$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca00298f-fc86-37d1-9f1a-4daa3db7da87.roa File: ca00298f-fc86-37d1-9f1a-4daa3db7da87.roa (raw, json) Hash identifier: PGffJ2tlWO9dRp1txgilp18Rpi+EWtAg5S766N90HO8= Subject key identifier: 4C:56:EA:E3:E7:8A:7A:D9:4D:21:C1:9E:2C:F3:10:02:33:A9:8E:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D42FF0881614ADEAFEE2A480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca00298f-fc86-37d1-9f1a-4daa3db7da87.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33490 IP address blocks: 76.144.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:f0:88:16:14:ad:ea:fe:e2:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=f29a2dec-740e-4711-925e-b80d8b0d6a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:42:91:8a:2b:2e:31:8e:59:00:f0:f5:e2: f2:4a:c1:25:8d:e0:bd:d8:ea:75:9c:4b:d2:74:ac: 22:7b:28:17:af:08:5e:4e:fe:16:eb:4b:48:dc:d8: 68:29:e4:01:f8:65:dd:6c:bf:1d:34:fa:12:40:37: ce:a5:0e:bf:69:c5:2e:50:1a:16:57:36:4c:76:e2: 0b:d0:72:49:63:c4:dd:44:d8:9c:51:67:4f:74:64: 76:7d:c9:21:78:c7:10:1d:ea:c0:50:df:24:92:06: a4:4b:68:b6:ea:8c:1c:5d:fc:e2:50:07:08:fa:ea: c6:28:5d:0b:d0:06:17:e5:d8:97:5d:aa:ea:5d:b3: 3f:d8:62:e0:4b:d4:46:c3:1a:cb:b3:fc:3f:16:5b: 5b:f4:24:4f:05:9e:99:88:17:bf:e4:92:b6:bc:12: 90:e9:05:ae:05:b0:e2:ed:ed:9a:8f:d9:70:51:49: ef:7e:fc:47:8e:b9:8c:9f:af:ac:74:56:94:20:c5: 7c:6f:f5:16:78:6b:45:0c:58:8a:85:79:b0:21:76: 3c:bc:69:4e:b0:84:b0:bc:65:d3:4b:77:68:76:2a: 2a:34:de:0c:78:bf:93:d5:6d:d9:22:0d:ee:00:a5: be:51:3a:81:74:cb:48:eb:cf:96:e8:ef:d0:e2:68: 63:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:56:EA:E3:E7:8A:7A:D9:4D:21:C1:9E:2C:F3:10:02:33:A9:8E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca00298f-fc86-37d1-9f1a-4daa3db7da87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.144.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:01:21:fb:c4:62:f7:be:02:27:71:d2:71:81:ae:ec:12:d4: 5d:d7:ad:5a:66:ea:9b:a6:6a:de:d6:10:96:f3:48:b9:60:c5: 54:e3:19:33:a6:23:fd:c9:41:97:4a:dc:7a:99:0f:ce:7f:6d: be:fa:b2:c6:fe:38:61:28:01:50:09:ce:1d:4a:cd:e8:c4:a7: d8:19:ed:fa:76:14:b0:ff:9f:90:af:c6:0f:88:ae:21:3e:e9: 43:7a:e1:28:bb:0d:86:e5:97:af:e2:f4:e7:de:53:c2:01:5b: 5d:7a:50:1c:1f:50:10:e6:bc:fe:4d:d1:61:72:ab:21:27:86: f7:f3:de:1f:58:cf:50:10:e3:96:dc:3e:4e:3e:69:18:08:ff: a5:96:8b:63:05:fc:4c:25:30:f1:90:8c:2b:e5:c2:ff:2a:f5: dd:3c:f3:27:8d:6a:4f:5d:14:b7:57:5a:b7:c4:c3:12:03:d0: d1:b5:9d:63:2b:1a:a4:03:1e:d2:84:ad:01:6d:b0:43:5e:0a: 91:41:4b:f9:88:c0:6d:6f:05:11:aa:39:79:5e:4f:8d:90:19: 64:7e:8e:9b:f5:16:49:ec:9f:b6:bc:2b:6b:68:87:eb:cf:c9: 0b:cd:36:d0:4d:19:17:e9:70:74:55:01:88:9c:77:39:2f:87: 57:1b:0f:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL/CIFhSt6v7ipIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjI5YTJkZWMtNzQwZS00NzExLTkyNWUtYjgwZDhiMGQ2YTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+dCkYorLjGOWQDw9eLySsEljeC92Op1nEvS dKwieygXrwheTv4W60tI3NhoKeQB+GXdbL8dNPoSQDfOpQ6/acUuUBoWVzZMduIL 0HJJY8TdRNicUWdPdGR2fckheMcQHerAUN8kkgakS2i26owcXfziUAcI+urGKF0L 0AYX5diXXarqXbM/2GLgS9RGwxrLs/w/Fltb9CRPBZ6ZiBe/5JK2vBKQ6QWuBbDi 7e2aj9lwUUnvfvxHjrmMn6+sdFaUIMV8b/UWeGtFDFiKhXmwIXY8vGlOsISwvGXT S3dodioqNN4MeL+T1W3ZIg3uAKW+UTqBdMtI68+W6O/Q4mhjnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExW6uPninrZTSHBnizzEAIzqY5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2EwMDI5OGYtZmM4Ni0z N2QxLTlmMWEtNGRhYTNkYjdkYTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJC4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIBIfvEYve+Aidx0nGBruwS1F3XrVpm6pumat7WEJbzSLlgxVTjGTOm I/3JQZdK3HqZD85/bb76ssb+OGEoAVAJzh1KzejEp9gZ7fp2FLD/n5Cvxg+IriE+ 6UN64Si7DYbll6/i9OfeU8IBW116UBwfUBDmvP5N0WFyqyEnhvfz3h9Yz1AQ45bc Pk4+aRgI/6WWi2MF/EwlMPGQjCvlwv8q9d088yeNak9dFLdXWrfEwxID0NG1nWMr GqQDHtKErQFtsENeCpFBS/mIwG1vBRGqOXleT42QGWR+jpv1Fknsn7a8K2toh+vP yQvNNtBNGRfpcHRVAYicdzkvh1cbD/E= -----END CERTIFICATE-----Generated at Tue Jun 3 06:13:05 2025 by rpki-client