$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc0c4657-bc64-3ac0-82fd-e88e8b243b98.roa File: bc0c4657-bc64-3ac0-82fd-e88e8b243b98.roa (raw, json) Hash identifier: XjEDsbwCjUmuGzDx4f4EkzMeZucx6myhC5JdkFxvSbQ= Subject key identifier: BE:5E:F9:83:60:A8:C2:1F:3B:F8:79:61:52:FE:C7:A7:0B:4E:6D:A3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06D7890F9F638FB4D3BF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc0c4657-bc64-3ac0-82fd-e88e8b243b98.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 67.170.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:d7:89:0f:9f:63:8f:b4:d3:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=a9ec7eb6-9b5a-49b1-a89c-e77eceb76edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:48:80:d1:a3:68:dc:9f:6d:c6:28:cc:83:77: ea:93:16:ad:85:e7:79:9f:11:bb:c1:57:2d:14:6a: 01:30:7c:59:f2:3e:35:39:e9:80:2d:37:d5:00:d1: 0a:17:73:04:f7:98:9a:18:1a:7b:b4:e3:d9:47:9b: 7a:bf:a8:96:1e:72:f2:13:fe:2b:1b:0d:12:ac:a7: 0e:17:92:44:14:ef:a5:ed:51:83:23:3b:ca:67:12: dd:d7:94:a2:e2:2e:42:5a:1d:f9:89:38:85:cf:ec: 14:2e:7e:2d:07:f0:53:43:2f:9d:d2:05:dc:8d:94: fe:2f:b6:c5:0a:18:7e:f2:0e:a5:42:4a:99:72:65: 7c:0f:03:6b:9c:83:13:fb:a3:7a:24:66:ff:57:9b: 1c:07:a5:14:a2:d3:0d:24:80:6d:34:13:0f:a3:bf: 1a:68:58:bc:6b:36:78:44:1e:8c:d2:97:80:5a:97: 9b:44:97:b5:76:9f:e3:dc:58:8c:0c:dc:f0:55:51: 9d:48:da:c5:c6:25:7b:9b:46:06:e8:68:5f:1d:d1: e9:97:5f:23:99:38:69:f8:34:8b:38:4d:e5:57:5b: 23:76:e6:22:99:3e:73:bf:1e:5a:fe:0e:82:3c:d8: b2:85:88:ef:1c:dd:58:65:1f:43:f9:a2:b1:1f:cc: eb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5E:F9:83:60:A8:C2:1F:3B:F8:79:61:52:FE:C7:A7:0B:4E:6D:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc0c4657-bc64-3ac0-82fd-e88e8b243b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.170.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:9a:ff:f8:98:b2:dc:b6:ca:12:19:96:14:48:ed:bc:b6:c0: 14:b2:65:8f:21:94:75:40:77:c1:34:54:4f:92:e4:63:eb:2b: 22:55:e2:8d:87:1a:52:43:d1:d2:4b:66:e2:e4:51:9f:4a:43: 3c:f6:16:81:45:68:d2:c3:00:99:9b:8a:82:60:33:c8:09:cc: 67:f2:64:a5:0e:11:57:6c:83:e5:fa:ec:fc:5e:24:df:26:32: d6:ec:4a:75:bb:06:75:7b:1d:49:bd:b5:80:58:83:82:22:4b: 16:86:9b:41:f5:8d:e0:11:5a:4b:7e:ff:1b:22:8d:a8:86:6d: 55:f0:9a:fe:93:e4:01:20:a5:c5:81:48:0e:1e:d7:87:1c:3a: ba:d2:7c:92:46:a8:26:70:60:29:17:b6:97:ef:77:56:57:0b: 60:6a:1c:bb:55:dc:19:a0:1d:02:64:c6:2d:eb:8b:86:d0:d0: 15:4f:d7:cc:cd:cb:e7:38:1a:5d:75:39:ef:25:17:40:f2:ba: 70:19:b8:e6:bd:c4:df:bf:ae:65:a5:95:73:80:29:9e:98:b2: c0:d8:a1:63:34:2d:b6:b6:70:3e:25:c0:6f:89:1c:17:bc:c9: 06:99:40:88:62:e9:4b:dd:2c:f4:8c:9d:cf:a6:d2:bf:2d:6c: 72:3b:f6:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBteJD59jj7TTv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YTllYzdlYjYtOWI1YS00OWIxLWE4OWMtZTc3ZWNlYjc2ZWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkiA0aNo3J9txijMg3fqkxathed5nxG7wVct FGoBMHxZ8j41OemALTfVANEKF3ME95iaGBp7tOPZR5t6v6iWHnLyE/4rGw0SrKcO F5JEFO+l7VGDIzvKZxLd15Si4i5CWh35iTiFz+wULn4tB/BTQy+d0gXcjZT+L7bF Chh+8g6lQkqZcmV8DwNrnIMT+6N6JGb/V5scB6UUotMNJIBtNBMPo78aaFi8azZ4 RB6M0peAWpebRJe1dp/j3FiMDNzwVVGdSNrFxiV7m0YG6GhfHdHpl18jmThp+DSL OE3lV1sjduYimT5zvx5a/g6CPNiyhYjvHN1YZR9D+aKxH8zrTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5e+YNgqMIfO/h5YVL+x6cLTm2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmMwYzQ2NTctYmM2NC0z YWMwLTgyZmQtZTg4ZThiMjQzYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ6rYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKa//iYsty2yhIZlhRI7by2wBSyZY8hlHVAd8E0VE+S5GPrKyJV4o2H GlJD0dJLZuLkUZ9KQzz2FoFFaNLDAJmbioJgM8gJzGfyZKUOEVdsg+X67PxeJN8m MtbsSnW7BnV7HUm9tYBYg4IiSxaGm0H1jeARWkt+/xsijaiGbVXwmv6T5AEgpcWB SA4e14ccOrrSfJJGqCZwYCkXtpfvd1ZXC2BqHLtV3BmgHQJkxi3ri4bQ0BVP18zN y+c4Gl11Oe8lF0DyunAZuOa9xN+/rmWllXOAKZ6YssDYoWM0Lba2cD4lwG+JHBe8 yQaZQIhi6UvdLPSMnc+m0r8tbHI79pE= -----END CERTIFICATE-----Generated at Tue Jun 3 05:04:14 2025 by rpki-client