$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c911502-0f4a-38a5-9a83-1221e299b538.roa File: 4c911502-0f4a-38a5-9a83-1221e299b538.roa (raw, json) Hash identifier: qJqTKOCUHgEOEPs3ShNjxNpVBvKLS/W5YvQ9g3SFz6A= Subject key identifier: B2:C8:6E:ED:A8:78:78:1D:10:A0:90:A0:F5:E1:A3:7B:1C:52:86:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43228B5F08BA4BA86CCED80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c911502-0f4a-38a5-9a83-1221e299b538.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 76.20.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:28:b5:f0:8b:a4:ba:86:cc:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=33f1b2d3-5090-4095-9719-f4bc0a647997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:27:d4:33:23:19:be:dc:2e:90:aa:ef:bf:aa: c7:ff:71:2c:e3:a0:b0:f7:a5:e9:22:c5:d1:da:76: ca:ea:64:88:62:aa:26:fb:eb:2c:60:da:48:96:29: 80:b5:29:10:2c:c0:c4:5d:24:f6:ea:d8:bf:fd:bc: 7d:df:c1:49:a4:ef:f7:85:40:58:23:47:4e:b2:81: af:44:61:2f:2e:2f:ea:2e:8f:12:d7:95:9f:78:58: 2f:7b:4a:f2:86:fe:3d:2b:d6:84:ff:d9:6c:8a:73: 1f:96:a5:22:2e:ab:0a:fb:79:ea:60:54:48:a1:8a: de:b5:53:20:3a:5d:cc:96:7d:5c:b8:4e:1d:77:ca: 60:50:09:d8:30:62:d1:24:97:3c:11:73:4f:96:a3: 6c:cd:6f:95:f2:9f:e1:f6:af:80:6f:63:fa:bc:b9: 01:19:cf:1e:32:0d:6e:b5:a5:c2:01:73:f1:3b:69: b3:5e:a4:01:29:1d:19:49:5d:6d:46:2e:04:58:49: 5b:af:77:a1:e2:fb:88:53:c1:0f:b2:be:45:83:31: a6:31:f5:7d:5c:cc:f7:32:ac:25:57:86:6a:40:6e: 21:47:3f:66:f0:f0:1b:bc:17:40:e2:9e:ee:4b:35: 26:82:64:fd:b6:ce:52:e4:46:76:97:e6:4d:5b:be: 7b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C8:6E:ED:A8:78:78:1D:10:A0:90:A0:F5:E1:A3:7B:1C:52:86:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c911502-0f4a-38a5-9a83-1221e299b538.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.20.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:74:80:62:3f:fa:88:5e:e2:b2:b6:d2:fe:07:20:0d:1c:8f: 66:c1:00:ce:8e:24:60:12:3a:5a:5d:6a:69:b2:85:bb:59:45: f9:19:fc:8d:ca:50:d3:74:2e:0e:e9:93:0b:ec:bd:9a:36:18: 6b:1f:11:42:ea:25:be:8d:0f:de:c1:81:b6:f9:26:f5:1e:c5: ee:09:9b:44:14:61:68:d1:b5:54:24:5b:f3:b2:0b:5a:49:dd: 6e:89:0c:f3:ec:87:9c:e9:28:0b:69:51:ab:50:04:2a:2a:9a: 72:ec:24:33:b0:09:2e:4e:63:02:dd:77:fd:41:6f:7b:2b:a5: e6:18:00:ee:d5:e7:7b:51:63:cd:e5:4a:97:de:5e:c8:39:66: 6b:0d:2f:c9:f7:29:5d:40:82:99:f1:78:26:f9:3c:68:50:89: d9:ba:51:01:f2:21:31:b8:1b:56:f6:ce:fb:c8:d5:98:1c:0b: b0:ca:99:2b:9c:eb:9b:c2:60:e6:54:dc:27:5b:bf:b4:1b:d2: 26:a6:ae:86:c5:63:66:bb:f2:bf:cb:da:6a:bd:ee:90:19:49: a6:a5:d4:c4:48:31:e1:9d:d6:90:23:f2:64:4e:fe:e3:56:99: 4b:8e:c2:ef:5c:a5:ce:ec:07:6d:58:2c:8a:2a:01:03:25:40: be:45:52:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMii18IukuobM7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk MzNmMWIyZDMtNTA5MC00MDk1LTk3MTktZjRiYzBhNjQ3OTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SfUMyMZvtwukKrvv6rH/3Es46Cw96XpIsXR 2nbK6mSIYqom++ssYNpIlimAtSkQLMDEXST26ti//bx938FJpO/3hUBYI0dOsoGv RGEvLi/qLo8S15WfeFgve0ryhv49K9aE/9lsinMflqUiLqsK+3nqYFRIoYretVMg Ol3Mln1cuE4dd8pgUAnYMGLRJJc8EXNPlqNszW+V8p/h9q+Ab2P6vLkBGc8eMg1u taXCAXPxO2mzXqQBKR0ZSV1tRi4EWElbr3eh4vuIU8EPsr5FgzGmMfV9XMz3Mqwl V4ZqQG4hRz9m8PAbvBdA4p7uSzUmgmT9ts5S5EZ2l+ZNW757RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLIbu2oeHgdEKCQoPXho3scUoZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGM5MTE1MDItMGY0YS0z OGE1LTlhODMtMTIyMWUyOTliNTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh0gGI/+ohe4rK20v4HIA0cj2bBAM6OJGASOlpdammyhbtZRfkZ/I3K UNN0Lg7pkwvsvZo2GGsfEULqJb6ND97Bgbb5JvUexe4Jm0QUYWjRtVQkW/OyC1pJ 3W6JDPPsh5zpKAtpUatQBCoqmnLsJDOwCS5OYwLdd/1Bb3srpeYYAO7V53tRY83l SpfeXsg5ZmsNL8n3KV1AgpnxeCb5PGhQidm6UQHyITG4G1b2zvvI1ZgcC7DKmSuc 65vCYOZU3Cdbv7Qb0iamrobFY2a78r/L2mq97pAZSaal1MRIMeGd1pAj8mRO/uNW mUuOwu9cpc7sB21YLIoqAQMlQL5FUsU= -----END CERTIFICATE-----Generated at Tue Jun 3 07:24:39 2025 by rpki-client