$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/424a3fc1-2440-35b5-ac94-379d42cb8002.roa File: 424a3fc1-2440-35b5-ac94-379d42cb8002.roa (raw, json) Hash identifier: a5ARL8vJciVCgaLwtH6NXyMjHEtMrRmRE+R9gxLNBUQ= Subject key identifier: 6E:18:D5:13:77:47:04:F9:22:E1:53:15:97:3A:F4:65:BE:B3:83:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0707662B1A3F72DB8A2500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/424a3fc1-2440-35b5-ac94-379d42cb8002.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 76.102.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:07:66:2b:1a:3f:72:db:8a:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=0b123c35-5bf5-400d-b615-aaa6af1fbf5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a7:62:32:25:6c:21:91:4d:ba:cc:43:e6:d3: 65:6d:2a:9f:ed:18:b9:67:97:85:cf:1c:77:36:b8: f6:2e:5f:e3:d2:f0:66:1c:7a:e9:13:5a:29:8c:08: c6:0c:7d:f4:ee:ab:49:01:93:83:ee:09:ce:11:ed: e1:dc:0d:e4:fa:20:16:ae:2e:a3:15:96:e9:09:23: ea:3b:48:28:ed:8c:d8:05:58:cd:7c:41:da:cb:e9: dd:0c:7a:49:e8:03:f7:14:d1:7a:f3:96:fc:be:dc: 9b:1e:f5:75:cf:84:b1:5a:f5:12:00:76:6c:00:76: 9a:3b:a8:de:68:bd:87:96:36:b7:ad:91:5e:04:e4: 61:62:0e:f3:9c:52:ac:9d:67:d1:33:56:f3:ee:91: 77:9b:20:b9:91:61:b2:6b:4d:89:2e:3c:b4:e2:30: 93:76:a0:5c:05:db:e5:af:8d:70:80:ab:18:39:9d: fd:fd:08:6f:d2:03:f5:1f:b6:7e:29:6e:5c:ba:49: 4f:1f:b0:47:0d:49:64:d6:65:d5:83:d6:ad:bb:2c: a0:82:a8:7e:ff:53:c9:97:72:d9:ac:0c:da:d9:5e: 4b:d5:ef:16:f8:f2:d4:29:b5:bb:ef:b3:15:66:47: a0:6b:2c:52:63:fe:b2:8a:66:bb:96:d6:64:26:11: 42:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:18:D5:13:77:47:04:F9:22:E1:53:15:97:3A:F4:65:BE:B3:83:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/424a3fc1-2440-35b5-ac94-379d42cb8002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.102.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4f:79:62:be:91:85:6d:de:05:21:f8:26:50:fd:8c:6a:3f: 70:42:67:3b:c3:35:fa:e8:77:bb:e4:42:86:3c:ad:2b:da:39: 5b:19:b0:07:dd:ca:40:b7:1c:b5:0d:16:c0:83:f2:84:86:03: 08:f6:d3:58:82:ad:f5:a8:1b:b7:9f:e9:37:35:3a:bb:83:09: 5b:72:d9:68:4b:a2:84:ca:cf:86:e7:9d:20:4b:ae:31:b8:20: 70:e3:a4:33:f1:c4:7c:4b:10:20:3a:12:07:db:01:1a:d4:4e: cb:9b:a1:1b:f7:95:77:64:db:5b:29:84:7a:35:aa:be:9c:93: 64:19:05:2d:f6:6e:68:4b:bf:de:bf:30:c4:7d:55:f7:08:0f: 80:5e:b3:e8:83:f3:ab:3a:e0:a8:04:08:01:c8:85:8e:f9:a8: 07:2a:37:34:b2:94:f4:76:3a:57:71:a8:39:cd:c9:7b:08:8a: 51:c2:64:ce:fb:c2:5c:3f:53:c7:a8:d9:25:f9:87:df:4a:a8: 18:35:d2:fa:60:fb:2e:69:25:19:c1:c2:6e:9c:a2:86:5e:4f: 2c:47:a5:a5:0e:6a:a1:81:74:3f:17:20:09:b0:cd:7f:d0:76: 6f:ea:0c:18:2e:e9:74:58:d0:3d:21:7c:82:85:49:75:9a:fc: 6c:3b:22:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBwdmKxo/ctuKJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MGIxMjNjMzUtNWJmNS00MDBkLWI2MTUtYWFhNmFmMWZiZjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqdiMiVsIZFNusxD5tNlbSqf7Ri5Z5eFzxx3 Nrj2Ll/j0vBmHHrpE1opjAjGDH307qtJAZOD7gnOEe3h3A3k+iAWri6jFZbpCSPq O0go7YzYBVjNfEHay+ndDHpJ6AP3FNF685b8vtybHvV1z4SxWvUSAHZsAHaaO6je aL2Hlja3rZFeBORhYg7znFKsnWfRM1bz7pF3myC5kWGya02JLjy04jCTdqBcBdvl r41wgKsYOZ39/Qhv0gP1H7Z+KW5cuklPH7BHDUlk1mXVg9atuyyggqh+/1PJl3LZ rAza2V5L1e8W+PLUKbW777MVZkegayxSY/6yima7ltZkJhFCdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4Y1RN3RwT5IuFTFZc69GW+s4PAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDI0YTNmYzEtMjQ0MC0z NWI1LWFjOTQtMzc5ZDQyY2I4MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTGZ2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZPeWK+kYVt3gUh+CZQ/YxqP3BCZzvDNfrod7vkQoY8rSvaOVsZsAfd ykC3HLUNFsCD8oSGAwj201iCrfWoG7ef6Tc1OruDCVty2WhLooTKz4bnnSBLrjG4 IHDjpDPxxHxLECA6EgfbARrUTsuboRv3lXdk21sphHo1qr6ck2QZBS32bmhLv96/ MMR9VfcID4Bes+iD86s64KgECAHIhY75qAcqNzSylPR2OldxqDnNyXsIilHCZM77 wlw/U8eo2SX5h99KqBg10vpg+y5pJRnBwm6cooZeTyxHpaUOaqGBdD8XIAmwzX/Q dm/qDBgu6XRY0D0hfIKFSXWa/Gw7IhA= -----END CERTIFICATE-----Generated at Tue Jun 3 07:19:24 2025 by rpki-client