$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51a7084e-bfb3-3cc6-9dab-391a7cf89356.roa File: 51a7084e-bfb3-3cc6-9dab-391a7cf89356.roa (raw, json) Hash identifier: nzDGDt4kPB2XOIhJWh2L2WP4cUBWcnx9HjSDfVq9TZ4= Subject key identifier: 16:38:B8:11:D3:6D:1E:8F:CE:18:42:40:AC:7E:8F:44:F3:22:A4:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF75D039CC21D35F39BBD9C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51a7084e-bfb3-3cc6-9dab-391a7cf89356.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 7725 IP address blocks: 76.97.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:d0:39:cc:21:d3:5f:39:bb:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=9a8fdd69-ffde-42b8-a5bd-bc1ed1711ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:94:5b:55:8d:f6:f0:ed:9d:2b:86:ad:ad: d8:e6:ae:cc:8b:e2:04:3c:61:44:cd:c4:25:be:bc: 1f:aa:d2:38:d4:41:29:ae:6e:03:5c:cb:8c:bb:e8: 5e:3d:cf:e8:76:43:f6:b0:3e:45:cb:58:ea:64:f7: 88:49:9d:5b:cd:9e:bf:33:93:cd:9e:56:d5:3e:71: 5b:b7:3f:50:21:46:dd:89:71:1d:63:a9:ac:17:be: 2d:ce:8f:ee:60:79:f9:df:3e:83:c1:2b:67:d5:43: 0d:7f:a1:c3:9f:64:ba:f1:ae:7d:86:c8:82:7a:9e: 05:3c:50:45:f7:e9:f8:fc:dc:0b:bb:e6:77:19:66: c5:af:dc:d5:40:09:e2:d3:6b:a8:be:c5:7c:98:9d: ec:cf:ea:f0:01:37:ba:1c:1f:88:e0:49:05:92:cb: 13:bf:eb:ff:74:2e:2c:a3:e8:3f:b0:94:72:33:a1: 44:1e:b2:42:57:e3:ad:8c:b3:f6:bc:77:a3:40:46: 75:15:04:cd:9c:12:63:e2:e7:22:4c:59:cf:bc:a5: f2:36:60:84:60:9c:ac:ac:bf:9d:ee:70:8d:61:b0: 48:3f:45:66:bf:e8:60:8a:3c:a4:cb:fe:e4:27:59: 6e:e0:05:1e:57:5e:95:59:de:df:90:e5:ba:94:79: ae:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:38:B8:11:D3:6D:1E:8F:CE:18:42:40:AC:7E:8F:44:F3:22:A4:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/51a7084e-bfb3-3cc6-9dab-391a7cf89356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.97.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:dc:95:47:36:35:3b:e1:22:37:dd:33:da:d8:a4:9d:b0:8d: 66:2d:56:4b:b9:60:22:f9:28:46:27:34:85:c6:9b:81:6f:15: e3:ce:c9:2b:89:2e:95:e8:8c:4b:42:95:20:f6:93:df:96:d7: 13:a2:9e:03:a5:8a:e0:2e:b8:52:23:2f:b3:ea:24:ee:af:81: 19:68:25:9d:7a:81:f3:0e:5e:6c:08:24:4f:00:0b:3b:2c:bc: de:61:69:ce:05:82:e7:26:55:eb:81:db:f1:56:2b:41:b1:4f: 59:69:02:ff:e7:3f:45:4c:41:70:0f:ad:56:f5:48:bd:9a:37: e8:a6:48:2f:59:fa:cb:d2:46:33:4c:13:2e:a9:70:d0:af:99: db:06:35:ce:00:bb:a5:d5:a5:88:c5:2f:1e:ed:bd:ce:17:4b: 7a:9f:34:7f:0b:87:d7:46:76:9f:80:5c:57:47:b7:7e:8d:77: 17:7a:8b:9c:0c:35:e3:16:19:6b:10:da:ae:13:30:0c:6f:04: 1b:ad:ba:31:eb:4e:98:7e:e6:08:f4:b0:20:a7:6b:45:f9:fd: 1d:3d:81:31:9c:e0:de:6b:66:f7:71:dd:89:5f:f7:d0:8c:34: ae:0f:c0:87:50:4d:66:3e:8b:d5:0b:c4:d6:96:94:14:49:e3: 9f:84:cf:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/ddA5zCHTXzm72cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk OWE4ZmRkNjktZmZkZS00MmI4LWE1YmQtYmMxZWQxNzExYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeaUW1WN9vDtnSuGra3Y5q7Mi+IEPGFEzcQl vrwfqtI41EEprm4DXMuMu+hePc/odkP2sD5Fy1jqZPeISZ1bzZ6/M5PNnlbVPnFb tz9QIUbdiXEdY6msF74tzo/uYHn53z6DwStn1UMNf6HDn2S68a59hsiCep4FPFBF 9+n4/NwLu+Z3GWbFr9zVQAni02uovsV8mJ3sz+rwATe6HB+I4EkFkssTv+v/dC4s o+g/sJRyM6FEHrJCV+OtjLP2vHejQEZ1FQTNnBJj4uciTFnPvKXyNmCEYJysrL+d 7nCNYbBIP0Vmv+hgijyky/7kJ1lu4AUeV16VWd7fkOW6lHmu4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBY4uBHTbR6PzhhCQKx+j0TzIqRMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTFhNzA4NGUtYmZiMy0z Y2M2LTlkYWItMzkxYTdjZjg5MzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTGEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLclUc2NTvhIjfdM9rYpJ2wjWYtVku5YCL5KEYnNIXGm4FvFePOySuJ LpXojEtClSD2k9+W1xOingOliuAuuFIjL7PqJO6vgRloJZ16gfMOXmwIJE8ACzss vN5hac4FgucmVeuB2/FWK0GxT1lpAv/nP0VMQXAPrVb1SL2aN+imSC9Z+svSRjNM Ey6pcNCvmdsGNc4Au6XVpYjFLx7tvc4XS3qfNH8Lh9dGdp+AXFdHt36Ndxd6i5wM NeMWGWsQ2q4TMAxvBButujHrTph+5gj0sCCna0X5/R09gTGc4N5rZvdx3Ylf99CM NK4PwIdQTWY+i9ULxNaWlBRJ45+Ez2Q= -----END CERTIFICATE-----Generated at Wed Jun 4 23:08:58 2025 by rpki-client