$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3734f4-a270-3753-aacd-1b46abc35a3d.roa File: aa3734f4-a270-3753-aacd-1b46abc35a3d.roa (raw, json) Hash identifier: RnuDdIMSG6VbvTi0PFVmBpFlnMKDV2XIWaUyNUiUIRw= Subject key identifier: B8:3C:C3:55:67:B4:80:EE:8A:FB:81:E2:DB:B4:D6:03:F6:4E:85:A2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD7A426796F896A47D3C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3734f4-a270-3753-aacd-1b46abc35a3d.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 13367 IP address blocks: 76.156.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:7a:42:67:96:f8:96:a4:7d:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=d02efc81-59b9-4b7b-b8ce-6ab3889e2e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:c7:ff:d9:c5:40:67:84:5f:22:cd:0f:15: 64:df:2e:57:4c:f8:c9:c3:a0:32:87:a7:94:a0:f5: d0:4d:68:c6:c5:ad:94:16:ca:1e:68:79:2e:ba:a9: c9:ce:64:41:92:16:f5:cb:37:e7:ef:4d:26:b5:90: bc:76:cc:28:96:43:49:29:85:ec:4f:16:8d:d7:14: 63:96:72:38:56:d1:b9:75:79:7e:f7:59:78:65:87: 98:76:00:ee:41:d9:26:21:4c:f6:2a:23:60:4b:c7: 5c:39:31:9f:ee:8f:24:37:71:19:1c:0e:4f:1f:4d: 59:f6:6b:fd:cd:af:d4:7d:ef:16:31:80:fe:db:c5: f5:13:b2:4b:73:b3:3f:4a:22:e5:1f:d2:7e:73:26: b7:17:3c:c7:3f:4a:5d:01:3e:4d:6d:f5:5c:a3:fb: 51:47:2a:7c:37:64:6e:cb:1d:95:e5:f4:e7:ee:e6: 11:64:b0:3d:35:fd:ee:98:fa:eb:14:c0:e8:2c:45: e0:10:5c:04:b2:1b:37:4e:b2:d4:3e:90:13:a0:f6: 89:77:e4:24:bd:4f:b3:ab:ee:94:0c:f8:0a:9a:2c: f4:e8:f4:08:ef:49:66:82:b7:19:dc:e5:65:71:1d: 34:cf:62:81:cf:e0:44:7c:95:3f:07:12:fd:61:d7: 66:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3C:C3:55:67:B4:80:EE:8A:FB:81:E2:DB:B4:D6:03:F6:4E:85:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa3734f4-a270-3753-aacd-1b46abc35a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.156.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:62:8b:70:ad:95:5e:a7:75:5e:0c:3c:c8:8a:e5:2f:a9:ba: d7:ad:30:85:c4:08:ef:63:bd:be:8b:18:f8:bd:5d:55:6b:23: 8c:94:fe:75:b2:79:99:b8:f8:a6:c8:2b:43:c9:45:c1:79:5e: 13:92:90:b6:3f:32:f2:e4:59:6f:f9:df:84:af:72:c5:25:5d: 17:8a:e0:0d:9b:09:18:6a:66:0a:59:0c:ea:2f:77:7a:45:64: 7a:ca:aa:9a:fd:ca:6f:72:63:43:7e:12:7b:8e:fb:24:9b:48: 9b:cb:25:ec:14:9c:1a:4f:78:6d:51:80:9a:b9:88:a0:7d:1b: f9:10:ac:84:4d:48:04:91:00:b0:a0:a6:77:fd:7c:57:9a:8f: 1e:30:c1:16:eb:f6:80:db:63:d4:97:a5:9d:45:1d:44:64:dc: 2e:6a:75:8b:cf:46:66:76:a7:6e:53:49:31:d1:5c:b1:f0:41: b4:b8:b8:a4:e9:5c:b7:e1:6d:f5:57:96:8b:26:da:15:90:b6: d4:4a:67:69:d5:68:a7:e4:b8:97:d5:15:f8:79:fe:73:de:83: 63:8e:d9:48:a1:c2:b2:cc:de:87:2c:18:8b:f0:da:20:81:9a: 8c:8b:62:a0:f5:ed:fa:71:2f:12:ac:4f:85:39:50:40:30:13: cd:fb:bf:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/XpCZ5b4lqR9PIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZDAyZWZjODEtNTliOS00YjdiLWI4Y2UtNmFiMzg4OWUyZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYDH/9nFQGeEXyLNDxVk3y5XTPjJw6Ayh6eU oPXQTWjGxa2UFsoeaHkuuqnJzmRBkhb1yzfn700mtZC8dswolkNJKYXsTxaN1xRj lnI4VtG5dXl+91l4ZYeYdgDuQdkmIUz2KiNgS8dcOTGf7o8kN3EZHA5PH01Z9mv9 za/Ufe8WMYD+28X1E7JLc7M/SiLlH9J+cya3FzzHP0pdAT5NbfVco/tRRyp8N2Ru yx2V5fTn7uYRZLA9Nf3umPrrFMDoLEXgEFwEshs3TrLUPpAToPaJd+QkvU+zq+6U DPgKmiz06PQI70lmgrcZ3OVlcR00z2KBz+BEfJU/BxL9Yddm/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLg8w1VntIDuivuB4tu01gP2ToWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWEzNzM0ZjQtYTI3MC0z NzUzLWFhY2QtMWI0NmFiYzM1YTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANZii3CtlV6ndV4MPMiK5S+putetMIXECO9jvb6LGPi9XVVrI4yU/nWy eZm4+KbIK0PJRcF5XhOSkLY/MvLkWW/534SvcsUlXReK4A2bCRhqZgpZDOovd3pF ZHrKqpr9ym9yY0N+EnuO+ySbSJvLJewUnBpPeG1RgJq5iKB9G/kQrIRNSASRALCg pnf9fFeajx4wwRbr9oDbY9SXpZ1FHURk3C5qdYvPRmZ2p25TSTHRXLHwQbS4uKTp XLfhbfVXlosm2hWQttRKZ2nVaKfkuJfVFfh5/nPeg2OO2UihwrLM3ocsGIvw2iCB moyLYqD17fpxLxKsT4U5UEAwE837v/w= -----END CERTIFICATE-----Generated at Sun Jul 20 17:13:34 2025 by rpki-client