$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c3b427e-be83-3b05-a6f5-a6bfb2031736.roa File: 8c3b427e-be83-3b05-a6f5-a6bfb2031736.roa (raw, json) Hash identifier: cgw7hcR/Rb0B4Jv3+hsyyXlzCENpGip4veRZ1kGL0UY= Subject key identifier: 32:67:3F:7B:37:5F:C4:CB:2B:0E:C7:2F:22:B4:48:0D:FA:D5:6E:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0852C705F67C79FCC73880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c3b427e-be83-3b05-a6f5-a6bfb2031736.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 76.157.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:52:c7:05:f6:7c:79:fc:c7:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=e3f10157-80f1-47b3-906c-412ddef8ee58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f3:ce:0c:62:85:b4:d8:37:79:ab:a5:c8:41: 26:f0:21:25:c9:63:1f:02:13:fb:ed:02:9c:6c:71: f8:44:40:f6:2e:5e:11:b9:ea:1f:d0:0a:54:28:21: f6:cc:d7:de:38:b9:a3:02:73:82:ac:3f:67:f4:b0: 3b:fc:fe:b8:32:a8:3e:af:8a:83:e5:5b:d0:d2:79: 28:7f:b9:a3:88:80:6a:3e:27:e0:c7:0c:63:34:f6: f2:4c:ab:71:05:6c:24:98:fa:3b:90:aa:83:af:3c: 22:66:66:c3:17:10:c9:74:b6:d0:5a:b6:c9:a3:00: 0f:92:8d:91:d0:e7:6f:6c:8e:2b:6b:dd:80:a2:2e: a1:b6:35:e2:e5:f4:20:31:d4:54:2e:71:cb:da:6c: 20:83:e4:78:f7:99:94:55:44:4d:cb:a4:ea:b8:47: 6d:c5:ce:86:5d:f5:1d:3c:84:90:c9:84:a2:ea:45: a1:6f:7e:d0:d1:b4:09:16:e9:26:cd:72:c1:06:10: 39:8f:32:ae:5c:dd:a4:10:fa:f2:a7:ba:ac:39:6d: 82:0e:6b:a2:76:35:fa:93:de:b0:61:a6:cc:82:79: 25:4e:53:7b:a8:1a:9c:5f:0f:7a:61:6a:da:19:ac: 16:ce:21:5f:b3:c2:91:c0:76:84:b8:21:bf:67:f8: ea:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:67:3F:7B:37:5F:C4:CB:2B:0E:C7:2F:22:B4:48:0D:FA:D5:6E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c3b427e-be83-3b05-a6f5-a6bfb2031736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.157.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:07:2e:c1:82:a2:0b:4e:df:7d:c6:a3:06:47:50:a4:23:89: ba:3b:2a:e1:f7:11:85:ad:7b:f7:c0:d9:9f:e1:73:30:a7:4f: 0a:8f:3f:21:db:4a:a9:46:28:c4:48:ee:ff:f1:41:22:be:af: fc:92:ef:28:5a:07:0f:c2:f4:2e:86:0d:2f:44:0f:40:27:89: ce:6a:fa:b4:43:67:da:b5:e1:58:c3:70:fb:3a:19:01:e9:72: 9c:f3:7b:1a:7f:74:8c:8d:0c:f9:c4:19:05:62:0e:2d:7b:56: be:0f:be:bc:67:9a:14:37:e1:34:12:5b:6e:f1:09:c3:f2:ec: cd:e1:f0:a2:d7:cb:fb:dd:70:3d:db:3b:fb:7d:c8:a3:1c:f9: 0f:e7:9e:48:d5:67:3f:82:f5:3d:ad:41:97:3e:55:66:0b:cf: f3:62:46:46:9e:28:b0:0f:db:f6:d7:b1:03:2c:26:c1:48:1c: 2a:e1:22:6b:b9:60:3c:57:bd:f0:06:cb:f7:b3:87:37:07:39: 17:e7:a5:c9:8f:f5:34:ce:7f:44:aa:a0:3e:3f:e0:7b:89:72: 7d:e9:4b:03:99:b7:a4:a2:c5:64:12:a7:6b:db:3a:3d:a5:d1: 51:6a:22:e4:14:0f:35:0d:72:6a:ea:f9:5c:b8:e4:a4:da:52: ec:bc:f4:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCFLHBfZ8efzHOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZTNmMTAxNTctODBmMS00N2IzLTkwNmMtNDEyZGRlZjhlZTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivPODGKFtNg3eaulyEEm8CElyWMfAhP77QKc bHH4RED2Ll4Rueof0ApUKCH2zNfeOLmjAnOCrD9n9LA7/P64Mqg+r4qD5VvQ0nko f7mjiIBqPifgxwxjNPbyTKtxBWwkmPo7kKqDrzwiZmbDFxDJdLbQWrbJowAPko2R 0OdvbI4ra92Aoi6htjXi5fQgMdRULnHL2mwgg+R495mUVURNy6TquEdtxc6GXfUd PISQyYSi6kWhb37Q0bQJFukmzXLBBhA5jzKuXN2kEPryp7qsOW2CDmuidjX6k96w YabMgnklTlN7qBqcXw96YWraGawWziFfs8KRwHaEuCG/Z/jqCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJnP3s3X8TLKw7HLyK0SA361W55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGMzYjQyN2UtYmU4My0z YjA1LWE2ZjUtYTZiZmIyMDMxNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJ3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALEHLsGCogtO333GowZHUKQjibo7KuH3EYWte/fA2Z/hczCnTwqPPyHb SqlGKMRI7v/xQSK+r/yS7yhaBw/C9C6GDS9ED0Anic5q+rRDZ9q14VjDcPs6GQHp cpzzexp/dIyNDPnEGQViDi17Vr4PvrxnmhQ34TQSW27xCcPy7M3h8KLXy/vdcD3b O/t9yKMc+Q/nnkjVZz+C9T2tQZc+VWYLz/NiRkaeKLAP2/bXsQMsJsFIHCrhImu5 YDxXvfAGy/ezhzcHORfnpcmP9TTOf0SqoD4/4HuJcn3pSwOZt6SixWQSp2vbOj2l 0VFqIuQUDzUNcmrq+Vy45KTaUuy89BM= -----END CERTIFICATE-----Generated at Tue Jun 3 04:52:26 2025 by rpki-client