$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b3117fe-d81c-399e-8b45-f4b1ea3ad1d0.roa File: 2b3117fe-d81c-399e-8b45-f4b1ea3ad1d0.roa (raw, json) Hash identifier: uL6CCX5MN6+tsG+bHVDbT0xvBg/qv8Fg4OUVQsp9yi8= Subject key identifier: 1F:C2:44:2C:8E:55:57:EB:3A:F1:77:CB:0E:05:D6:DF:75:79:77:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FF13B848C65F0F3CE42C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b3117fe-d81c-399e-8b45-f4b1ea3ad1d0.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 76.144.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:f1:3b:84:8c:65:f0:f3:ce:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=70d906f2-73a0-43f8-b8e5-4d768a31dd99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d2:59:ed:5f:3c:1f:1b:f4:0b:5a:1a:58:49: 81:4c:de:a9:3e:22:1a:2a:ab:42:63:8c:71:8b:ca: 48:30:ff:69:67:3a:cf:ab:9c:4e:b6:8e:b6:88:6d: 40:17:09:f9:e2:3e:4d:8c:23:0f:b5:2e:60:58:d4: e8:d7:16:2f:73:4c:85:a1:44:5d:dd:3a:28:75:e5: b1:c4:77:51:be:58:2d:72:26:f7:57:9a:9a:ca:a2: 79:b2:60:fd:4d:5c:17:04:23:a5:09:8e:f7:73:6a: 14:49:79:69:8b:83:13:31:ec:16:15:63:69:71:65: 93:ad:93:e9:12:93:ee:37:0c:d8:65:f6:90:3a:71: 26:89:24:89:76:1b:be:e4:29:59:84:b7:3c:4f:20: 99:4f:b2:9b:f0:c7:c8:98:4f:9d:4f:5f:af:42:ad: c6:7f:58:07:9e:ee:64:07:4d:d4:90:59:db:eb:f4: 50:83:30:3a:cc:e9:22:27:92:88:01:bc:43:05:34: ee:9e:a0:bc:ca:f5:38:02:8e:5e:5a:0e:16:ff:66: b3:91:73:0d:86:23:dc:3f:6a:80:f7:36:52:63:16: e2:d2:35:84:cc:96:a6:06:81:5f:0d:cf:9b:57:c0: 3b:ce:c9:f7:a9:85:f2:5f:57:96:d1:2d:2d:2b:13: 95:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C2:44:2C:8E:55:57:EB:3A:F1:77:CB:0E:05:D6:DF:75:79:77:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b3117fe-d81c-399e-8b45-f4b1ea3ad1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.144.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b1:a5:95:e5:08:e4:18:f8:0e:c7:03:94:8e:ac:2a:06:b8: fa:dc:f9:92:fe:0c:9a:a1:04:f3:24:5c:95:68:f9:c8:73:18: a7:5e:3c:43:0e:e4:c9:89:37:6e:be:12:4e:30:b4:d4:34:94: 33:23:50:3b:a1:5e:29:70:b0:64:45:7a:0c:5c:08:2e:73:44: b6:34:33:6b:62:93:9b:f0:72:0b:d1:98:58:33:86:85:47:27: c7:c0:bf:a6:08:a2:dd:27:9e:a2:bf:c4:36:2b:f0:d3:ec:e3: f8:fc:e1:de:ac:33:3d:71:c5:ed:2a:58:df:0d:c0:ca:5e:49: 4a:86:01:8a:aa:11:d8:47:da:47:9b:bc:33:30:c8:b4:4a:5f: 69:6f:bf:3a:2c:6d:1a:5d:8f:c6:06:14:92:cc:cd:bd:cb:3f: 04:b3:24:5d:1d:9f:cd:63:78:42:b4:df:6f:b8:b5:ea:f4:1c: 22:5c:21:27:94:0d:e3:e0:83:e0:f0:be:55:08:ea:21:40:5d: 95:7e:fd:b3:b8:7e:eb:05:5d:01:77:a1:3f:d0:a5:19:be:9e: 50:46:de:eb:b6:7e:c1:ce:43:b4:9c:15:03:ef:c3:b1:5e:62: 07:43:d0:00:29:cd:af:60:c4:95:fb:31:6a:0d:d2:cd:fd:96: d4:c6:24:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL/E7hIxl8PPOQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NzBkOTA2ZjItNzNhMC00M2Y4LWI4ZTUtNGQ3NjhhMzFkZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtJZ7V88Hxv0C1oaWEmBTN6pPiIaKqtCY4xx i8pIMP9pZzrPq5xOto62iG1AFwn54j5NjCMPtS5gWNTo1xYvc0yFoURd3ToodeWx xHdRvlgtcib3V5qayqJ5smD9TVwXBCOlCY73c2oUSXlpi4MTMewWFWNpcWWTrZPp EpPuNwzYZfaQOnEmiSSJdhu+5ClZhLc8TyCZT7Kb8MfImE+dT1+vQq3Gf1gHnu5k B03UkFnb6/RQgzA6zOkiJ5KIAbxDBTTunqC8yvU4Ao5eWg4W/2azkXMNhiPcP2qA 9zZSYxbi0jWEzJamBoFfDc+bV8A7zsn3qYXyX1eW0S0tKxOVOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/CRCyOVVfrOvF3yw4F1t91eXfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmIzMTE3ZmUtZDgxYy0z OTllLThiNDUtZjRiMWVhM2FkMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISxpZXlCOQY+A7HA5SOrCoGuPrc+ZL+DJqhBPMkXJVo+chzGKdePEMO 5MmJN26+Ek4wtNQ0lDMjUDuhXilwsGRFegxcCC5zRLY0M2tik5vwcgvRmFgzhoVH J8fAv6YIot0nnqK/xDYr8NPs4/j84d6sMz1xxe0qWN8NwMpeSUqGAYqqEdhH2keb vDMwyLRKX2lvvzosbRpdj8YGFJLMzb3LPwSzJF0dn81jeEK032+4ter0HCJcISeU DePgg+DwvlUI6iFAXZV+/bO4fusFXQF3oT/QpRm+nlBG3uu2fsHOQ7ScFQPvw7Fe YgdD0AApza9gxJX7MWoN0s39ltTGJFw= -----END CERTIFICATE-----Generated at Tue Jun 3 04:48:36 2025 by rpki-client