$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6895bf31-256f-38ef-98af-b7d3f6d30297.roa File: 6895bf31-256f-38ef-98af-b7d3f6d30297.roa (raw, json) Hash identifier: skt03uhmEW4+uqHEcquB7fePgemW9KFcs2eJ1Q4kfiA= Subject key identifier: FF:84:C1:B4:F0:9F:1A:F8:60:32:DD:66:D2:2F:32:10:FB:86:08:8C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431CFB08BDB8B5DC73CCA40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6895bf31-256f-38ef-98af-b7d3f6d30297.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 76.118.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:cf:b0:8b:db:8b:5d:c7:3c:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=c6dec00d-e4d2-4425-bd8b-7f96c1d23c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:02:42:71:22:3e:4c:04:91:d6:4f:a4:c4:26: 82:cc:c4:90:ff:96:e3:57:5b:59:e4:1c:38:96:10: 50:5f:94:0b:c8:2b:98:2a:65:37:1a:4e:b0:ad:35: cc:e3:73:ad:2d:3b:fa:6f:d3:9c:d7:bf:9b:fd:f1: 30:77:06:34:68:89:3d:c2:6b:6f:76:0c:aa:1f:84: af:b0:03:5a:84:a3:9f:9a:85:6b:c5:4f:8e:9f:ec: ac:81:5d:19:0d:d5:58:d1:6f:43:52:57:a7:f5:04: ee:c0:37:c9:77:c5:44:0d:4f:69:c8:8c:45:a4:95: 88:85:b7:f2:f1:87:9a:f3:f1:3d:3f:93:d4:a4:7d: fb:51:4a:05:19:78:6e:6e:84:a4:6a:34:5a:f0:ce: 39:69:6f:eb:ac:89:00:13:4e:1c:d5:0b:3f:90:59: 89:09:ea:f4:b2:b8:7b:34:4e:54:db:78:09:97:6a: 41:e7:8e:0c:f5:e5:e8:70:9a:48:d7:8f:a4:83:df: a9:ed:1e:85:8c:b5:97:1e:6d:f0:5f:e8:1a:a2:9b: 29:d7:fb:05:04:a1:b2:8b:3d:3b:dc:dc:db:7f:10: 17:33:5a:87:e0:e9:0a:d6:83:11:e5:27:12:b1:0f: 08:06:72:d6:22:40:e7:5a:a1:dd:f1:b2:13:62:b6: 26:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:84:C1:B4:F0:9F:1A:F8:60:32:DD:66:D2:2F:32:10:FB:86:08:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6895bf31-256f-38ef-98af-b7d3f6d30297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.118.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1a:a0:ff:75:f3:1f:e3:7f:a0:7c:1a:cf:04:cf:1e:ec:99: 47:81:43:72:1b:4e:98:4b:71:df:2b:b6:66:09:3f:c2:d5:9d: fd:9d:ca:a6:14:5a:1c:51:91:4f:c6:e9:a7:93:32:76:e9:b4: d8:9a:2a:77:b8:a7:93:8f:4e:03:35:48:34:cb:06:cd:cd:58: 93:cf:ef:be:47:97:47:b7:b7:5f:19:bc:46:e1:09:fa:68:e5: 80:25:53:f6:ab:46:54:ba:18:ec:49:b7:78:80:5a:ca:15:79: 3b:05:75:9e:da:d2:53:34:d7:ca:79:e3:a1:4f:ca:ff:63:6a: c9:f3:b5:cf:58:7e:66:db:5d:6d:f2:7c:73:f1:76:cf:9a:71: 61:54:02:5f:4c:1f:fc:42:06:1c:cf:f3:6d:2c:ab:ad:c0:60: 7a:df:22:86:be:5d:72:94:4b:2d:db:43:91:9a:ec:d6:cf:9e: 4f:30:f3:23:9d:30:a0:07:e3:66:ac:a8:56:75:90:c9:69:18: 08:90:2d:ef:2d:69:c9:a6:4e:52:44:40:a7:71:bd:ad:53:49: 60:73:5e:d3:7c:5c:f9:e2:d6:d5:af:25:42:89:36:26:50:88: c2:85:78:c0:1d:aa:c5:bd:1a:3d:85:be:63:83:00:f9:31:29: d2:c5:3c:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMc+wi9uLXcc8ykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzZkZWMwMGQtZTRkMi00NDI1LWJkOGItN2Y5NmMxZDIzYzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAJCcSI+TASR1k+kxCaCzMSQ/5bjV1tZ5Bw4 lhBQX5QLyCuYKmU3Gk6wrTXM43OtLTv6b9Oc17+b/fEwdwY0aIk9wmtvdgyqH4Sv sANahKOfmoVrxU+On+ysgV0ZDdVY0W9DUlen9QTuwDfJd8VEDU9pyIxFpJWIhbfy 8Yea8/E9P5PUpH37UUoFGXhuboSkajRa8M45aW/rrIkAE04c1Qs/kFmJCer0srh7 NE5U23gJl2pB544M9eXocJpI14+kg9+p7R6FjLWXHm3wX+gaopsp1/sFBKGyiz07 3NzbfxAXM1qH4OkK1oMR5ScSsQ8IBnLWIkDnWqHd8bITYrYm9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+EwbTwnxr4YDLdZtIvMhD7hgiMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjg5NWJmMzEtMjU2Zi0z OGVmLTk4YWYtYjdkM2Y2ZDMwMjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsaoP918x/jf6B8Gs8Ezx7smUeBQ3IbTphLcd8rtmYJP8LVnf2dyqYU WhxRkU/G6aeTMnbptNiaKne4p5OPTgM1SDTLBs3NWJPP775Hl0e3t18ZvEbhCfpo 5YAlU/arRlS6GOxJt3iAWsoVeTsFdZ7a0lM018p546FPyv9jasnztc9YfmbbXW3y fHPxds+acWFUAl9MH/xCBhzP820sq63AYHrfIoa+XXKUSy3bQ5Ga7NbPnk8w8yOd MKAH42asqFZ1kMlpGAiQLe8tacmmTlJEQKdxva1TSWBzXtN8XPni1tWvJUKJNiZQ iMKFeMAdqsW9Gj2FvmODAPkxKdLFPHc= -----END CERTIFICATE-----Generated at Tue Jun 3 07:37:38 2025 by rpki-client