$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7aaf74c-12bf-313b-8895-323a7cdee6f9.roa File: b7aaf74c-12bf-313b-8895-323a7cdee6f9.roa (raw, json) Hash identifier: kvQ4hUImNT0BwypGUZWeHaAoD9b/ilWK+P2Jm2TU724= Subject key identifier: 42:A5:7C:0E:82:8E:8B:C3:CB:59:A2:8D:A2:A7:E8:FF:7E:10:39:F9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43134DBC1AAA4BA4C3D2100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7aaf74c-12bf-313b-8895-323a7cdee6f9.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 67.189.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:34:db:c1:aa:a4:ba:4c:3d:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=b39edac6-0f59-466a-8086-c35cceead8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4f:ea:fc:a9:ed:9b:01:dd:30:45:32:b3:13: 1b:18:7b:2f:d8:bd:c6:38:1b:fc:dd:e1:56:2e:0c: 4f:6e:b8:67:5d:35:9a:02:99:47:d7:34:cf:8a:b3: 8f:4a:35:5b:af:5a:87:09:91:fc:e5:fd:6a:e5:ff: 10:26:53:7a:71:cb:92:2c:68:34:46:6a:97:aa:e0: af:3f:9b:49:86:c9:d6:f6:a7:04:c1:ec:60:3f:a2: 03:38:4e:e3:f2:66:07:1b:14:07:96:93:eb:1b:9d: cd:29:91:b6:5d:e7:f0:24:db:a2:69:0d:47:ac:b9: 12:bd:ec:3f:ce:5c:9c:eb:14:68:a1:66:4a:15:ec: e4:d5:3e:be:f9:cd:d4:af:4b:05:41:aa:84:8d:f9: d6:c8:c2:41:60:bb:e8:b0:b8:d1:a4:38:e0:8a:b8: e0:ac:13:5a:9c:42:de:2f:07:7e:7c:32:ed:2b:a6: 46:e5:6b:eb:1c:be:bc:56:16:0f:a5:9c:ac:e5:86: 63:07:09:3c:8e:72:48:c2:26:84:c1:6b:4c:10:19: 09:69:65:9f:45:26:3a:41:47:7e:cf:a1:f7:ee:d6: 92:5b:3f:4c:54:28:a4:75:24:07:7d:23:fe:90:35: ff:f2:95:68:5c:a3:f4:a2:af:9f:90:55:61:1e:6d: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:7C:0E:82:8E:8B:C3:CB:59:A2:8D:A2:A7:E8:FF:7E:10:39:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7aaf74c-12bf-313b-8895-323a7cdee6f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.189.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e6:60:47:28:3e:6c:60:d9:d7:20:2b:3a:3b:04:3b:ed:62: 5a:d9:33:30:00:ed:72:48:b6:91:42:c8:44:cb:6c:a9:58:d5: 1b:b9:83:c1:38:fe:40:2d:4c:af:89:ac:2a:a5:3d:91:11:d0: 98:c8:93:17:4e:56:20:82:dd:d5:70:ac:24:0b:c3:37:0e:e1: 1e:38:f3:da:4d:da:de:c1:40:b0:14:c7:4c:a4:84:bb:21:d7: da:84:79:e1:cb:b6:38:37:91:f5:c6:15:33:24:eb:c7:65:9f: 69:fb:15:30:3b:43:32:f8:87:d7:38:4a:80:e6:6b:b1:36:4e: 98:48:b5:9b:d0:cc:f9:0c:16:80:e5:f9:49:67:74:5d:33:e3: fb:d2:51:66:d6:09:4d:bc:9d:7a:99:07:df:1c:82:6e:0f:73: b1:60:9d:f7:45:a1:f9:59:5a:d0:b3:c1:23:a6:08:c3:fa:2c: 45:63:21:3d:21:16:e3:4c:9f:00:68:af:24:9b:0b:28:f2:a6: 49:82:c6:32:ac:70:e2:58:8a:89:60:20:9b:f0:99:7c:81:e7: dd:e4:59:54:71:1f:b0:0d:e7:fc:67:ab:6a:c6:83:4d:01:36: 34:ae:95:77:21:da:37:97:0e:a8:b2:df:b1:06:d5:f1:07:fb: f6:a8:38:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMTTbwaqkukw9IQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YjM5ZWRhYzYtMGY1OS00NjZhLTgwODYtYzM1Y2NlZWFkOGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU/q/KntmwHdMEUysxMbGHsv2L3GOBv83eFW LgxPbrhnXTWaAplH1zTPirOPSjVbr1qHCZH85f1q5f8QJlN6ccuSLGg0RmqXquCv P5tJhsnW9qcEwexgP6IDOE7j8mYHGxQHlpPrG53NKZG2XefwJNuiaQ1HrLkSvew/ zlyc6xRooWZKFezk1T6++c3Ur0sFQaqEjfnWyMJBYLvosLjRpDjgirjgrBNanELe Lwd+fDLtK6ZG5WvrHL68VhYPpZys5YZjBwk8jnJIwiaEwWtMEBkJaWWfRSY6QUd+ z6H37taSWz9MVCikdSQHfSP+kDX/8pVoXKP0oq+fkFVhHm0CxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKlfA6CjovDy1mijaKn6P9+EDn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjdhYWY3NGMtMTJiZi0z MTNiLTg4OTUtMzIzYTdjZGVlNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ71cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHmYEcoPmxg2dcgKzo7BDvtYlrZMzAA7XJItpFCyETLbKlY1Ru5g8E4 /kAtTK+JrCqlPZER0JjIkxdOViCC3dVwrCQLwzcO4R4489pN2t7BQLAUx0ykhLsh 19qEeeHLtjg3kfXGFTMk68dln2n7FTA7QzL4h9c4SoDma7E2TphItZvQzPkMFoDl +UlndF0z4/vSUWbWCU28nXqZB98cgm4Pc7FgnfdFoflZWtCzwSOmCMP6LEVjIT0h FuNMnwBorySbCyjypkmCxjKscOJYiolgIJvwmXyB593kWVRxH7AN5/xnq2rGg00B NjSulXch2jeXDqiy37EG1fEH+/aoONc= -----END CERTIFICATE-----Generated at Mon Jun 30 18:39:07 2025 by rpki-client