$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a744a4f7-8807-3704-b342-04d32c308f2a.roa File: a744a4f7-8807-3704-b342-04d32c308f2a.roa (raw, json) Hash identifier: 6o+Mftrb7mtoAlcxB72YcYSRPKrgbKu1+erAo4jwtA0= Subject key identifier: D2:33:7A:E3:2C:55:4A:B3:AB:FA:AD:98:8F:67:18:5C:B4:FE:22:2C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D431D34CDA2F3E2998653780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a744a4f7-8807-3704-b342-04d32c308f2a.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7015 IP address blocks: 76.152.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:d3:4c:da:2f:3e:29:98:65:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=d7c10aa5-8e87-483e-b042-d1222836a307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d5:ac:f5:04:ea:c2:fa:d7:1e:e7:8d:71:9b: 4c:c7:5e:80:ea:e5:6e:9a:68:77:ff:e3:43:35:ed: b4:39:19:b9:74:81:f0:3a:d2:52:22:45:8b:86:97: 12:e2:7d:2d:67:01:d5:a4:08:ea:0d:3b:7f:00:3c: 52:4f:57:b6:64:65:4e:47:d4:a1:d2:84:4c:30:40: 9b:c3:24:f5:df:bb:4d:f9:9a:ec:fe:90:84:10:f8: 44:c0:30:ba:ca:f0:27:3a:b2:14:28:50:94:4f:00: 83:d0:05:c1:02:25:1e:8d:3b:88:55:21:be:56:ff: 79:b3:09:f2:d1:dd:36:53:c5:cf:4f:b9:f2:55:7a: 31:a8:f2:cf:d8:67:55:3b:bb:06:36:ed:d4:02:ad: 97:13:fb:30:47:54:dc:43:a5:57:40:f6:a8:2a:42: c7:9b:94:df:0b:54:60:c8:8a:05:dd:fa:ee:14:aa: 2e:3c:cf:8c:82:0a:cc:d6:6f:bb:46:34:c0:3a:31: 1f:8c:0b:c5:ab:7e:8a:93:a9:ed:3d:84:93:8a:95: b6:62:cd:5c:23:17:7e:0a:32:74:d7:91:2e:95:5f: 11:9c:7e:91:9c:1a:a4:28:a5:ec:27:67:fa:79:92: e2:8b:82:9b:a6:51:37:3b:fe:5e:c0:e2:d6:16:4e: fb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:33:7A:E3:2C:55:4A:B3:AB:FA:AD:98:8F:67:18:5C:B4:FE:22:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a744a4f7-8807-3704-b342-04d32c308f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.152.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:b6:e3:80:05:aa:3b:c3:e6:ab:45:d2:44:b7:31:30:ee:45: f5:a5:6f:8c:a6:a5:2f:5a:d5:42:54:38:69:78:53:56:c3:94: 56:be:d2:30:1e:07:9a:5c:b4:2f:f2:4a:35:51:ea:cd:76:0c: 60:39:0e:f1:21:31:69:59:16:6b:a6:9b:4b:47:7e:66:3d:68: 42:2c:42:61:75:e6:59:29:39:aa:32:c5:3d:b5:2c:1f:cd:60: 58:e9:5d:72:b8:94:a7:9f:8e:15:2f:08:68:d5:e7:35:29:62: 02:71:c2:59:39:b8:cb:ce:e1:95:fd:13:31:ef:9d:99:98:9c: 18:fa:13:7f:c7:93:39:3b:ee:af:3b:80:c3:0f:6a:2f:8b:56: 56:a9:95:10:0f:33:e7:cb:64:33:f8:81:0a:c9:a7:f8:21:74: be:b5:a2:92:02:54:c4:58:bc:41:e1:40:d5:e7:7c:f6:8f:55: aa:cc:44:60:21:8d:e5:80:94:ce:c0:bc:98:d4:c0:40:fd:38: fe:b2:8e:6a:26:bd:5e:8c:bf:18:3b:44:c2:1a:94:f6:02:4d: c8:2a:b4:d2:e2:57:18:f3:61:d3:91:bf:dc:ac:49:a0:a1:bf: 3c:42:a0:4a:55:52:30:91:82:a2:b1:5c:0a:3d:2a:40:2f:37: 12:01:6a:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMdNM2i8+KZhlN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDdjMTBhYTUtOGU4Ny00ODNlLWIwNDItZDEyMjI4MzZhMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNWs9QTqwvrXHueNcZtMx16A6uVummh3/+ND Ne20ORm5dIHwOtJSIkWLhpcS4n0tZwHVpAjqDTt/ADxST1e2ZGVOR9Sh0oRMMECb wyT137tN+Zrs/pCEEPhEwDC6yvAnOrIUKFCUTwCD0AXBAiUejTuIVSG+Vv95swny 0d02U8XPT7nyVXoxqPLP2GdVO7sGNu3UAq2XE/swR1TcQ6VXQPaoKkLHm5TfC1Rg yIoF3fruFKouPM+MggrM1m+7RjTAOjEfjAvFq36Kk6ntPYSTipW2Ys1cIxd+CjJ0 15EulV8RnH6RnBqkKKXsJ2f6eZLii4KbplE3O/5ewOLWFk77YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIzeuMsVUqzq/qtmI9nGFy0/iIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTc0NGE0ZjctODgwNy0z NzA0LWIzNDItMDRkMzJjMzA4ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALq244AFqjvD5qtF0kS3MTDuRfWlb4ympS9a1UJUOGl4U1bDlFa+0jAe B5pctC/ySjVR6s12DGA5DvEhMWlZFmumm0tHfmY9aEIsQmF15lkpOaoyxT21LB/N YFjpXXK4lKefjhUvCGjV5zUpYgJxwlk5uMvO4ZX9EzHvnZmYnBj6E3/Hkzk77q87 gMMPai+LVlaplRAPM+fLZDP4gQrJp/ghdL61opICVMRYvEHhQNXnfPaPVarMRGAh jeWAlM7AvJjUwED9OP6yjmomvV6Mvxg7RMIalPYCTcgqtNLiVxjzYdORv9ysSaCh vzxCoEpVUjCRgqKxXAo9KkAvNxIBaoM= -----END CERTIFICATE-----Generated at Tue Jun 3 05:51:14 2025 by rpki-client