$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d79000b-2b4b-3885-8c97-eb231e31de2e.roa File: 8d79000b-2b4b-3885-8c97-eb231e31de2e.roa (raw, json) Hash identifier: JcoZ8OoLoHi0zGomoztylQ060vCGB3UFNkTda+Y5zkw= Subject key identifier: CA:AB:B0:08:D6:0B:BD:33:E1:24:2C:B0:18:0F:AC:AD:48:96:0D:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0852B9FB4FC69467556660 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d79000b-2b4b-3885-8c97-eb231e31de2e.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 76.157.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:52:b9:fb:4f:c6:94:67:55:66:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=1216ce38-291e-4336-a5d5-87e4866aaabf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8d:2a:0e:ce:d3:48:b4:bb:18:78:24:a9:af: 5b:e5:fb:70:2a:3b:f0:c3:5f:0d:bd:c6:8a:50:ee: 76:c6:bc:d4:09:0d:d1:58:3a:30:12:99:97:c1:0b: e5:46:35:dc:0f:16:a8:18:be:cb:22:4d:57:05:7b: 99:17:0a:9b:cc:51:80:7b:0a:5d:7a:9f:71:c5:18: 53:78:61:0f:ee:17:ac:8c:91:01:ba:4d:d3:5a:e6: 6b:4b:8e:c1:30:0c:e2:2a:77:a9:b7:0a:37:2c:ee: 42:0d:3c:3d:9a:24:52:b6:aa:38:aa:a4:7d:f8:94: 8e:d9:a1:d8:fe:00:7c:44:89:7b:ac:47:4c:fb:dd: 20:c1:65:e1:6c:db:d4:d8:c2:c3:6c:24:b8:c7:73: 42:db:18:6b:06:68:1a:31:a4:23:a5:f6:ec:7f:36: f1:bd:c9:96:2e:89:cd:f5:ae:f7:00:af:ff:81:21: 09:b9:0b:c8:67:e1:2a:5c:91:3e:67:dc:de:92:50: f5:c8:6e:5f:6b:4f:25:65:31:88:02:c3:6e:54:a6: 1d:e4:2b:92:d9:63:1c:3a:93:bf:c9:3b:d0:e4:5f: 43:2e:d8:8c:1f:bc:4f:e1:de:a4:4f:7f:72:09:49: d3:1f:f6:3c:ea:ea:0b:3f:00:f4:66:1a:dd:a6:48: c2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AB:B0:08:D6:0B:BD:33:E1:24:2C:B0:18:0F:AC:AD:48:96:0D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d79000b-2b4b-3885-8c97-eb231e31de2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.157.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:3a:87:29:95:c9:ea:81:c5:08:22:67:1a:ae:4f:b7:77:95: 7e:0e:b0:27:8c:c5:55:15:1f:66:71:68:02:c6:1e:dd:f6:91: ac:97:5e:cf:02:da:05:7b:51:22:9d:63:61:d3:62:0f:23:2a: 5f:59:46:6b:1f:fd:2f:1d:1d:54:79:5f:ed:56:2e:af:f6:af: a5:5f:14:90:6d:57:15:19:6b:6e:7e:06:bb:22:36:35:f6:90: 88:ed:23:05:24:94:ae:d0:40:3d:31:f1:0f:00:fa:16:d2:de: 3f:72:bf:e0:69:69:44:0b:c8:12:e4:57:de:45:6a:42:04:35: ab:8b:bc:8c:2d:51:61:fd:77:b8:3d:85:fc:57:6b:c5:a1:44: a5:c6:b1:9d:8f:a6:f0:9b:ca:c3:e3:0b:a5:20:5f:ba:ef:19: e3:70:4d:18:9b:50:ba:38:55:78:fe:2e:8e:1c:48:74:35:92: b0:63:d7:3f:08:ba:19:0e:d2:58:8e:7b:87:d6:94:3e:cf:33: 17:17:cb:53:5d:ad:6e:cc:07:83:33:d7:a7:4e:6a:d7:7f:ba: 96:fb:48:ef:b5:0d:77:c0:66:b6:58:0f:1f:ff:75:45:c7:b4: 6d:a5:ca:ea:4b:df:d3:ff:75:7b:66:fd:92:a5:7d:77:72:21: 84:41:ac:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCFK5+0/GlGdVZmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MTIxNmNlMzgtMjkxZS00MzM2LWE1ZDUtODdlNDg2NmFhYWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv40qDs7TSLS7GHgkqa9b5ftwKjvww18NvcaK UO52xrzUCQ3RWDowEpmXwQvlRjXcDxaoGL7LIk1XBXuZFwqbzFGAewpdep9xxRhT eGEP7hesjJEBuk3TWuZrS47BMAziKneptwo3LO5CDTw9miRStqo4qqR9+JSO2aHY /gB8RIl7rEdM+90gwWXhbNvU2MLDbCS4x3NC2xhrBmgaMaQjpfbsfzbxvcmWLonN 9a73AK//gSEJuQvIZ+EqXJE+Z9zeklD1yG5fa08lZTGIAsNuVKYd5CuS2WMcOpO/ yTvQ5F9DLtiMH7xP4d6kT39yCUnTH/Y86uoLPwD0ZhrdpkjCmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqrsAjWC70z4SQssBgPrK1Ilg1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQ3OTAwMGItMmI0Yi0z ODg1LThjOTctZWIyMzFlMzFkZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJ3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ6hymVyeqBxQgiZxquT7d3lX4OsCeMxVUVH2ZxaALGHt32kayXXs8C 2gV7USKdY2HTYg8jKl9ZRmsf/S8dHVR5X+1WLq/2r6VfFJBtVxUZa25+BrsiNjX2 kIjtIwUklK7QQD0x8Q8A+hbS3j9yv+BpaUQLyBLkV95FakIENauLvIwtUWH9d7g9 hfxXa8WhRKXGsZ2PpvCbysPjC6UgX7rvGeNwTRibULo4VXj+Lo4cSHQ1krBj1z8I uhkO0liOe4fWlD7PMxcXy1NdrW7MB4Mz16dOatd/upb7SO+1DXfAZrZYDx//dUXH tG2lyupL39P/dXtm/ZKlfXdyIYRBrEQ= -----END CERTIFICATE-----Generated at Tue Jun 3 06:19:47 2025 by rpki-client