$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/504a4234-cb38-3121-914a-556e5789e3f2.roa File: 504a4234-cb38-3121-914a-556e5789e3f2.roa (raw, json) Hash identifier: j/HTX7kOigXyxatQvD2Emrlo+9iHwnVo6Qiebqvv7rY= Subject key identifier: 8D:B7:FE:05:E1:8C:6F:EC:1C:01:9D:62:9C:D8:8F:5E:02:28:7C:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06A8D0AB76A4211F5A26C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/504a4234-cb38-3121-914a-556e5789e3f2.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 76.29.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:a8:d0:ab:76:a4:21:1f:5a:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=3a5d3a18-ff56-4ecb-bfca-39f2f4145a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:d9:bb:b0:18:24:b0:71:e8:5f:74:63:95: 59:a2:da:30:7d:36:71:d2:5c:43:2a:cd:e8:b3:a2: 4c:56:97:0b:c8:33:ed:ba:9d:d6:85:eb:95:39:c4: 39:d1:7e:b1:33:35:be:7c:d0:e6:84:8e:97:ac:86: 23:ec:bc:a5:c3:29:3e:3e:9b:df:78:8a:35:74:a6: c9:cf:36:df:05:fe:7e:a4:b3:b9:16:d8:f6:5b:5a: db:82:8b:73:5c:87:f0:03:5c:8e:8e:df:1a:4e:6b: e0:ba:13:f7:64:54:b0:73:59:74:6c:36:f6:cc:9b: 34:b1:a9:07:3b:9c:5e:d8:62:b0:cf:87:6e:7d:28: c3:0a:7f:fc:61:7e:5a:2a:87:f5:a5:79:6c:62:6c: 3b:00:da:0a:d5:47:25:32:a9:b6:49:90:f7:ce:c4: 6b:55:8a:83:7a:c1:f1:21:34:ba:8b:71:fe:cc:8f: 96:fb:ef:f0:19:33:3c:23:d8:ae:c7:76:4b:06:f8: 9a:a3:7b:5d:81:ae:fc:ee:e1:40:1c:47:66:7b:5f: 78:2f:3c:04:a6:40:47:65:92:18:78:b1:69:2d:1c: 75:ab:ce:c9:0d:4a:50:db:b8:c7:57:74:5e:8e:82: fd:00:82:9b:32:5a:5b:08:20:c8:05:0e:d6:fb:93: 49:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B7:FE:05:E1:8C:6F:EC:1C:01:9D:62:9C:D8:8F:5E:02:28:7C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/504a4234-cb38-3121-914a-556e5789e3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.29.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:eb:e5:84:9b:e1:80:f4:52:a6:07:bf:91:80:65:93:76:07: ec:1a:a8:f6:99:c1:3e:11:86:5f:87:5b:38:fa:7e:35:eb:2a: 69:02:03:a1:7f:68:9c:ac:98:3e:66:c6:45:8b:42:2f:51:9e: 32:e6:32:1a:ca:2b:cc:58:1a:b9:20:21:7a:f0:10:31:69:8a: 52:20:cb:b5:a9:40:27:34:49:4e:76:af:5c:a8:4c:2f:be:e5: 2f:e7:57:b4:a0:be:7d:fe:57:d0:e6:90:65:be:f4:36:59:ab: 50:ef:65:2a:c6:55:0e:e2:2e:53:65:2e:19:4b:d3:95:8e:56: fd:d0:5f:4b:54:86:3e:d8:8c:f0:22:55:68:1e:66:1c:c7:49: 5c:c0:04:68:09:4c:e5:27:48:9d:82:68:93:2f:6b:c8:9f:a9: 52:87:5d:0b:ca:5b:c4:a9:5b:95:31:21:af:b0:be:9a:38:99: 18:91:e0:08:22:2f:07:41:cd:21:25:76:a5:5d:1e:4f:e0:dd: 09:58:30:1f:6c:25:47:c2:28:a1:9b:0d:69:6a:b3:c1:97:0b: 22:71:cc:6b:a6:29:a0:10:84:b1:db:f7:02:0d:90:2c:96:d1: 14:be:b4:ac:38:6d:72:76:da:08:88:cd:9a:16:04:f4:52:c6: 9b:87:61:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBqjQq3akIR9aJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk M2E1ZDNhMTgtZmY1Ni00ZWNiLWJmY2EtMzlmMmY0MTQ1YTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkLZu7AYJLBx6F90Y5VZotowfTZx0lxDKs3o s6JMVpcLyDPtup3WheuVOcQ50X6xMzW+fNDmhI6XrIYj7Lylwyk+PpvfeIo1dKbJ zzbfBf5+pLO5Ftj2W1rbgotzXIfwA1yOjt8aTmvguhP3ZFSwc1l0bDb2zJs0sakH O5xe2GKwz4dufSjDCn/8YX5aKof1pXlsYmw7ANoK1UclMqm2SZD3zsRrVYqDesHx ITS6i3H+zI+W++/wGTM8I9iux3ZLBviao3tdga787uFAHEdme194LzwEpkBHZZIY eLFpLRx1q87JDUpQ27jHV3RejoL9AIKbMlpbCCDIBQ7W+5NJxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI23/gXhjG/sHAGdYpzYj14CKHxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTA0YTQyMzQtY2IzOC0z MTIxLTkxNGEtNTU2ZTU3ODllM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTB1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7r5YSb4YD0UqYHv5GAZZN2B+waqPaZwT4Rhl+HWzj6fjXrKmkCA6F/ aJysmD5mxkWLQi9RnjLmMhrKK8xYGrkgIXrwEDFpilIgy7WpQCc0SU52r1yoTC++ 5S/nV7Sgvn3+V9DmkGW+9DZZq1DvZSrGVQ7iLlNlLhlL05WOVv3QX0tUhj7YjPAi VWgeZhzHSVzABGgJTOUnSJ2CaJMva8ifqVKHXQvKW8SpW5UxIa+wvpo4mRiR4Agi LwdBzSEldqVdHk/g3QlYMB9sJUfCKKGbDWlqs8GXCyJxzGumKaAQhLHb9wINkCyW 0RS+tKw4bXJ22giIzZoWBPRSxpuHYeg= -----END CERTIFICATE-----Generated at Tue Jun 3 07:59:54 2025 by rpki-client