$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a657da94-061f-3a45-aed6-c0064ec9c534.roa File: a657da94-061f-3a45-aed6-c0064ec9c534.roa (raw, json) Hash identifier: u+PQ0sUfMGLLtDKFMHejujjZW5StPhfGdcxFx8PzTT0= Subject key identifier: 03:6B:46:FB:39:79:A9:D3:F6:0E:FD:6B:E9:A7:ED:C4:A9:BD:3D:2C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4310B7492F83332C4D95500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a657da94-061f-3a45-aed6-c0064ec9c534.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 76.143.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:0b:74:92:f8:33:32:c4:d9:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=8f245009-38de-4501-af42-8dd21d924282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fa:3e:5b:6f:7e:8c:bb:66:14:1d:56:f2:2e: 40:28:5f:cc:8e:2c:cf:10:71:c4:97:cc:10:e5:88: e8:50:44:88:7f:14:b1:c7:03:e6:e9:c2:6b:e8:ae: bb:b1:43:0e:74:c7:c3:10:e0:54:e4:c1:d3:be:ba: 59:bc:0f:46:34:41:53:80:b9:c5:9c:60:60:d3:68: ae:1c:1a:8f:b0:9a:53:c8:53:10:5f:bb:29:1d:dc: d9:87:7e:c8:9c:00:e2:48:de:81:cd:a1:e9:fd:7f: a7:84:c2:4b:7e:d7:7c:b7:d7:b1:9c:7f:d8:f0:f2: a7:39:49:82:ad:a3:ff:0b:1f:8d:f4:a6:61:58:c0: 07:6c:da:4d:eb:38:5b:d2:4c:07:f1:61:f0:93:f8: 4f:52:c7:a4:03:68:ce:5a:cf:fc:24:58:4a:8c:8f: 2a:c5:12:05:40:ec:ea:39:b9:73:5a:40:bb:bd:b2: ea:f0:af:30:ee:c3:d1:85:79:02:f9:ad:9b:22:fa: 03:99:30:ae:94:c2:87:87:ff:7b:37:25:14:33:e2: 71:e8:db:9f:ac:fe:55:48:ac:1e:af:57:3d:af:57: e0:0a:7e:3b:01:b0:cc:ea:17:f2:40:4b:39:47:ee: 57:4d:a2:24:51:2a:38:48:09:9e:e8:ee:04:5d:0b: 28:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6B:46:FB:39:79:A9:D3:F6:0E:FD:6B:E9:A7:ED:C4:A9:BD:3D:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a657da94-061f-3a45-aed6-c0064ec9c534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.143.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:66:b5:45:9a:b6:e4:88:85:50:bf:6d:84:90:e6:94:99:f9: 37:74:93:cf:16:cb:a4:b1:73:3d:17:1a:16:67:bc:d8:4f:82: 35:32:4d:b1:e8:4f:0d:49:3f:3c:e5:85:66:7c:45:bd:07:bf: 38:82:a1:69:d4:41:96:51:b9:37:84:58:2b:16:29:9f:a9:70: e0:eb:a5:09:43:fc:aa:d7:f6:9e:ed:72:fe:ea:c0:88:8c:d3: 1d:fe:69:84:72:4b:a0:7b:c1:1e:91:c1:0f:06:75:15:70:53: 50:da:5a:cf:c7:df:f7:da:24:24:c7:59:0d:ec:1a:78:4c:b1: d9:54:a6:88:e8:9e:eb:86:6a:c9:86:d3:2a:c1:5c:6c:eb:64: 59:cf:63:25:92:a2:64:c9:83:cb:d7:6d:43:dc:a5:98:cf:18: 20:5a:db:d4:ce:c3:7a:d0:d1:73:b4:27:5c:7d:36:7b:45:e2: 51:96:a3:46:71:5f:63:f5:07:83:b9:fc:f4:8c:9f:08:b7:1c: 89:20:ca:a6:f9:36:a3:ad:ba:01:f3:14:c5:12:2c:5c:01:1e: cf:5a:bf:4e:bf:bf:c7:b2:f2:13:1d:5a:86:75:96:5e:ac:31: 0a:7c:41:55:f3:87:19:5f:42:fa:71:21:65:64:67:bb:cf:64: 46:ad:9b:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMQt0kvgzMsTZVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OGYyNDUwMDktMzhkZS00NTAxLWFmNDItOGRkMjFkOTI0MjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPo+W29+jLtmFB1W8i5AKF/MjizPEHHEl8wQ 5YjoUESIfxSxxwPm6cJr6K67sUMOdMfDEOBU5MHTvrpZvA9GNEFTgLnFnGBg02iu HBqPsJpTyFMQX7spHdzZh37InADiSN6BzaHp/X+nhMJLftd8t9exnH/Y8PKnOUmC raP/Cx+N9KZhWMAHbNpN6zhb0kwH8WHwk/hPUsekA2jOWs/8JFhKjI8qxRIFQOzq OblzWkC7vbLq8K8w7sPRhXkC+a2bIvoDmTCulMKHh/97NyUUM+Jx6NufrP5VSKwe r1c9r1fgCn47AbDM6hfyQEs5R+5XTaIkUSo4SAme6O4EXQsoNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANrRvs5eanT9g79a+mn7cSpvT0sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTY1N2RhOTQtMDYxZi0z YTQ1LWFlZDYtYzAwNjRlYzljNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTI8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANtmtUWatuSIhVC/bYSQ5pSZ+Td0k88Wy6Sxcz0XGhZnvNhPgjUyTbHo Tw1JPzzlhWZ8Rb0HvziCoWnUQZZRuTeEWCsWKZ+pcODrpQlD/KrX9p7tcv7qwIiM 0x3+aYRyS6B7wR6RwQ8GdRVwU1DaWs/H3/faJCTHWQ3sGnhMsdlUpojonuuGasmG 0yrBXGzrZFnPYyWSomTJg8vXbUPcpZjPGCBa29TOw3rQ0XO0J1x9NntF4lGWo0Zx X2P1B4O5/PSMnwi3HIkgyqb5NqOtugHzFMUSLFwBHs9av06/v8ey8hMdWoZ1ll6s MQp8QVXzhxlfQvpxIWVkZ7vPZEatm0o= -----END CERTIFICATE-----Generated at Wed Jun 4 22:51:26 2025 by rpki-client