$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa74854-b122-3d3e-a59d-d5a2e00ece37.roa File: 3aa74854-b122-3d3e-a59d-d5a2e00ece37.roa (raw, json) Hash identifier: 36qNgBnvKp4hCw0SxxNQiYK3Ybg1mg+vlG1aWKIKW/g= Subject key identifier: 57:7B:E5:45:DA:5D:A8:FE:76:C3:E7:5D:84:CD:43:A9:78:6E:98:0B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FCDC71E596E3F3DDB6380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa74854-b122-3d3e-a59d-d5a2e00ece37.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 71.238.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:cd:c7:1e:59:6e:3f:3d:db:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=02f795de-66a6-4e25-a5af-a77a8742d1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ca:ae:c6:67:6f:18:28:ad:ed:e4:64:ab:52: 77:2e:c3:0b:7d:0c:d0:a5:69:c3:d4:a0:ef:67:37: 50:e0:4d:7a:9f:8c:9e:8c:b5:0d:ba:43:f2:b3:ba: 1a:14:c0:3c:a4:9e:61:e3:16:62:c7:69:85:22:85: 95:35:32:55:cf:33:aa:bc:d6:04:39:e3:52:2a:d5: 59:b9:21:1c:04:06:76:24:de:a5:a7:d2:1d:38:cf: 03:1b:e2:7e:e6:9c:14:bf:16:c1:94:87:53:ec:1f: 62:6c:73:59:c4:98:19:aa:64:ad:6f:82:ac:56:7b: 9d:c6:58:4a:26:32:90:34:9e:9d:70:89:e5:60:5a: cd:f3:ec:26:1a:75:a5:9c:87:48:5c:75:fb:87:98: a6:1e:86:6b:60:22:93:5b:12:a2:51:d3:d0:97:ad: 05:80:39:75:9e:c7:47:7d:d8:14:96:47:d3:ac:4d: f7:0a:99:7e:91:60:8f:e3:bf:6e:be:9b:90:f2:b9: b1:8a:f9:6c:ac:f6:d4:5d:4a:0d:6f:94:66:6c:0b: a9:81:d1:f2:e4:3b:75:d8:89:07:35:36:c9:30:10: 1e:62:04:99:be:d7:87:f6:f0:5b:a4:40:1a:b9:24: 60:84:fe:7a:28:b0:36:9a:d7:bb:04:94:ce:12:76: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7B:E5:45:DA:5D:A8:FE:76:C3:E7:5D:84:CD:43:A9:78:6E:98:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3aa74854-b122-3d3e-a59d-d5a2e00ece37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.238.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:36:93:53:b1:d7:ed:77:a9:37:a6:4f:80:d0:fb:78:df:9c: 34:dd:f5:f2:ea:1d:29:bf:ee:fe:0a:85:26:63:ee:a8:bd:7c: 43:71:2c:6c:0b:8d:81:22:e2:43:f5:b2:df:a5:0b:18:fb:51: 2c:0a:e1:e1:c0:a7:3a:8e:e0:60:de:46:45:d3:0d:a2:e3:f4: 6d:db:b2:f1:b2:18:d1:12:27:21:e8:f1:a2:99:07:09:d0:d8: 72:85:6f:da:e2:03:6c:96:8a:80:df:c0:02:55:c7:97:39:86: 46:8a:46:4f:5b:67:ae:05:c5:0e:eb:16:be:94:92:77:ef:51: 66:2e:ff:ff:2b:ea:54:72:c2:3d:2d:a1:ee:6f:a0:08:da:fc: 9b:98:7c:d4:9a:f5:ae:70:15:67:6e:52:d3:e0:89:2e:fc:48: 0c:17:06:60:37:ef:ba:77:80:98:98:5e:1f:49:aa:09:ed:7f: 8d:3c:a9:4e:56:0d:3a:b2:61:4e:72:e3:7a:3d:58:9c:5b:e7: a7:d6:77:b3:d6:0a:57:02:ef:41:d9:71:47:8a:25:9f:30:74: 14:e1:d5:8e:52:3c:c5:c9:39:ec:be:0d:7a:6f:97:a5:1a:71: 58:7f:f3:69:3e:d9:66:66:9c:e6:8d:e7:b2:66:09:20:6b:f1: 0b:de:de:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL83HHlluPz3bY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MDJmNzk1ZGUtNjZhNi00ZTI1LWE1YWYtYTc3YTg3NDJkMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8quxmdvGCit7eRkq1J3LsMLfQzQpWnD1KDv ZzdQ4E16n4yejLUNukPys7oaFMA8pJ5h4xZix2mFIoWVNTJVzzOqvNYEOeNSKtVZ uSEcBAZ2JN6lp9IdOM8DG+J+5pwUvxbBlIdT7B9ibHNZxJgZqmStb4KsVnudxlhK JjKQNJ6dcInlYFrN8+wmGnWlnIdIXHX7h5imHoZrYCKTWxKiUdPQl60FgDl1nsdH fdgUlkfTrE33Cpl+kWCP479uvpuQ8rmxivlsrPbUXUoNb5RmbAupgdHy5Dt12IkH NTbJMBAeYgSZvteH9vBbpEAauSRghP56KLA2mte7BJTOEnbZoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFd75UXaXaj+dsPnXYTNQ6l4bpgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2FhNzQ4NTQtYjEyMi0z ZDNlLWE1OWQtZDVhMmUwMGVjZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU2k1Ox1+13qTemT4DQ+3jfnDTd9fLqHSm/7v4KhSZj7qi9fENxLGwL jYEi4kP1st+lCxj7USwK4eHApzqO4GDeRkXTDaLj9G3bsvGyGNESJyHo8aKZBwnQ 2HKFb9riA2yWioDfwAJVx5c5hkaKRk9bZ64FxQ7rFr6UknfvUWYu//8r6lRywj0t oe5voAja/JuYfNSa9a5wFWduUtPgiS78SAwXBmA377p3gJiYXh9Jqgntf408qU5W DTqyYU5y43o9WJxb56fWd7PWClcC70HZcUeKJZ8wdBTh1Y5SPMXJOey+DXpvl6Ua cVh/82k+2WZmnOaN57JmCSBr8Qve3mg= -----END CERTIFICATE-----Generated at Wed Jun 4 23:13:16 2025 by rpki-client