$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ae28820-ef1f-316e-9b38-fb7945b98e3e.roa File: 7ae28820-ef1f-316e-9b38-fb7945b98e3e.roa (raw, json) Hash identifier: SrQySwc5uA/w8y24oat1tZG83W3aLBrEU/r0pmzqWcg= Subject key identifier: A2:91:F4:CC:C7:50:A3:59:8B:98:43:3B:F1:0F:06:A6:87:7F:61:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0733D7C7FD7F76A72D0880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ae28820-ef1f-316e-9b38-fb7945b98e3e.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33660 IP address blocks: 76.129.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:33:d7:c7:fd:7f:76:a7:2d:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=3c9da1d2-dab7-4160-8c92-32b5716c65b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:16:04:3c:57:6d:5b:89:38:cb:8f:00:f8:ef: c3:0b:5a:52:a2:44:93:70:ef:8a:e8:36:3c:d7:26: 36:03:cc:53:2d:fe:4e:7a:5c:eb:bb:6b:8b:d4:b8: cf:cf:58:f9:f1:7b:a4:6d:16:f2:ca:b5:a7:a1:b9: bc:8e:9a:72:87:13:98:de:a7:63:f2:9a:0d:e5:52: a0:22:62:a7:1c:7d:84:9f:f9:f7:c8:93:b7:a0:b2: 57:4e:09:3e:b8:7e:7c:0f:c2:73:c0:fc:69:03:cf: 15:12:43:0b:05:fe:e2:3c:29:dd:07:b4:43:e9:b2: 51:ae:73:26:5f:8f:f4:82:e8:e5:26:4d:e7:30:b7: 5c:29:12:7f:d0:74:1e:f3:3a:c6:50:26:72:aa:57: 4f:61:65:d3:e7:bd:fb:24:5c:fb:49:a6:d2:60:d3: 81:95:50:7b:c8:ec:b1:27:f0:5a:bd:43:cb:30:aa: c9:d7:eb:bd:d2:26:0c:4e:d4:d4:13:32:5f:cf:58: 13:f4:3e:29:72:71:9c:9e:ed:66:19:16:f6:51:16: 49:7e:84:5c:48:1c:a9:cb:cc:b0:08:7c:1b:ef:17: 59:66:64:f6:0d:d4:57:c1:42:9d:e5:df:2f:4b:e7: 3b:7a:2f:9e:32:49:ce:06:ab:ca:1e:f2:5f:b1:37: b7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:91:F4:CC:C7:50:A3:59:8B:98:43:3B:F1:0F:06:A6:87:7F:61:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7ae28820-ef1f-316e-9b38-fb7945b98e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.129.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a7:bc:ac:89:42:85:a8:e9:1e:e4:3e:d0:98:68:8a:e4:af: 0b:3c:16:2f:19:2e:44:f6:da:82:cd:91:f9:3a:9f:47:de:45: 37:f2:29:dd:5c:c1:6f:78:be:55:8d:a4:18:52:56:d4:b8:f5: 10:ef:2b:91:43:4f:47:4a:21:87:f2:98:50:ae:7b:dc:58:66: a1:34:ed:18:97:90:77:50:0c:c9:a4:c9:f9:b1:14:4a:e4:e8: e2:3a:95:4c:e1:7e:9f:b5:e2:f4:97:f7:a7:2d:e0:ae:7b:4a: 1e:2b:26:8f:4d:16:d4:ff:39:67:aa:9f:8f:fa:c9:9e:e3:28: 92:0f:b0:55:29:08:65:8c:50:a7:a0:a1:99:fe:f0:d3:86:86: f6:8b:56:d8:a6:a4:4c:38:73:5e:9b:00:01:4d:7d:ae:54:63: 29:79:7d:a7:5a:ad:e8:5d:89:ac:e3:af:3d:2d:15:61:a5:b8: e5:ae:4c:fc:c1:f0:9d:70:9d:9a:fb:7e:ce:54:30:e3:f1:ef: 12:04:5f:b4:f8:8d:ce:f6:20:7c:d9:17:fa:10:eb:c9:ac:84: 07:f2:43:fe:fb:a0:64:9f:dc:d1:e4:4e:06:45:e1:de:2c:85: e7:91:bc:1b:7a:25:45:4e:2e:34:a2:1d:cb:5b:5c:82:e5:ae: 45:91:b2:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBzPXx/1/dqctCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk M2M5ZGExZDItZGFiNy00MTYwLThjOTItMzJiNTcxNmM2NWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRYEPFdtW4k4y48A+O/DC1pSokSTcO+K6DY8 1yY2A8xTLf5Oelzru2uL1LjPz1j58XukbRbyyrWnobm8jppyhxOY3qdj8poN5VKg ImKnHH2En/n3yJO3oLJXTgk+uH58D8JzwPxpA88VEkMLBf7iPCndB7RD6bJRrnMm X4/0gujlJk3nMLdcKRJ/0HQe8zrGUCZyqldPYWXT5737JFz7SabSYNOBlVB7yOyx J/BavUPLMKrJ1+u90iYMTtTUEzJfz1gT9D4pcnGcnu1mGRb2URZJfoRcSBypy8yw CHwb7xdZZmT2DdRXwUKd5d8vS+c7ei+eMknOBqvKHvJfsTe30QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKR9MzHUKNZi5hDO/EPBqaHf2G/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2FlMjg4MjAtZWYxZi0z MTZlLTliMzgtZmI3OTQ1Yjk4ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIFGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6nvKyJQoWo6R7kPtCYaIrkrws8Fi8ZLkT22oLNkfk6n0feRTfyKd1c wW94vlWNpBhSVtS49RDvK5FDT0dKIYfymFCue9xYZqE07RiXkHdQDMmkyfmxFErk 6OI6lUzhfp+14vSX96ct4K57Sh4rJo9NFtT/OWeqn4/6yZ7jKJIPsFUpCGWMUKeg oZn+8NOGhvaLVtimpEw4c16bAAFNfa5UYyl5fadarehdiazjrz0tFWGluOWuTPzB 8J1wnZr7fs5UMOPx7xIEX7T4jc72IHzZF/oQ68mshAfyQ/77oGSf3NHkTgZF4d4s heeRvBt6JUVOLjSiHctbXILlrkWRsts= -----END CERTIFICATE-----Generated at Tue Jun 3 07:51:21 2025 by rpki-client