d0:ee:f7:60:65:5a:6d: f7:92:e3:af:af:d1:e0:37:c4:49:93:23:c4:ef:46:a8:e9:8c: 58:c2:33:5e:74:ee:91:79:02:ad:1d:fd:a6:44:82:07:d0:ac: 81:cd:0e:1a:e5:7c:0f:0d:52:6e:e5:22:e4:56:0f:9a:4c:f9: e0:78:bc:d4:b8:58:fc:69:2c:83:cf:63:ab:e1:d4:d9:44:aa: 67:07:49:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+5/CiohNJq63t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YTBlYTFlOTYtNmMyNy00OTA1LThlZDctZjg5YWQ5ZmM1NTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSMN6FvGcP68LwhbxcCkMEJ5X2+oT6gnNVJA fW47gaJ9cnVyRarrMk510T2IW+p5EhHiiHzvXQdYa/wQZYHssXh8zs+u0+qIKulL mH3CKqFfZ5YZHzkHIqp/7nJBzudWFkPlz9yBRCaTpgDVjf8DL0vpbLAiuN6Pr86y jK+KCLI6zAyVPfOj/YK0/vM2/P6APgCyUCnThCgu4o1DAEZC2/RN2iALhYtsZIzI 5tk+6FFU+6SiFwyeX0TiT64CGD30uHnfEpfTOk4xqa2vqUyY66UEWYckRVaY+xne oHoWNPgYc9VL4qo6FEjdECbV5f+5vKDIs7JT92spSpXY78a3wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMUM6Gq7HaJHE116rHa0v9VUH0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY5OThjNTgtZDFkZS0z Y2UyLTg5NjEtMjUwZjM3MjFkYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrjVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4A1eWUOrWgpb9u1ClNKC1hELhitl9PRFhEAx+eFU8lmhEpGs3GzQEr cmikJsdhrPZgvSWplWk1EhujInbsU/7XrLsmx7vr+cvGB7hsBfm5rsRwKDkJzhyA SjUHVDhxA9yLUZbS+I+kONcYECDOCfmQNF+U3WlmkayRMyhH5bAVHWZMsZ9lmVVr r9hcpnhu4eyFihxyYt+yiL6t0rtPac2jBV1vruKEVZN5BK8z0O73YGVabfeS46+v 0eA3xEmTI8TvRqjpjFjCM1507pF5Aq0d/aZEggfQrIHNDhrlfA8NUm7lIuRWD5pM +eB4vNS4WPxpLIPPY6vh1NlEqmcHSQc= -----END CERTIFICATE-----Generated at Wed Jul 2 04:48:50 2025 by rpki-client