$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6b57d42-c916-3ab4-9058-8a26d67f2b27.roa File: e6b57d42-c916-3ab4-9058-8a26d67f2b27.roa (raw, json) Hash identifier: UzoYzlf+qO+UQxWGWkIfUKOH5girx3JEe5jcBaXCgLQ= Subject key identifier: 53:CC:F9:09:62:F5:1F:41:4C:0A:04:CA:6F:FB:76:96:CF:01:CD:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A71EB3FDA9CC4E134F5C132A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6b57d42-c916-3ab4-9058-8a26d67f2b27.roa Signing time: Tue 08 Jul 2025 01:00:51 +0000 ROA not before: Tue 08 Jul 2025 01:00:51 +0000 ROA not after: Mon 06 Oct 2025 01:00:51 +0000 asID: 33651 IP address blocks: 76.21.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:71:eb:3f:da:9c:c4:e1:34:f5:c1:32:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 8 01:00:51 2025 GMT Not After : Oct 6 01:00:51 2025 GMT Subject: CN=8f0e74f8-09cc-41de-ae50-9fcdafce10f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:96:a1:52:43:c2:ed:44:4f:3d:85:99:3d:c4: 99:25:d3:32:3d:f5:35:b1:a3:77:8a:60:b7:9e:61: 47:70:f7:e2:25:4d:85:f5:30:ab:f1:72:e2:a1:1d: de:8a:8d:53:a4:28:3a:7a:d2:e3:65:5c:f7:c3:eb: 5c:c0:94:ed:d9:53:6a:90:73:5c:cf:6f:da:c1:ec: bd:3e:33:6c:2b:1e:43:84:11:1b:d0:83:b2:28:5b: 4e:d7:e7:c8:b5:43:5f:e7:c5:cb:71:6c:4b:49:23: 9b:30:af:be:b9:a4:92:78:02:26:c8:f4:fd:f5:a1: 61:0b:ea:69:34:4f:d6:46:b7:e5:26:39:af:dc:f8: 99:10:88:54:8e:ea:ff:c9:01:76:b4:b2:ae:c9:26: 53:19:bb:a4:63:a3:0c:a1:9e:62:67:1e:d1:95:ea: 6a:c0:b6:a1:fa:d1:90:fa:f8:1a:e0:29:a9:05:9f: 64:7f:52:49:46:99:36:bc:85:0b:be:81:70:f3:94: 3e:26:c3:35:64:a5:43:a1:5a:8f:68:b0:99:5a:9a: ed:0d:fa:e8:95:f4:83:e2:cf:f3:0a:cd:e7:2b:f7: d8:31:57:51:0b:92:1f:cd:31:8d:b9:34:22:f9:04: 64:93:37:0f:53:15:bc:2b:0f:c4:68:3d:8f:05:39: f4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CC:F9:09:62:F5:1F:41:4C:0A:04:CA:6F:FB:76:96:CF:01:CD:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6b57d42-c916-3ab4-9058-8a26d67f2b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.21.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d7:68:ae:ff:a3:70:84:80:85:c7:74:ee:f6:65:fb:b9:9e: ce:4e:7e:75:e5:d0:8e:bd:e5:47:99:3a:a2:e4:f5:ba:89:30: 29:ca:5d:8a:7c:3e:a0:21:0d:ee:27:6b:a9:2a:5c:cd:1f:db: ac:02:8e:e7:23:22:64:b0:7f:c8:42:f4:dd:24:bf:d1:52:b2: b8:ad:2d:94:4e:61:9c:73:ca:e1:eb:ca:c9:be:a2:ac:99:72: 98:e9:99:6f:10:a0:8c:be:80:24:49:2d:1f:03:68:b9:44:37: 27:bc:c5:b5:46:da:59:a5:da:b8:24:05:0d:37:e5:a2:4a:0e: f5:5e:7c:7e:f7:d9:5b:e8:ce:7d:3a:e8:2f:36:28:67:31:c6: 7e:a9:4a:f4:a2:c2:63:84:85:da:15:21:9e:4f:84:cb:22:b4: e9:b4:1d:81:96:25:09:67:bb:b5:d1:6c:95:ca:d7:37:35:48: b0:25:cb:1b:09:33:6c:0f:99:ba:37:2a:5b:09:76:21:fa:d5: 5f:7e:e6:bc:84:8c:df:d9:e8:78:61:ad:29:c1:8f:6a:19:b6: e2:42:a5:98:17:20:86:1d:d0:a7:ca:99:39:29:b5:a9:e6:40: 42:f4:45:15:69:df:af:1d:db:8f:c9:a9:a1:84:c5:35:69:f5: ce:35:fc:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6z/anMThNPXBMqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk OGYwZTc0ZjgtMDljYy00MWRlLWFlNTAtOWZjZGFmY2UxMGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJahUkPC7URPPYWZPcSZJdMyPfU1saN3imC3 nmFHcPfiJU2F9TCr8XLioR3eio1TpCg6etLjZVz3w+tcwJTt2VNqkHNcz2/awey9 PjNsKx5DhBEb0IOyKFtO1+fItUNf58XLcWxLSSObMK++uaSSeAImyPT99aFhC+pp NE/WRrflJjmv3PiZEIhUjur/yQF2tLKuySZTGbukY6MMoZ5iZx7RlepqwLah+tGQ +vga4CmpBZ9kf1JJRpk2vIULvoFw85Q+JsM1ZKVDoVqPaLCZWprtDfrolfSD4s/z Cs3nK/fYMVdRC5IfzTGNuTQi+QRkkzcPUxW8Kw/EaD2PBTn0RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPM+Qli9R9BTAoEym/7dpbPAc23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTZiNTdkNDItYzkxNi0z YWI0LTkwNTgtOGEyNmQ2N2YyYjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbXaK7/o3CEgIXHdO72Zfu5ns5OfnXl0I695UeZOqLk9bqJMCnKXYp8 PqAhDe4na6kqXM0f26wCjucjImSwf8hC9N0kv9FSsritLZROYZxzyuHrysm+oqyZ cpjpmW8QoIy+gCRJLR8DaLlENye8xbVG2lml2rgkBQ035aJKDvVefH732Vvozn06 6C82KGcxxn6pSvSiwmOEhdoVIZ5PhMsitOm0HYGWJQlnu7XRbJXK1zc1SLAlyxsJ M2wPmbo3KlsJdiH61V9+5ryEjN/Z6HhhrSnBj2oZtuJCpZgXIIYd0KfKmTkptanm QEL0RRVp368d24/JqaGExTVp9c41/CQ= -----END CERTIFICATE-----Generated at Sun Jul 20 22:00:28 2025 by rpki-client