$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab8f2bb-4f7c-321e-9e69-e8f036e9bb27.roa File: 1ab8f2bb-4f7c-321e-9e69-e8f036e9bb27.roa (raw, json) Hash identifier: 3dH9c1Ppp4rs0lA7idQ0HjPbqj3hsy1qCdQW39DY+6A= Subject key identifier: E0:40:5D:9D:89:F0:91:14:EC:ED:49:FB:4B:BE:4A:B2:F5:91:0E:AC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430C47CA110C6964C90BB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab8f2bb-4f7c-321e-9e69-e8f036e9bb27.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 69.136.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:c4:7c:a1:10:c6:96:4c:90:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=8808f0bc-495e-4a14-a831-df7058bd3d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:78:bc:d7:67:2d:b9:ea:3b:46:f6:b9:a6: a5:60:f2:b1:19:dd:af:ff:d1:2f:0b:11:a7:89:55: 73:98:ff:13:3e:6e:0b:d2:70:69:0d:ea:86:85:a3: 59:07:57:bf:4f:74:5b:89:d9:d7:8d:a8:d3:a5:00: 9a:15:3c:d8:dd:9e:65:50:ca:83:c6:c6:15:ad:0f: c0:da:7a:63:25:a8:dd:73:e5:67:1e:be:a5:16:c7: 34:2a:19:2e:10:05:02:61:67:f9:77:ae:ba:88:47: 41:a8:9f:54:1a:8d:66:67:f4:6d:64:b6:c4:f6:f8: df:77:d0:d8:67:96:b3:3a:d6:65:f1:1c:85:51:b3: 28:c9:c4:b3:68:5f:6e:c3:df:98:de:c1:32:78:77: 92:eb:3d:2b:2d:30:3e:e5:45:d0:89:58:c6:b7:14: a1:f4:85:72:73:f6:70:5a:53:21:b7:9c:f1:72:09: a1:3e:ab:ac:79:d1:01:42:ce:24:5b:20:e2:86:d1: 3a:1e:59:72:b9:cc:df:ce:3c:75:3f:55:6b:07:7f: fa:e4:7b:34:05:38:f3:3e:3f:83:20:8e:7c:2c:80: 03:ca:d1:73:69:26:17:ab:bb:67:96:8b:5a:2b:1a: 42:67:8b:69:bb:5b:71:0e:bf:8f:92:be:c1:8e:c4: 2c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:40:5D:9D:89:F0:91:14:EC:ED:49:FB:4B:BE:4A:B2:F5:91:0E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab8f2bb-4f7c-321e-9e69-e8f036e9bb27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 69.136.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:ce:81:ae:f3:31:9e:c0:13:5b:da:5d:d1:a4:44:99:68:7f: 07:3c:d7:59:95:66:e0:ec:f6:21:69:d2:4c:08:e6:fa:f8:fb: 55:a2:f8:aa:a1:d7:8b:80:c0:9b:39:e0:1f:6e:90:ec:26:ed: 43:71:09:ac:4a:eb:57:8e:56:27:90:38:8d:3f:ee:dd:56:39: 8e:af:7e:65:64:15:dd:6d:1b:7b:b7:b1:83:39:3d:77:d6:9e: 2c:97:ad:20:58:d7:c8:ff:f7:13:d9:d6:11:30:eb:5f:b9:04: 9f:a0:62:87:5f:59:da:b5:89:68:8f:33:4c:c3:4e:4b:97:e0: 74:0f:86:57:20:74:ba:a4:94:ef:8b:15:35:cb:95:52:2f:4b: 5d:34:a1:e9:5f:d2:6e:8e:b6:d7:c2:81:36:01:9e:2b:f0:cb: e9:d1:f6:cf:aa:2e:62:ee:50:d6:a0:39:5e:27:0a:32:80:17: 1e:a2:a0:7c:a6:5b:80:8b:68:ee:04:07:60:6d:40:26:e6:3b: ac:a8:25:54:0f:f3:b7:7e:8e:c7:65:86:00:2c:e0:8b:54:b2: b7:5d:2a:9a:22:d3:4f:c6:c8:0e:75:02:98:10:36:74:49:66: 9c:08:a6:7b:85:e8:84:0d:09:19:5b:65:22:05:1e:b4:61:7d: a4:d6:5d:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMMR8oRDGlkyQu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODgwOGYwYmMtNDk1ZS00YTE0LWE4MzEtZGY3MDU4YmQzZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl414vNdnLbnqO0b2uaalYPKxGd2v/9EvCxGn iVVzmP8TPm4L0nBpDeqGhaNZB1e/T3RbidnXjajTpQCaFTzY3Z5lUMqDxsYVrQ/A 2npjJajdc+VnHr6lFsc0KhkuEAUCYWf5d666iEdBqJ9UGo1mZ/RtZLbE9vjfd9DY Z5azOtZl8RyFUbMoycSzaF9uw9+Y3sEyeHeS6z0rLTA+5UXQiVjGtxSh9IVyc/Zw WlMht5zxcgmhPqusedEBQs4kWyDihtE6Hllyuczfzjx1P1VrB3/65Hs0BTjzPj+D II58LIADytFzaSYXq7tnlotaKxpCZ4tpu1txDr+Pkr7BjsQsXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBAXZ2J8JEU7O1J+0u+SrL1kQ6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWFiOGYyYmItNGY3Yy0z MjFlLTllNjktZThmMDM2ZTliYjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRYiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMzOga7zMZ7AE1vaXdGkRJlofwc811mVZuDs9iFp0kwI5vr4+1Wi+Kqh 14uAwJs54B9ukOwm7UNxCaxK61eOVieQOI0/7t1WOY6vfmVkFd1tG3u3sYM5PXfW niyXrSBY18j/9xPZ1hEw61+5BJ+gYodfWdq1iWiPM0zDTkuX4HQPhlcgdLqklO+L FTXLlVIvS100oelf0m6OttfCgTYBnivwy+nR9s+qLmLuUNagOV4nCjKAFx6ioHym W4CLaO4EB2BtQCbmO6yoJVQP87d+jsdlhgAs4ItUsrddKpoi00/GyA51ApgQNnRJ ZpwIpnuF6IQNCRlbZSIFHrRhfaTWXfM= -----END CERTIFICATE-----Generated at Tue Jun 3 04:52:18 2025 by rpki-client