$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4671fcb-12ec-3568-b5ef-1b682aaae2c1.roa File: a4671fcb-12ec-3568-b5ef-1b682aaae2c1.roa (raw, json) Hash identifier: xWFoEzd3iuMEYhvbxSQIfIQ+cl1GfTmqgPnEzRotazg= Subject key identifier: BE:7F:96:95:D5:EF:92:52:7D:A2:35:26:AD:FC:51:5A:F7:C6:2A:FE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0711C07C77B5B54ED7ED00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4671fcb-12ec-3568-b5ef-1b682aaae2c1.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 76.21.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:11:c0:7c:77:b5:b5:4e:d7:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=1e1f3097-131f-4544-a1d2-22c6fd806a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:16:03:d6:02:70:2a:6f:ba:14:c8:61:8c:79: 87:00:18:b9:3d:43:31:c5:42:9a:bb:84:8a:e2:f0: 68:44:55:42:1e:b1:d8:ef:09:fd:8c:b8:a7:a5:d5: e5:e0:77:15:a9:0d:31:54:bf:1a:20:f6:5f:08:76: 10:eb:11:b3:95:fd:5c:3a:e6:54:0d:01:78:25:7b: 70:74:b2:0f:39:8b:9a:30:ba:0d:72:e0:95:60:c1: 86:fc:ce:d3:78:19:ac:b9:65:84:fd:bb:ce:d5:33: 18:15:fe:2b:b3:9f:69:55:c7:31:7e:cb:7d:e9:6b: 35:46:f6:53:75:75:d2:11:d5:d6:80:ec:e2:36:da: bc:7f:ce:e2:37:f3:84:8b:94:c4:84:2d:dd:0c:7f: f0:91:c2:d6:90:8c:22:02:8a:cb:a4:19:5a:41:2f: 4b:4b:fd:38:6b:63:75:e6:03:de:20:05:f0:5b:d8: 21:33:3f:29:9d:ae:b4:aa:e3:1a:19:97:9e:bb:9a: f4:d9:d7:ae:1f:9c:4e:83:22:9d:41:eb:ee:08:64: fd:6d:9b:77:89:32:55:9f:d1:85:c1:d3:9b:f4:85: 9f:06:95:f5:3f:b3:43:b7:ed:bf:4b:2d:32:50:dc: 07:51:73:23:c4:73:f9:70:a5:de:95:59:4b:e7:0d: bb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7F:96:95:D5:EF:92:52:7D:A2:35:26:AD:FC:51:5A:F7:C6:2A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a4671fcb-12ec-3568-b5ef-1b682aaae2c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.21.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:88:a9:7f:42:36:bd:b8:fc:ed:38:dc:98:23:d6:10:a5:cc: cc:0c:f7:f1:1c:69:80:00:9f:12:14:b3:25:a7:90:95:ca:89: 7a:99:6d:cc:97:55:82:0c:c5:1d:94:f0:65:66:6e:8a:1a:f8: 3c:77:41:a5:bd:13:bf:4e:b6:0a:07:8d:c1:ee:f6:91:f8:ed: d8:d1:59:6c:5e:9e:5d:d9:a9:83:69:b6:91:0f:0f:f5:03:95: d3:56:1c:4d:02:d7:64:4d:a2:ed:14:3f:75:84:d7:ea:3e:70: d5:c9:2b:89:55:3e:36:d9:f5:8a:fd:ff:aa:92:08:39:6a:13: ea:6a:60:97:43:ae:11:f8:66:10:97:ff:c7:99:94:97:7c:ed: c7:49:d9:0a:b4:92:bd:ab:a6:5a:bc:6e:16:64:d0:9a:04:18: e6:11:39:84:b3:5d:65:43:2e:79:b8:af:0f:e4:64:7c:ee:f6: c3:b7:a8:d2:84:19:a7:96:4c:9a:17:b8:f9:20:00:23:1e:83: 62:09:4b:a5:28:27:8f:b9:19:54:52:3b:77:1d:09:90:d2:70: 77:f0:63:b7:e9:85:47:aa:8a:72:67:7a:50:c6:c4:b8:73:c1: 69:40:1c:42:e4:e1:3e:f4:48:a0:a6:a4:bc:19:02:a0:f9:26: a0:89:bc:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBxHAfHe1tU7X7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MWUxZjMwOTctMTMxZi00NTQ0LWExZDItMjJjNmZkODA2YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBYD1gJwKm+6FMhhjHmHABi5PUMxxUKau4SK 4vBoRFVCHrHY7wn9jLinpdXl4HcVqQ0xVL8aIPZfCHYQ6xGzlf1cOuZUDQF4JXtw dLIPOYuaMLoNcuCVYMGG/M7TeBmsuWWE/bvO1TMYFf4rs59pVccxfst96Ws1RvZT dXXSEdXWgOziNtq8f87iN/OEi5TEhC3dDH/wkcLWkIwiAorLpBlaQS9LS/04a2N1 5gPeIAXwW9ghMz8pna60quMaGZeeu5r02deuH5xOgyKdQevuCGT9bZt3iTJVn9GF wdOb9IWfBpX1P7NDt+2/Sy0yUNwHUXMjxHP5cKXelVlL5w274wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5/lpXV75JSfaI1Jq38UVr3xir+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQ2NzFmY2ItMTJlYy0z NTY4LWI1ZWYtMWI2ODJhYWFlMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBVeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuIqX9CNr24/O043Jgj1hClzMwM9/EcaYAAnxIUsyWnkJXKiXqZbcyX VYIMxR2U8GVmbooa+Dx3QaW9E79OtgoHjcHu9pH47djRWWxenl3ZqYNptpEPD/UD ldNWHE0C12RNou0UP3WE1+o+cNXJK4lVPjbZ9Yr9/6qSCDlqE+pqYJdDrhH4ZhCX /8eZlJd87cdJ2Qq0kr2rplq8bhZk0JoEGOYROYSzXWVDLnm4rw/kZHzu9sO3qNKE GaeWTJoXuPkgACMeg2IJS6UoJ4+5GVRSO3cdCZDScHfwY7fphUeqinJnelDGxLhz wWlAHELk4T70SKCmpLwZAqD5JqCJvKQ= -----END CERTIFICATE-----Generated at Tue Jun 3 06:05:07 2025 by rpki-client