$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d90bc969-9b92-3e4a-a9be-7d0fe798baae.roa File: d90bc969-9b92-3e4a-a9be-7d0fe798baae.roa (raw, json) Hash identifier: aFB8qf2BUYVQ0JhUpLMYElmTyT3oOyvjVMO0qIFaOXU= Subject key identifier: 3F:C3:E4:89:48:E1:A3:B5:9B:39:02:C0:DA:A5:F7:97:02:E8:07:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC1ECBBAB324E6D5C32B20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d90bc969-9b92-3e4a-a9be-7d0fe798baae.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 13367 IP address blocks: 76.156.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:1e:cb:ba:b3:24:e6:d5:c3:2b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=452df4b2-081d-428f-83a7-9fc0cb9fb49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7a:0e:91:df:77:00:35:d5:c0:7a:45:ae:71: dc:03:9f:68:18:d0:9d:b7:41:52:c0:22:71:85:9c: b3:86:b4:7d:ae:7c:e8:55:88:b5:51:74:f6:de:d8: 07:2e:24:d0:2c:23:33:55:b3:7f:1f:bd:c6:85:8d: a4:fc:39:be:ef:a4:6a:e2:c9:a7:84:d7:81:23:de: 31:d7:26:17:dd:3c:9b:29:77:97:36:e7:2f:a2:9a: 0a:7d:be:97:fb:39:f6:fc:26:96:12:aa:0c:fc:e0: 0d:a5:a4:e4:ea:43:af:f4:ab:a4:c2:19:c4:36:31: a7:57:93:14:76:d9:fb:9c:b7:15:07:8d:2e:d4:24: 29:55:e3:04:b1:36:a1:fb:70:52:26:3c:6e:5b:9a: cc:f7:ac:44:40:d6:02:ff:ca:37:4f:12:3b:ef:d1: 5a:0c:a1:e2:4d:68:95:0e:b1:89:1b:0e:6f:89:bc: 50:33:15:f3:56:04:05:1d:27:08:54:05:c2:25:ac: 80:f6:c5:4a:6b:a7:41:49:a6:7e:b7:ae:79:e1:0c: 7b:0f:80:f8:79:4d:66:71:e3:1b:c0:a3:6d:9e:61: bd:a0:39:3c:bb:81:fc:75:20:98:31:91:2f:a3:fc: 7b:bb:3a:98:d1:07:1d:35:c4:c9:7f:20:46:4f:ef: df:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C3:E4:89:48:E1:A3:B5:9B:39:02:C0:DA:A5:F7:97:02:E8:07:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d90bc969-9b92-3e4a-a9be-7d0fe798baae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.156.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:18:e9:55:a0:77:f4:4f:15:84:9f:cf:bd:6b:78:7b:49:fd: 6d:70:cb:8b:0d:42:47:aa:31:9e:aa:91:8f:91:ac:16:06:5f: 63:92:1f:03:3e:e8:c1:77:b5:94:9d:3a:f3:3a:32:17:43:b6: 18:8a:09:95:7c:8a:3c:2f:ff:e3:1f:f5:b8:f3:93:8d:bd:80: a9:83:87:04:0a:ff:e9:3c:59:87:24:64:76:db:81:2d:c3:d6: ac:25:42:21:76:aa:67:cf:7a:05:58:95:65:08:49:88:bc:02: f8:de:57:21:6e:38:dc:2d:6c:1c:65:35:ce:42:c5:5a:b7:10: b7:c2:50:4d:97:ad:fa:49:11:44:38:c6:ee:9d:e4:39:8f:00: 23:0a:4d:a4:0d:6f:ca:8b:2c:e7:a8:bf:ea:f0:42:85:e1:88: 74:0a:99:be:8b:bc:9e:4c:13:a7:a8:09:c2:99:22:b2:06:1f: 6b:5b:cf:c0:44:3d:da:7a:a7:c7:fa:a9:08:48:64:71:3e:ad: 66:c8:02:93:ed:63:89:5d:bc:23:df:b3:f7:fc:03:00:21:be: 13:ed:af:19:b0:d3:1e:3e:a9:c1:93:1e:6d:e3:54:51:79:ca: d7:c2:93:fe:0c:53:36:9c:69:1c:00:26:2f:10:7a:60:7a:ad: 61:f5:89:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/B7LurMk5tXDKyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NDUyZGY0YjItMDgxZC00MjhmLTgzYTctOWZjMGNiOWZiNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXoOkd93ADXVwHpFrnHcA59oGNCdt0FSwCJx hZyzhrR9rnzoVYi1UXT23tgHLiTQLCMzVbN/H73GhY2k/Dm+76Rq4smnhNeBI94x 1yYX3TybKXeXNucvopoKfb6X+zn2/CaWEqoM/OANpaTk6kOv9KukwhnENjGnV5MU dtn7nLcVB40u1CQpVeMEsTah+3BSJjxuW5rM96xEQNYC/8o3TxI779FaDKHiTWiV DrGJGw5vibxQMxXzVgQFHScIVAXCJayA9sVKa6dBSaZ+t6554Qx7D4D4eU1mceMb wKNtnmG9oDk8u4H8dSCYMZEvo/x7uzqY0QcdNcTJfyBGT+/f4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/D5IlI4aO1mzkCwNql95cC6AelMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDkwYmM5NjktOWI5Mi0z ZTRhLWE5YmUtN2QwZmU3OThiYWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMAY6VWgd/RPFYSfz71reHtJ/W1wy4sNQkeqMZ6qkY+RrBYGX2OSHwM+ 6MF3tZSdOvM6MhdDthiKCZV8ijwv/+Mf9bjzk429gKmDhwQK/+k8WYckZHbbgS3D 1qwlQiF2qmfPegVYlWUISYi8AvjeVyFuONwtbBxlNc5CxVq3ELfCUE2XrfpJEUQ4 xu6d5DmPACMKTaQNb8qLLOeov+rwQoXhiHQKmb6LvJ5ME6eoCcKZIrIGH2tbz8BE Pdp6p8f6qQhIZHE+rWbIApPtY4ldvCPfs/f8AwAhvhPtrxmw0x4+qcGTHm3jVFF5 ytfCk/4MUzacaRwAJi8QemB6rWH1iSA= -----END CERTIFICATE-----Generated at Sun Jul 20 17:29:39 2025 by rpki-client