$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/589253e2-9893-30b1-9609-84caf4ffd6f6.roa File: 589253e2-9893-30b1-9609-84caf4ffd6f6.roa (raw, json) Hash identifier: Lr/LTVk+qLg1m8JbU5e3G7GtybN28bQSU9WseJSfm4Q= Subject key identifier: 58:8A:89:6A:C1:48:D3:FE:A3:5C:5A:A4:F6:10:16:73:1A:F5:11:AE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C08CF8633830AE2A3BCD600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/589253e2-9893-30b1-9609-84caf4ffd6f6.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 76.133.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:cf:86:33:83:0a:e2:a3:bc:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=c3bba656-a583-4de2-9a48-cd3f3abd88dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:49:8f:97:56:c0:45:8f:9c:46:6e:e4:dd:24: 4a:af:7c:09:ee:3a:3f:17:f6:6f:1b:61:6b:1d:a4: 58:93:db:77:36:59:61:99:a5:8d:4a:27:27:20:20: e9:1b:bd:16:6d:29:7c:b5:f0:d5:f8:3b:68:5b:af: 11:81:04:46:e9:28:4d:da:3c:98:9e:bd:52:12:b6: 79:d5:b4:ff:4b:c2:85:1a:5f:4a:ca:38:6d:95:8d: 9c:4f:f3:0e:c1:41:97:ad:ab:26:de:a3:a3:ac:51: 73:d4:07:54:03:0e:bf:b9:dc:7e:6d:8d:53:1f:d9: bd:49:dd:80:ef:d8:31:cb:85:30:40:33:47:9d:6a: 7c:29:c4:34:24:ce:e8:cd:fa:ec:88:0d:fc:2c:51: a4:ba:b9:b6:5a:0e:bf:7d:f6:61:31:d7:61:f7:7f: 6c:d3:0c:c9:72:c1:3c:06:16:b2:12:d9:9f:d2:e5: a4:45:7f:eb:17:71:6c:48:13:48:e9:63:5f:b3:9a: 1e:38:e6:87:52:3f:89:e8:5b:59:b9:da:01:74:9b: 22:ec:0f:34:eb:3f:17:83:f4:96:31:76:27:c7:8b: 97:36:c4:dc:23:4a:c6:5f:3d:5a:8e:81:09:a7:aa: 3f:cd:de:3b:80:35:13:67:99:0f:10:d5:72:c3:74: e1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8A:89:6A:C1:48:D3:FE:A3:5C:5A:A4:F6:10:16:73:1A:F5:11:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/589253e2-9893-30b1-9609-84caf4ffd6f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ed:54:92:d1:b7:ac:1c:cb:b0:b4:bc:3f:16:68:34:55:3c: 33:f7:81:9e:db:bf:57:4f:11:2f:27:25:1e:7e:48:43:5c:21: 05:85:b8:1b:90:77:7d:9e:5b:29:b9:00:fb:c9:97:37:b1:22: f7:05:e9:ff:1c:4b:75:e2:e3:d3:c6:55:c7:55:bf:c5:4e:21: 39:7b:48:1c:8c:4d:54:62:a8:ec:b7:34:79:ff:06:59:07:22: 37:92:85:af:92:ad:24:e6:e5:94:8f:6c:f8:2e:fa:60:5f:17: d2:fa:25:63:33:4e:20:19:a6:fc:98:8c:fe:b1:6d:9b:fd:71: 5e:1d:84:b9:15:c8:2b:38:88:3b:54:3e:81:1f:81:f3:d9:3f: 71:fa:1e:b8:7a:ef:ce:84:d9:5d:fb:70:52:e0:6e:8b:b2:d9: 6b:69:86:e4:7d:fb:30:64:dd:7d:35:4c:77:85:12:68:5f:33: b5:6c:79:5b:b4:91:79:98:e8:e1:92:69:b3:46:4e:b6:24:54: 93:4b:0c:c1:07:42:93:bf:99:f1:00:1c:73:89:7b:47:29:d5: 80:98:cd:46:0d:b1:69:ad:87:2e:45:f2:0c:73:31:a8:b0:ce: 23:bb:6c:0f:0c:3e:7e:8d:ee:cd:03:01:10:14:45:e5:c1:5a: 46:da:91:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCM+GM4MK4qO81gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YzNiYmE2NTYtYTU4My00ZGUyLTlhNDgtY2QzZjNhYmQ4OGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUmPl1bARY+cRm7k3SRKr3wJ7jo/F/ZvG2Fr HaRYk9t3NllhmaWNSicnICDpG70WbSl8tfDV+DtoW68RgQRG6ShN2jyYnr1SErZ5 1bT/S8KFGl9KyjhtlY2cT/MOwUGXrasm3qOjrFFz1AdUAw6/udx+bY1TH9m9Sd2A 79gxy4UwQDNHnWp8KcQ0JM7ozfrsiA38LFGkurm2Wg6/ffZhMddh939s0wzJcsE8 BhayEtmf0uWkRX/rF3FsSBNI6WNfs5oeOOaHUj+J6FtZudoBdJsi7A806z8Xg/SW MXYnx4uXNsTcI0rGXz1ajoEJp6o/zd47gDUTZ5kPENVyw3Th2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiKiWrBSNP+o1xapPYQFnMa9RGuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTg5MjUzZTItOTg5My0z MGIxLTk2MDktODRjYWY0ZmZkNmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIXMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrtVJLRt6wcy7C0vD8WaDRVPDP3gZ7bv1dPES8nJR5+SENcIQWFuBuQ d32eWym5APvJlzexIvcF6f8cS3Xi49PGVcdVv8VOITl7SByMTVRiqOy3NHn/BlkH IjeSha+SrSTm5ZSPbPgu+mBfF9L6JWMzTiAZpvyYjP6xbZv9cV4dhLkVyCs4iDtU PoEfgfPZP3H6Hrh6786E2V37cFLgbouy2WtphuR9+zBk3X01THeFEmhfM7VseVu0 kXmY6OGSabNGTrYkVJNLDMEHQpO/mfEAHHOJe0cp1YCYzUYNsWmthy5F8gxzMaiw ziO7bA8MPn6N7s0DARAUReXBWkbakew= -----END CERTIFICATE-----Generated at Tue Jun 3 07:54:04 2025 by rpki-client