$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d15915-a7d8-3a1e-84d4-01c11b2314d0.roa File: 20d15915-a7d8-3a1e-84d4-01c11b2314d0.roa (raw, json) Hash identifier: qf/cLmQzsV6j4DebUX9Mgdrn8rZtqPVC63vEUY+P5Vo= Subject key identifier: 7A:6E:F2:53:43:68:C0:E2:7F:95:9E:48:5D:DC:97:B5:1D:28:8F:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF75E90F0A92DC03F55C6200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d15915-a7d8-3a1e-84d4-01c11b2314d0.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 33659 IP address blocks: 76.116.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:e9:0f:0a:92:dc:03:f5:5c:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=1a87ff80-e093-4473-9d17-952f16ac98ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:dc:df:18:de:4a:0e:b7:fd:e0:a4:bb:df: 62:1b:b7:6c:4f:93:27:a7:a3:c6:a5:24:4b:44:84: 3d:33:c2:43:0f:10:2b:c4:53:a8:3b:eb:e2:5b:a6: 5c:0f:46:37:46:61:ea:6c:ee:0e:b2:93:6b:30:d7: 61:a3:c1:ec:46:6d:d9:8d:5f:f9:7b:36:02:40:37: b6:5c:d4:bd:ba:44:c7:99:4b:a1:46:c3:e7:ad:bf: d6:82:29:db:a0:ea:29:ba:b1:4d:54:2f:de:f8:6b: 0e:ef:2f:24:a4:98:1d:5d:77:43:df:58:85:5d:de: a5:6a:c6:1e:9a:a6:03:e4:e2:c6:54:86:1e:b2:eb: 35:88:c4:d3:df:12:81:f5:bd:89:a0:36:6e:5a:ce: 88:de:a1:6d:fa:4a:08:04:71:37:d2:cd:8e:47:58: 17:6f:12:7f:4e:cd:86:3e:ec:03:e2:27:37:08:c8: 1a:76:fa:b7:d0:82:0e:fc:07:fe:48:9e:97:f0:40: db:3b:53:f6:d0:77:63:db:e2:b7:e7:8a:8c:66:79: f9:4c:32:43:12:64:6f:11:d6:4d:7d:68:76:ed:0a: 57:66:89:e6:7c:21:45:37:52:b9:47:2c:e2:fa:66: f6:59:c4:8d:e2:b2:e6:40:78:33:d0:cf:cf:12:be: 5b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6E:F2:53:43:68:C0:E2:7F:95:9E:48:5D:DC:97:B5:1D:28:8F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20d15915-a7d8-3a1e-84d4-01c11b2314d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.116.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:1d:aa:8a:34:27:2e:5f:e8:80:64:98:83:e0:7e:89:b7:57: d6:19:84:44:b7:03:aa:61:7a:46:c8:25:e6:32:06:da:4b:04: f9:87:e1:92:bc:11:2a:a4:4d:e8:e2:94:29:0a:75:8b:8d:b4: 44:42:af:62:42:d0:dd:9e:ff:c6:31:af:f0:10:c1:26:13:17: 02:07:ac:94:41:dd:c6:4c:26:79:2b:ea:52:c5:29:a4:ed:b9: 48:d3:29:c6:8e:48:ee:e5:45:48:ee:ff:d3:d2:ee:c1:84:fa: e7:20:53:44:5f:11:7f:7c:3e:08:ae:69:09:df:4a:ea:71:ee: 24:1f:69:24:40:65:53:ca:e0:5f:bc:cd:71:bf:21:b7:19:7d: 5c:c2:ee:f1:4a:fe:cc:8e:75:20:de:26:38:2a:79:ab:19:ea: bf:a1:7b:69:bd:b4:3d:95:99:c1:c5:e1:4b:8f:66:ab:05:f2: c2:03:1a:25:26:de:89:3d:a6:fe:de:36:93:1b:00:4f:2f:58: 44:8a:09:52:a1:8e:b9:f6:25:99:96:86:2b:b8:7d:cc:ff:7d: 9e:b8:50:58:00:95:7b:b6:11:40:5d:c9:94:fa:87:48:ce:6e: d9:bb:a8:36:d8:0b:52:ee:cf:9a:f1:59:0f:ec:02:c5:cf:3b: c6:38:d5:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dekPCpLcA/VcYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk MWE4N2ZmODAtZTA5My00NDczLTlkMTctOTUyZjE2YWM5OGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxLc3xjeSg63/eCku99iG7dsT5Mnp6PGpSRL RIQ9M8JDDxArxFOoO+viW6ZcD0Y3RmHqbO4OspNrMNdho8HsRm3ZjV/5ezYCQDe2 XNS9ukTHmUuhRsPnrb/WginboOopurFNVC/e+GsO7y8kpJgdXXdD31iFXd6lasYe mqYD5OLGVIYesus1iMTT3xKB9b2JoDZuWs6I3qFt+koIBHE30s2OR1gXbxJ/Ts2G PuwD4ic3CMgadvq30IIO/Af+SJ6X8EDbO1P20Hdj2+K354qMZnn5TDJDEmRvEdZN fWh27QpXZonmfCFFN1K5Ryzi+mb2WcSN4rLmQHgz0M/PEr5bqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpu8lNDaMDif5WeSF3cl7UdKI8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBkMTU5MTUtYTdkOC0z YTFlLTg0ZDQtMDFjMTFiMjMxNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTHSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUdqoo0Jy5f6IBkmIPgfom3V9YZhES3A6phekbIJeYyBtpLBPmH4ZK8 ESqkTejilCkKdYuNtERCr2JC0N2e/8Yxr/AQwSYTFwIHrJRB3cZMJnkr6lLFKaTt uUjTKcaOSO7lRUju/9PS7sGE+ucgU0RfEX98PgiuaQnfSupx7iQfaSRAZVPK4F+8 zXG/IbcZfVzC7vFK/syOdSDeJjgqeasZ6r+he2m9tD2VmcHF4UuPZqsF8sIDGiUm 3ok9pv7eNpMbAE8vWESKCVKhjrn2JZmWhiu4fcz/fZ64UFgAlXu2EUBdyZT6h0jO btm7qDbYC1Luz5rxWQ/sAsXPO8Y41dQ= -----END CERTIFICATE-----Generated at Tue Jun 3 04:53:17 2025 by rpki-client