$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd21c3a-cafe-3968-a20f-d50966ad851b.roa File: bfd21c3a-cafe-3968-a20f-d50966ad851b.roa (raw, json) Hash identifier: C6sv+yfpk8zVxwywiWtgZnxhcXF6JW1cyqCXTh+BT5s= Subject key identifier: 43:54:46:BF:68:76:59:A8:B2:7D:78:05:42:1F:CB:AC:00:A2:B3:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C08540A1BBBCF7427D20380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd21c3a-cafe-3968-a20f-d50966ad851b.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 76.157.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:54:0a:1b:bb:cf:74:27:d2:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=391aa16e-ba59-41bf-8d8f-a559089270c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:a5:c5:2f:c2:48:7c:c8:5e:68:ea:9e:7c: 60:bb:8c:d7:dd:29:0c:37:c8:4d:58:64:79:67:5c: 25:da:6b:37:16:9d:91:20:30:63:05:dd:7c:d4:43: c5:8f:ef:c6:41:75:84:5d:03:36:84:45:4b:5c:08: b6:c0:d3:06:07:13:db:49:5b:92:ff:52:1f:83:63: 77:ea:b3:38:1b:19:72:0c:86:16:42:1e:23:b6:24: ba:a4:09:7a:0c:00:17:9e:b8:fb:3d:31:f6:42:b2: eb:3a:56:95:bd:32:e9:fd:61:ab:e6:86:cf:8a:f3: fb:0a:f1:4c:ce:46:fe:9f:4b:73:7a:b8:31:fb:0e: 70:42:96:6d:cc:14:c9:d2:b9:36:63:e7:4f:97:f2: 1c:6f:a9:2e:ce:95:90:36:c8:19:da:55:31:b4:60: b0:6d:49:f0:44:fb:d5:9b:c7:9e:52:1a:cc:9f:de: 4b:c5:2b:94:3b:a4:c8:66:19:5a:56:3c:84:94:de: e7:3e:70:b6:e6:c8:19:17:a6:73:2e:33:21:84:eb: 61:af:ed:07:f2:db:09:da:e0:29:17:d8:23:be:7b: ef:9e:97:f3:44:7a:53:1a:f1:f4:b1:c0:20:21:16: e9:85:38:6a:44:a7:7c:23:4a:48:ef:cd:dd:7f:66: b6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:54:46:BF:68:76:59:A8:B2:7D:78:05:42:1F:CB:AC:00:A2:B3:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd21c3a-cafe-3968-a20f-d50966ad851b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.157.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:b2:db:7d:5f:d4:83:99:07:79:86:a7:7b:1d:73:c6:23:e9: 30:6e:0a:4f:38:e5:26:ca:2c:0c:cb:e6:ea:d7:96:81:ad:10: 61:0b:61:72:13:1a:33:f2:e0:ba:88:ba:90:e6:49:7e:92:f6: 0f:e2:71:6a:61:85:ce:5d:a5:2c:e4:44:de:83:6d:53:83:56: a9:d2:02:b3:53:f7:c1:3d:76:5e:95:32:9a:f5:f0:9e:12:12: 59:dc:f5:fd:0d:40:28:35:ce:21:79:d4:1a:0d:d6:53:f7:e7: d3:29:3d:ae:9f:50:b9:dd:6c:df:58:86:bf:21:7b:97:cd:19: 60:9f:b9:4b:60:40:09:40:17:c0:5e:7b:0a:df:46:08:4d:10: 6c:62:2d:68:49:21:86:b2:1f:d9:3c:de:2f:a8:06:6a:b7:52: 80:4c:a0:1f:e8:05:71:35:3b:99:58:74:1e:9e:ce:ca:3d:c4: 63:52:82:8f:c5:66:1f:6c:71:f6:51:f9:cf:53:65:06:a5:9f: 24:a2:04:50:73:70:17:54:0a:72:ae:e3:5f:6b:ff:5e:19:ce: 7b:b7:86:ec:d6:25:50:18:64:37:f3:9d:d4:73:4f:bc:7b:d4: dd:40:90:ef:f6:85:6d:b6:f5:71:01:d1:13:e6:18:59:f9:b0: b1:01:6e:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCFQKG7vPdCfSA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MzkxYWExNmUtYmE1OS00MWJmLThkOGYtYTU1OTA4OTI3MGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNWlxS/CSHzIXmjqnnxgu4zX3SkMN8hNWGR5 Z1wl2ms3Fp2RIDBjBd181EPFj+/GQXWEXQM2hEVLXAi2wNMGBxPbSVuS/1Ifg2N3 6rM4GxlyDIYWQh4jtiS6pAl6DAAXnrj7PTH2QrLrOlaVvTLp/WGr5obPivP7CvFM zkb+n0tzergx+w5wQpZtzBTJ0rk2Y+dPl/Icb6kuzpWQNsgZ2lUxtGCwbUnwRPvV m8eeUhrMn95LxSuUO6TIZhlaVjyElN7nPnC25sgZF6ZzLjMhhOthr+0H8tsJ2uAp F9gjvnvvnpfzRHpTGvH0scAgIRbphThqRKd8I0pI783df2a2hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENURr9odlmosn14BUIfy6wAorNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZkMjFjM2EtY2FmZS0z OTY4LWEyMGYtZDUwOTY2YWQ4NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJ1cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyy231f1IOZB3mGp3sdc8Yj6TBuCk845SbKLAzL5urXloGtEGELYXIT GjPy4LqIupDmSX6S9g/icWphhc5dpSzkRN6DbVODVqnSArNT98E9dl6VMpr18J4S Elnc9f0NQCg1ziF51BoN1lP359MpPa6fULndbN9Yhr8he5fNGWCfuUtgQAlAF8Be ewrfRghNEGxiLWhJIYayH9k83i+oBmq3UoBMoB/oBXE1O5lYdB6ezso9xGNSgo/F Zh9scfZR+c9TZQalnySiBFBzcBdUCnKu419r/14Zznu3huzWJVAYZDfzndRzT7x7 1N1AkO/2hW229XEB0RPmGFn5sLEBbqA= -----END CERTIFICATE-----Generated at Tue Jun 3 05:55:49 2025 by rpki-client