$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fd0a01c-92ec-3b80-b21f-17704ef28c27.roa File: 3fd0a01c-92ec-3b80-b21f-17704ef28c27.roa (raw, json) Hash identifier: Td4z9SjhP3CDmrJsrJVk3rFBsLjhmQKZSzjfnQ4ibKs= Subject key identifier: 46:78:43:4D:F3:F3:8B:75:80:69:58:42:10:E8:15:FB:0A:3B:DC:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43154ADE5F8B3B4FC5E6C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fd0a01c-92ec-3b80-b21f-17704ef28c27.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 76.138.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:54:ad:e5:f8:b3:b4:fc:5e:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=8536a365-e456-42f7-aefd-bfed4aef7a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:33:c4:60:74:d9:f0:c9:a6:35:9f:57:9d: 4c:41:bd:0a:42:fe:3e:88:84:4e:76:96:59:36:64: 6b:0b:0c:21:e0:fc:9f:3b:82:7c:26:cd:e1:db:c3: 2a:5b:ca:1c:80:cc:63:14:05:9d:b0:80:b1:77:93: 23:59:ea:32:f1:38:a9:25:59:49:ff:d5:bd:2d:05: de:6e:ba:87:f2:4e:b9:17:10:c8:31:3e:08:c2:f0: 9e:31:72:66:fe:4f:63:14:7a:2c:93:cc:ec:84:9e: b8:76:f5:de:45:1f:a7:84:42:0d:c9:f0:24:68:ea: 73:61:7e:6c:13:9f:a0:0c:a1:c1:51:75:75:9a:a8: 5b:b7:b6:b9:11:f6:b4:5f:6f:7b:78:51:88:53:44: ef:2e:f2:53:db:5f:a0:e2:26:7b:88:4b:3e:9a:2f: 6b:e4:7f:14:42:eb:62:b9:eb:17:47:1b:0f:70:93: cf:85:ae:14:c3:cb:73:78:0f:f5:9e:0f:17:d4:6c: d3:d8:6f:77:41:9f:8d:61:ea:c1:0e:17:80:4f:b4: 8c:2a:0a:ea:1d:d9:58:cc:d0:68:cb:da:4a:d5:c9: 0b:67:eb:44:a3:d6:4f:cc:5c:59:04:ee:bf:34:97: e3:7f:4f:ee:ef:1e:63:46:0b:63:12:fb:77:81:ba: e8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:78:43:4D:F3:F3:8B:75:80:69:58:42:10:E8:15:FB:0A:3B:DC:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3fd0a01c-92ec-3b80-b21f-17704ef28c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.138.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:57:e3:86:c6:96:48:c0:28:48:88:8c:15:59:34:95:2e:21: e9:89:ac:9f:92:a2:f4:03:3d:be:68:94:d0:51:12:ea:33:88: df:a2:25:a9:4e:95:62:76:f9:2f:43:f9:1b:de:14:60:84:5b: 47:89:fb:ae:35:75:91:a2:e1:c1:a4:4f:61:40:30:e2:1e:f7: 0d:ea:e0:93:6a:d9:05:22:a6:5d:fb:a9:d7:11:39:89:5d:4a: fe:a6:1f:31:da:60:af:b5:fd:2a:c2:f4:16:de:e4:e7:ce:55: fd:79:26:68:02:6e:96:59:1f:b5:f3:39:af:eb:f1:62:2d:16: 61:2e:a1:76:df:b5:0d:3a:d4:43:c1:92:d9:f9:51:e3:87:d4: a6:ea:25:cb:b1:5a:53:5d:01:1b:c5:01:c7:46:4a:b3:54:ba: 48:d2:1e:82:1e:af:b4:e0:73:a9:43:ec:2c:9c:a3:de:88:f6: 72:c2:24:b3:07:c8:38:05:ed:58:75:39:99:77:ca:e6:25:e0: 67:f6:d7:a5:13:43:88:92:34:45:26:38:d1:f3:69:32:1d:0d: ac:7e:61:82:f5:c6:d5:73:f2:90:75:0f:a2:b3:64:d5:dc:f3: 3d:c1:c0:da:c3:72:5f:16:8b:cc:e0:54:96:fc:d4:93:f6:f4: 23:a5:6d:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMVSt5fiztPxebIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODUzNmEzNjUtZTQ1Ni00MmY3LWFlZmQtYmZlZDRhZWY3YTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgQzxGB02fDJpjWfV51MQb0KQv4+iIROdpZZ NmRrCwwh4PyfO4J8Js3h28MqW8ocgMxjFAWdsICxd5MjWeoy8TipJVlJ/9W9LQXe brqH8k65FxDIMT4IwvCeMXJm/k9jFHosk8zshJ64dvXeRR+nhEINyfAkaOpzYX5s E5+gDKHBUXV1mqhbt7a5Efa0X297eFGIU0TvLvJT21+g4iZ7iEs+mi9r5H8UQuti uesXRxsPcJPPha4Uw8tzeA/1ng8X1GzT2G93QZ+NYerBDheAT7SMKgrqHdlYzNBo y9pK1ckLZ+tEo9ZPzFxZBO6/NJfjf0/u7x5jRgtjEvt3gbroiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZ4Q03z84t1gGlYQhDoFfsKO9xhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2ZkMGEwMWMtOTJlYy0z YjgwLWIyMWYtMTc3MDRlZjI4YzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTIqUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFX44bGlkjAKEiIjBVZNJUuIemJrJ+SovQDPb5olNBREuoziN+iJalO lWJ2+S9D+RveFGCEW0eJ+641dZGi4cGkT2FAMOIe9w3q4JNq2QUipl37qdcROYld Sv6mHzHaYK+1/SrC9Bbe5OfOVf15JmgCbpZZH7XzOa/r8WItFmEuoXbftQ061EPB ktn5UeOH1KbqJcuxWlNdARvFAcdGSrNUukjSHoIer7Tgc6lD7Cyco96I9nLCJLMH yDgF7Vh1OZl3yuYl4Gf216UTQ4iSNEUmONHzaTIdDax+YYL1xtVz8pB1D6KzZNXc 8z3BwNrDcl8Wi8zgVJb81JP29COlbZA= -----END CERTIFICATE-----Generated at Tue Jun 3 04:57:51 2025 by rpki-client