$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89003b2d-e48c-3ff6-91fd-b920dc09a93a.roa File: 89003b2d-e48c-3ff6-91fd-b920dc09a93a.roa (raw, json) Hash identifier: HNJjsS/ZdpQvo0F0//jvq2w/JWTGlZncwSaoE2k4aJM= Subject key identifier: 2D:B2:6D:21:5E:44:C0:3B:E9:CF:9F:1D:11:64:A6:A2:66:84:03:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4313691C105727D7C19F680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89003b2d-e48c-3ff6-91fd-b920dc09a93a.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 71.236.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:36:91:c1:05:72:7d:7c:19:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=87501acd-fb6b-4326-a705-c6ceb337a38f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:60:0d:c9:2c:f3:a7:6b:15:94:7d:c2:27:f3: db:18:fe:e6:7b:ea:d5:09:3d:c8:fa:26:8f:b4:d9: 85:06:a5:46:5c:33:ce:43:48:cb:b6:a0:b0:a6:9a: 9d:11:a3:44:d8:66:86:73:ad:d2:ab:b5:c6:64:62: aa:f4:6f:d2:da:75:ce:77:8b:9c:f8:38:af:76:93: 5c:68:70:4e:9e:d6:06:85:3c:92:99:67:57:69:36: ff:1d:99:bd:06:3e:33:67:8d:ab:4a:bb:cf:30:3b: a5:ba:99:4b:15:10:b0:41:f4:2a:2c:54:5c:a7:8c: 93:c0:85:eb:9c:57:84:75:d9:4a:65:d8:40:60:f7: bf:3d:45:67:66:97:ec:25:58:5e:39:18:d4:37:50: 26:a6:30:06:4d:98:1a:c3:95:17:2b:a5:9e:0d:70: b7:9b:7a:7e:17:4e:5e:7b:01:77:cf:2c:a5:f8:9e: 6a:9c:9a:c2:1a:54:8c:03:27:b8:3f:96:66:8b:28: fc:1c:f9:7f:9f:e3:d2:f5:e5:b2:a0:62:5d:75:b3: 37:d8:17:26:c4:9e:bf:75:35:82:61:1b:7d:0c:d8: 81:18:ae:d5:d0:be:21:e3:9c:95:a3:d6:da:b8:06: 34:7f:9c:e5:30:1a:00:82:63:34:a3:f7:98:d4:80: 8f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B2:6D:21:5E:44:C0:3B:E9:CF:9F:1D:11:64:A6:A2:66:84:03:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89003b2d-e48c-3ff6-91fd-b920dc09a93a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.236.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:3c:d6:1f:d1:25:42:ab:9f:9c:08:9d:b9:df:0c:80:5a:1f: 96:50:72:0c:c1:8b:f6:32:e1:13:d7:a8:a3:06:03:c9:6b:76: 74:7d:8f:3e:dd:10:2a:00:22:05:72:3e:55:99:69:88:e2:8d: c3:86:1e:c0:4d:c8:96:2e:b0:1d:a3:cc:cf:ed:84:e0:f2:83: fc:f9:bc:12:0e:90:b3:0c:e8:3d:99:94:9a:58:91:a9:06:5e: f0:79:99:c1:12:c2:0a:ee:82:b4:b4:93:6d:be:7d:c3:0a:a0: cc:b5:a2:af:d3:34:1f:62:4a:47:d6:90:ae:ec:79:38:52:d5: 2a:50:b4:02:4f:0d:aa:6f:60:83:74:de:7f:5c:82:b8:ca:1c: 75:e4:d6:56:d6:93:a9:66:e9:60:97:f5:d5:a3:26:5a:77:7c: 97:29:b8:61:97:72:cd:48:c6:c5:37:1a:a4:70:f0:30:02:86: 1a:1d:1e:48:17:31:61:f7:b1:57:66:75:67:f8:22:7e:3e:2f: f4:4f:ac:1b:0f:d0:b4:52:86:bc:0a:33:07:3a:a4:c4:e5:81: 6b:04:7f:aa:b6:a7:06:12:23:27:d0:d4:1b:4f:e8:0c:dd:7a: 96:39:05:0f:dc:7e:bd:1e:f5:9f:0d:ed:31:76:e8:39:1c:d0: 54:51:85:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMTaRwQVyfXwZ9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODc1MDFhY2QtZmI2Yi00MzI2LWE3MDUtYzZjZWIzMzdhMzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimANySzzp2sVlH3CJ/PbGP7me+rVCT3I+iaP tNmFBqVGXDPOQ0jLtqCwppqdEaNE2GaGc63Sq7XGZGKq9G/S2nXOd4uc+DivdpNc aHBOntYGhTySmWdXaTb/HZm9Bj4zZ42rSrvPMDuluplLFRCwQfQqLFRcp4yTwIXr nFeEddlKZdhAYPe/PUVnZpfsJVheORjUN1AmpjAGTZgaw5UXK6WeDXC3m3p+F05e ewF3zyyl+J5qnJrCGlSMAye4P5Zmiyj8HPl/n+PS9eWyoGJddbM32BcmxJ6/dTWC YRt9DNiBGK7V0L4h45yVo9bauAY0f5zlMBoAgmM0o/eY1ICPfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2ybSFeRMA76c+fHRFkpqJmhAPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODkwMDNiMmQtZTQ4Yy0z ZmY2LTkxZmQtYjkyMGRjMDlhOTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR+zqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA81h/RJUKrn5wInbnfDIBaH5ZQcgzBi/Yy4RPXqKMGA8lrdnR9jz7d ECoAIgVyPlWZaYjijcOGHsBNyJYusB2jzM/thODyg/z5vBIOkLMM6D2ZlJpYkakG XvB5mcESwgrugrS0k22+fcMKoMy1oq/TNB9iSkfWkK7seThS1SpQtAJPDapvYIN0 3n9cgrjKHHXk1lbWk6lm6WCX9dWjJlp3fJcpuGGXcs1IxsU3GqRw8DAChhodHkgX MWH3sVdmdWf4In4+L/RPrBsP0LRShrwKMwc6pMTlgWsEf6q2pwYSIyfQ1BtP6Azd epY5BQ/cfr0e9Z8N7TF26Dkc0FRRhYU= -----END CERTIFICATE-----Generated at Tue Jun 3 04:58:10 2025 by rpki-client