$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d64486d-e6a4-376d-aec8-578fad6f3882.roa File: 8d64486d-e6a4-376d-aec8-578fad6f3882.roa (raw, json) Hash identifier: OJ8PmL6GFc46aha1trrDhjgQGqszL4DQfD8QQIuWftI= Subject key identifier: F7:A2:BA:C4:65:18:D0:90:FC:CE:73:D3:28:0F:06:5D:37:9C:67:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C07FC6B96A8F410497B8F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d64486d-e6a4-376d-aec8-578fad6f3882.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 71.57.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:fc:6b:96:a8:f4:10:49:7b:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=48bedf7d-1426-482a-905c-dbecabbc7d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:f1:e0:d8:1b:79:f2:77:f0:49:6d:ff:be: 8d:ec:f4:aa:df:45:39:c4:ff:10:ee:ce:54:32:4c: 16:0b:d1:18:93:93:9a:32:85:ec:55:be:57:8e:ac: 5d:b1:0e:ec:b4:17:d6:ce:83:c8:3f:27:70:f6:9a: 0a:f2:d0:b7:7f:50:cf:02:54:68:c4:24:4d:65:7f: f3:e4:69:a0:ed:69:fe:15:8e:e2:f7:96:c8:56:e2: 7a:95:32:7c:f5:43:b6:13:82:2c:92:c6:8d:7d:d2: 54:5f:31:8a:ea:52:5e:c6:e3:66:db:47:04:89:92: e2:91:b7:e5:9d:70:6a:41:74:15:fc:be:6f:3c:63: ed:48:1d:1a:80:04:2a:0d:41:5d:86:02:4c:cf:c3: a7:04:70:53:2f:88:91:b7:e1:38:77:25:be:04:bb: 18:7c:b0:88:a9:31:73:d0:bb:fa:80:72:f4:3e:81: ae:a8:5e:59:89:30:08:0e:ac:f1:ce:e2:3d:55:15: 3e:e3:52:0d:46:c1:f9:95:aa:76:e0:5a:82:dd:83: a0:bb:2a:3d:bc:15:27:b0:8f:eb:23:62:96:0f:52: 9a:b4:a4:72:c1:07:47:f3:1f:36:da:0c:0a:97:9f: 01:a0:c6:dc:f7:15:6b:d8:88:f1:31:dc:d9:b3:8e: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A2:BA:C4:65:18:D0:90:FC:CE:73:D3:28:0F:06:5D:37:9C:67:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d64486d-e6a4-376d-aec8-578fad6f3882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.57.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:4f:8a:e9:6c:1a:38:1f:50:27:79:34:e8:5c:25:9d:1b:a7: 70:f4:50:e8:99:d8:ba:e4:93:b0:f2:2d:58:cb:c4:ff:8c:c0: e4:4e:13:d2:48:c4:3e:ea:86:74:c3:ac:44:4b:f4:a6:ad:b1: 89:92:63:e6:9c:d0:87:3f:75:08:36:12:e9:ba:5e:b4:49:d0: 4a:bd:a0:b9:28:be:6e:ed:99:45:bb:8f:08:76:89:0c:24:68: c1:ed:06:6e:f0:d0:4d:c3:7d:00:a8:41:4d:41:42:d3:14:1c: 54:d8:2a:f0:d6:d6:57:1d:a5:49:31:92:09:2f:12:25:b3:3e: 4f:60:a1:79:e9:ca:2f:e1:8f:b1:47:b7:0e:1b:ae:5d:e9:55: ea:13:0c:5b:ad:5a:1b:ab:2e:03:96:49:2b:a6:57:f0:e0:45: 21:1f:21:b3:c3:83:63:67:9b:34:fb:af:35:dd:20:78:6a:8e: 33:5d:8a:a9:d6:19:68:2f:36:62:80:6e:75:94:71:a6:5c:7b: 53:2e:7a:df:38:ef:ca:51:00:75:58:99:cc:58:61:59:03:9e: 2b:81:cb:a1:55:f7:96:59:28:56:1f:bf:63:e9:22:09:17:f5: 41:73:33:1b:74:6e:f0:5c:b3:07:f5:35:5d:26:88:82:8f:18: 6f:ad:3c:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB/xrlqj0EEl7j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NDhiZWRmN2QtMTQyNi00ODJhLTkwNWMtZGJlY2FiYmM3ZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtDx4NgbefJ38Elt/76N7PSq30U5xP8Q7s5U MkwWC9EYk5OaMoXsVb5XjqxdsQ7stBfWzoPIPydw9poK8tC3f1DPAlRoxCRNZX/z 5Gmg7Wn+FY7i95bIVuJ6lTJ89UO2E4IsksaNfdJUXzGK6lJexuNm20cEiZLikbfl nXBqQXQV/L5vPGPtSB0agAQqDUFdhgJMz8OnBHBTL4iRt+E4dyW+BLsYfLCIqTFz 0Lv6gHL0PoGuqF5ZiTAIDqzxzuI9VRU+41INRsH5lap24FqC3YOguyo9vBUnsI/r I2KWD1KatKRywQdH8x822gwKl58BoMbc9xVr2IjxMdzZs47hKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeiusRlGNCQ/M5z0ygPBl03nGd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQ2NDQ4NmQtZTZhNC0z NzZkLWFlYzgtNTc4ZmFkNmYzODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRzlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNPiulsGjgfUCd5NOhcJZ0bp3D0UOiZ2Lrkk7DyLVjLxP+MwOROE9JI xD7qhnTDrERL9KatsYmSY+ac0Ic/dQg2Eum6XrRJ0Eq9oLkovm7tmUW7jwh2iQwk aMHtBm7w0E3DfQCoQU1BQtMUHFTYKvDW1lcdpUkxkgkvEiWzPk9goXnpyi/hj7FH tw4brl3pVeoTDFutWhurLgOWSSumV/DgRSEfIbPDg2NnmzT7rzXdIHhqjjNdiqnW GWgvNmKAbnWUcaZce1Muet8478pRAHVYmcxYYVkDniuBy6FV95ZZKFYfv2PpIgkX 9UFzMxt0bvBcswf1NV0miIKPGG+tPM0= -----END CERTIFICATE-----Generated at Tue Jun 3 06:19:20 2025 by rpki-client