$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b08bf37f-44aa-3075-866b-3ed7f52ca677.roa File: b08bf37f-44aa-3075-866b-3ed7f52ca677.roa (raw, json) Hash identifier: TDTkAAeBiR6KRud4oiEOKWWhIb7A+WA4BzuDHfPuQLU= Subject key identifier: E6:DD:FB:C3:21:6A:10:09:A4:3A:7D:95:76:9B:C8:75:7E:3D:C7:EF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C0707991D6B113B9A5D1D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b08bf37f-44aa-3075-866b-3ed7f52ca677.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 76.102.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:07:99:1d:6b:11:3b:9a:5d:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=5be12d47-83cf-4cd8-a747-d838ae03d5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:33:ca:84:50:75:a5:08:5a:fb:9d:fb:e4:f3: 1a:30:f1:f3:6e:c9:18:a1:7e:98:2c:0e:2c:78:75: 82:92:e5:8a:26:5b:8f:db:71:5b:cb:2b:bf:28:06: a7:84:0e:b2:41:cf:6f:3c:30:a0:aa:e3:91:d7:be: a3:9e:84:a0:cb:ca:6f:87:76:54:aa:71:50:a6:1a: 1b:d5:1a:a6:3f:ab:7e:6c:4b:4f:84:be:6e:ec:7e: 69:fb:ac:16:0d:a9:02:74:1c:94:98:5d:37:07:9f: 24:58:9a:49:4b:4e:b4:9c:22:c7:2f:6f:65:31:c3: 17:10:3e:e9:18:db:28:89:a0:fb:8d:c9:d3:33:42: e3:78:c4:1a:fe:2b:74:10:cb:e6:07:58:64:62:58: a2:6a:68:1b:47:de:db:9b:38:42:c3:e5:88:40:e3: 71:dc:9e:58:cb:25:ac:6a:81:2b:7c:67:db:2c:43: 1f:b6:6c:8e:52:04:d1:17:2b:99:94:fe:ce:45:9a: 16:56:b9:06:fe:18:a7:89:a6:f1:6f:df:f3:a6:fd: ce:36:2d:07:5a:cd:39:3f:17:a9:d5:d9:f2:54:f2: 35:0b:cc:d3:cc:51:c3:79:57:da:dd:fe:fa:f5:39: 9d:46:bf:96:65:d4:0c:1e:25:92:94:c4:72:5f:49: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DD:FB:C3:21:6A:10:09:A4:3A:7D:95:76:9B:C8:75:7E:3D:C7:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b08bf37f-44aa-3075-866b-3ed7f52ca677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.102.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:58:1f:d3:bf:98:9c:aa:d1:25:7d:14:02:84:ae:88:3d:37: 9b:38:30:9d:e9:cc:22:c3:05:0a:05:54:bf:24:31:30:3a:e5: fc:64:2b:1a:21:79:c8:2c:9d:eb:b2:83:20:e2:52:42:14:e7: 56:0c:09:72:09:82:09:76:8b:5c:df:98:6b:90:f8:d9:af:b3: 97:7c:a6:7d:58:d7:d8:a1:ef:6f:53:18:a8:f5:a3:56:88:00: b9:cc:e0:b7:e6:4e:40:26:55:e6:fd:5e:39:69:0f:51:3b:48: 0c:74:ca:76:3d:c8:14:5f:5d:01:da:6e:84:a1:93:2a:da:88: 93:8f:6b:a0:d8:36:9a:6b:6a:55:7c:9f:05:01:2a:59:60:13: 24:8f:14:d2:71:48:bc:80:6c:a3:33:77:4c:0e:39:18:83:c6: 0f:a0:63:90:c2:f1:d1:e3:f1:3d:0e:ca:d4:85:68:0c:8f:7a: 10:89:81:21:1f:10:09:a0:0c:c3:d9:74:6a:e1:25:bc:5a:d2: 86:c5:c4:69:c1:39:6d:eb:b3:39:78:23:8e:51:0b:1c:89:e2: 74:39:a0:4b:e0:4b:15:76:3f:a7:a2:98:5f:18:8a:c2:0c:1d: 3c:f5:f6:e8:c0:b2:ce:aa:e0:23:e0:73:27:bf:92:2a:50:d9: 26:66:4c:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBweZHWsRO5pdHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NWJlMTJkNDctODNjZi00Y2Q4LWE3NDctZDgzOGFlMDNkNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjPKhFB1pQha+5375PMaMPHzbskYoX6YLA4s eHWCkuWKJluP23Fbyyu/KAanhA6yQc9vPDCgquOR176jnoSgy8pvh3ZUqnFQphob 1RqmP6t+bEtPhL5u7H5p+6wWDakCdByUmF03B58kWJpJS060nCLHL29lMcMXED7p GNsoiaD7jcnTM0LjeMQa/it0EMvmB1hkYliiamgbR97bmzhCw+WIQONx3J5YyyWs aoErfGfbLEMftmyOUgTRFyuZlP7ORZoWVrkG/hiniabxb9/zpv3ONi0HWs05Pxep 1dnyVPI1C8zTzFHDeVfa3f769TmdRr+WZdQMHiWSlMRyX0mMxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObd+8MhahAJpDp9lXabyHV+PcfvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjA4YmYzN2YtNDRhYS0z MDc1LTg2NmItM2VkN2Y1MmNhNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTGaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxYH9O/mJyq0SV9FAKErog9N5s4MJ3pzCLDBQoFVL8kMTA65fxkKxoh ecgsneuygyDiUkIU51YMCXIJggl2i1zfmGuQ+Nmvs5d8pn1Y19ih729TGKj1o1aI ALnM4LfmTkAmVeb9XjlpD1E7SAx0ynY9yBRfXQHaboShkyraiJOPa6DYNppralV8 nwUBKllgEySPFNJxSLyAbKMzd0wOORiDxg+gY5DC8dHj8T0OytSFaAyPehCJgSEf EAmgDMPZdGrhJbxa0obFxGnBOW3rszl4I45RCxyJ4nQ5oEvgSxV2P6eimF8YisIM HTz19ujAss6q4CPgcye/kipQ2SZmTIE= -----END CERTIFICATE-----Generated at Tue Jun 3 06:02:15 2025 by rpki-client