$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a33edcbc-149b-38ce-ad25-0f50c57981a3.roa File: a33edcbc-149b-38ce-ad25-0f50c57981a3.roa (raw, json) Hash identifier: 5HNlntuXTdzpX73pF0CM7Tq6O6YKiPF/tOVj4X26nNU= Subject key identifier: C0:74:4F:C8:A3:DE:6E:62:B0:F7:2A:71:CD:51:A0:02:A7:D4:52:E3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C08CDACF3248BBA6AFD0480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a33edcbc-149b-38ce-ad25-0f50c57981a3.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 76.133.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:cd:ac:f3:24:8b:ba:6a:fd:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=7676486a-d952-493d-8056-863763fe367a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1b:91:31:6c:9a:fd:03:87:67:6f:ee:03:1f: c6:c4:e3:58:21:23:ae:c1:fe:71:64:f9:96:7e:7c: be:bd:5b:9d:23:3a:10:9e:17:8b:3e:f2:d2:97:53: 78:95:c6:67:9a:f4:2b:3e:ac:1e:b6:e4:ec:4d:af: bf:e4:e9:74:db:87:52:cc:93:80:d4:47:cb:20:12: ca:72:9f:99:36:d8:9f:1b:96:cf:a2:9e:ab:77:9f: 78:71:22:e9:d5:de:21:5c:e7:4f:82:c0:41:2c:be: 36:68:9d:e3:34:64:99:29:26:a3:72:a2:21:f3:db: b3:f6:a2:31:f5:07:66:76:60:61:e9:26:be:23:df: b7:e8:94:1f:5c:64:70:3b:80:5a:71:16:82:34:d7: 1f:f3:5f:63:e3:c3:fb:e6:97:d2:98:65:39:cf:24: 6b:e0:16:d9:d0:64:6f:fc:a9:1e:56:1e:86:b4:7c: 9c:54:7d:39:13:55:37:be:5e:79:e9:4a:52:db:5b: bb:bf:d0:23:63:a4:b0:8f:7a:21:44:01:ca:a8:56: 59:96:01:98:b8:22:95:6b:14:5b:d8:b9:8c:e3:1d: 0a:93:d6:ea:f3:1e:f4:15:ef:4b:7f:4e:96:44:94: 90:de:a1:ed:ad:1e:61:6e:1b:0b:32:a4:fd:f5:17: 19:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:74:4F:C8:A3:DE:6E:62:B0:F7:2A:71:CD:51:A0:02:A7:D4:52:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a33edcbc-149b-38ce-ad25-0f50c57981a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:70:78:ef:d7:c4:c6:b5:9d:2f:63:d7:15:e7:38:38:6f:b2: 25:a1:31:38:93:41:17:d6:08:5b:d7:77:47:83:46:13:b7:58: 66:6d:86:4b:37:b0:bb:e1:9c:48:36:5d:9e:9d:ee:3a:dd:ac: 9d:09:98:83:d7:bb:84:81:cb:63:d2:41:58:b0:ac:e4:56:4a: 21:67:3f:75:30:3e:de:6d:5e:5b:0d:35:54:93:28:97:1a:33: e3:f6:e2:7d:dd:f5:96:b4:a7:7c:65:20:76:b9:be:f5:81:7d: 15:b8:fc:65:47:4d:0c:13:c7:f5:60:3d:a8:d0:0f:89:7e:d0: 3e:f6:07:9e:10:4f:bd:80:72:e2:35:b9:66:ea:9e:b7:9a:fa: 5b:9c:d3:24:c1:fc:21:2d:8f:7f:e2:c5:39:43:7a:5f:9c:d0: 99:7b:40:b1:19:95:df:88:89:c4:eb:e9:52:f4:9b:d7:3f:9d: 1e:76:68:30:08:d1:66:bd:e9:45:ba:cc:a0:ab:51:53:63:f8: f4:ef:5b:62:aa:84:fb:53:de:81:f8:42:fe:7d:6f:f4:3b:04: a1:b8:3e:9d:59:15:65:13:19:ce:59:59:9a:b4:e6:31:b1:8a: d3:f3:2c:31:1a:3e:cd:e4:a2:72:b6:ad:67:b2:66:c4:aa:fd: d8:17:63:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCM2s8ySLumr9BIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NzY3NjQ4NmEtZDk1Mi00OTNkLTgwNTYtODYzNzYzZmUzNjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRuRMWya/QOHZ2/uAx/GxONYISOuwf5xZPmW fny+vVudIzoQnheLPvLSl1N4lcZnmvQrPqwetuTsTa+/5Ol024dSzJOA1EfLIBLK cp+ZNtifG5bPop6rd594cSLp1d4hXOdPgsBBLL42aJ3jNGSZKSajcqIh89uz9qIx 9QdmdmBh6Sa+I9+36JQfXGRwO4BacRaCNNcf819j48P75pfSmGU5zyRr4BbZ0GRv /KkeVh6GtHycVH05E1U3vl556UpS21u7v9AjY6Swj3ohRAHKqFZZlgGYuCKVaxRb 2LmM4x0Kk9bq8x70Fe9Lf06WRJSQ3qHtrR5hbhsLMqT99RcZBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMB0T8ij3m5isPcqcc1RoAKn1FLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTMzZWRjYmMtMTQ5Yi0z OGNlLWFkMjUtMGY1MGM1Nzk4MWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhweO/XxMa1nS9j1xXnODhvsiWhMTiTQRfWCFvXd0eDRhO3WGZthks3 sLvhnEg2XZ6d7jrdrJ0JmIPXu4SBy2PSQViwrORWSiFnP3UwPt5tXlsNNVSTKJca M+P24n3d9Za0p3xlIHa5vvWBfRW4/GVHTQwTx/VgPajQD4l+0D72B54QT72AcuI1 uWbqnrea+luc0yTB/CEtj3/ixTlDel+c0Jl7QLEZld+IicTr6VL0m9c/nR52aDAI 0Wa96UW6zKCrUVNj+PTvW2KqhPtT3oH4Qv59b/Q7BKG4Pp1ZFWUTGc5ZWZq05jGx itPzLDEaPs3konK2rWeyZsSq/dgXY7c= -----END CERTIFICATE-----Generated at Tue Jun 3 06:50:12 2025 by rpki-client