$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42262a3e-a49e-3cd0-8861-76cae60f8435.roa File: 42262a3e-a49e-3cd0-8861-76cae60f8435.roa (raw, json) Hash identifier: YQFCHBCMpq7TjKofoyYpG3Hvjvsoi0AUXk5UkXD3CQo= Subject key identifier: 62:5C:22:A1:9C:CC:FE:61:6C:3E:AD:27:83:C9:32:2B:4B:5B:9C:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF7582B5A48DA2C4D7755F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42262a3e-a49e-3cd0-8861-76cae60f8435.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 33659 IP address blocks: 76.116.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:82:b5:a4:8d:a2:c4:d7:75:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=e44e3d4f-88d7-40e3-b63b-2ffdd11a25e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:24:58:6a:a5:0c:8f:1e:1b:bc:c9:51:51: 9f:cb:dc:69:62:0f:a2:60:31:af:a7:ce:98:17:65: 95:8d:d4:92:0c:d5:9d:58:6e:e2:e1:c1:c1:74:b1: 60:e4:d4:89:5b:38:72:23:50:bb:b3:46:67:51:fd: 67:37:9b:31:02:3c:df:48:c6:cf:d5:a0:4a:0b:53: 0c:3a:81:5f:8b:50:fb:15:35:69:b2:e0:d5:d3:be: 11:10:ab:d7:90:3c:c0:95:bf:85:b2:5c:05:db:23: 59:2a:e1:73:a4:71:54:11:48:a0:f6:b4:f5:1c:a5: 69:16:db:ca:e6:bb:2d:64:70:37:09:bf:48:05:b9: 85:33:3f:2d:ef:b6:70:17:31:e0:c4:f4:f8:4a:e4: d4:ba:44:a5:61:a2:99:75:f9:c2:bf:00:61:3d:da: 1c:c5:42:65:91:61:91:18:82:70:36:f7:6b:88:c1: 13:bf:5d:a1:14:9a:fd:40:fa:34:97:6b:d4:e7:0d: 57:3b:e1:60:85:be:c3:66:10:39:35:b2:31:3c:03: c7:cd:bb:e7:74:7d:46:49:9e:cd:d2:b3:d2:28:86: 22:16:0d:d8:9d:f7:fa:01:8d:dc:31:43:f8:23:0a: 6b:d4:17:ec:f1:a9:6d:1b:5d:cc:9f:31:ec:02:6a: bc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5C:22:A1:9C:CC:FE:61:6C:3E:AD:27:83:C9:32:2B:4B:5B:9C:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/42262a3e-a49e-3cd0-8861-76cae60f8435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.116.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:b6:99:ec:0a:59:ec:ce:4d:a8:33:12:8f:4f:13:89:44:6f: 99:cd:ee:46:7e:f1:ff:08:e3:ed:5a:bb:53:68:2e:b2:88:83: 07:9d:22:68:98:4b:27:49:3f:fa:7a:72:45:76:a0:c0:17:5f: 6c:97:4f:79:d6:17:30:53:57:2c:e2:01:16:4b:7b:67:15:4e: 68:7c:77:09:00:1a:57:92:9d:48:0c:63:ff:ef:1c:87:8d:7d: 09:d6:ec:54:dd:90:92:09:a8:0b:18:9b:c5:ba:9f:e6:c2:aa: 23:d0:46:49:11:ef:f9:12:8e:02:e8:61:3d:9c:01:55:02:56: 80:b7:5c:05:c7:ed:84:4b:5f:5a:eb:8d:ca:ba:79:2b:22:f6: d9:6d:cc:28:a3:13:d8:6f:9d:ff:f8:7c:0e:09:0d:35:d5:a2: de:d6:98:f1:e3:3f:c3:67:7a:9f:1a:d1:3a:ae:ab:dc:61:92: 3a:1d:c1:db:fa:14:ea:a0:fc:16:5d:b5:00:db:57:1f:37:b5: 31:8d:41:96:49:f6:15:38:96:fb:d3:4b:f0:9b:38:b1:5f:1c: 71:ec:25:9f:96:2c:c8:fb:c2:bf:3b:33:03:dc:1b:08:57:b2: 63:85:a1:75:9c:21:a0:7b:94:a3:d8:94:5b:d5:f1:cd:3c:14: 08:fe:95:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/dYK1pI2ixNd1XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk ZTQ0ZTNkNGYtODhkNy00MGUzLWI2M2ItMmZmZGQxMWEyNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT8kWGqlDI8eG7zJUVGfy9xpYg+iYDGvp86Y F2WVjdSSDNWdWG7i4cHBdLFg5NSJWzhyI1C7s0ZnUf1nN5sxAjzfSMbP1aBKC1MM OoFfi1D7FTVpsuDV074REKvXkDzAlb+FslwF2yNZKuFzpHFUEUig9rT1HKVpFtvK 5rstZHA3Cb9IBbmFMz8t77ZwFzHgxPT4SuTUukSlYaKZdfnCvwBhPdocxUJlkWGR GIJwNvdriMETv12hFJr9QPo0l2vU5w1XO+Fghb7DZhA5NbIxPAPHzbvndH1GSZ7N 0rPSKIYiFg3Ynff6AY3cMUP4Iwpr1Bfs8altG13MnzHsAmq81QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJcIqGczP5hbD6tJ4PJMitLW5yQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDIyNjJhM2UtYTQ5ZS0z Y2QwLTg4NjEtNzZjYWU2MGY4NDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHRCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG62mewKWezOTagzEo9PE4lEb5nN7kZ+8f8I4+1au1NoLrKIgwedImiY SydJP/p6ckV2oMAXX2yXT3nWFzBTVyziARZLe2cVTmh8dwkAGleSnUgMY//vHIeN fQnW7FTdkJIJqAsYm8W6n+bCqiPQRkkR7/kSjgLoYT2cAVUCVoC3XAXH7YRLX1rr jcq6eSsi9tltzCijE9hvnf/4fA4JDTXVot7WmPHjP8Nnep8a0Tquq9xhkjodwdv6 FOqg/BZdtQDbVx83tTGNQZZJ9hU4lvvTS/CbOLFfHHHsJZ+WLMj7wr87MwPcGwhX smOFoXWcIaB7lKPYlFvV8c08FAj+lWw= -----END CERTIFICATE-----Generated at Tue Jun 3 05:51:29 2025 by rpki-client