$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdbc77e-63a9-33e7-82a9-ed961105b025.roa File: dfdbc77e-63a9-33e7-82a9-ed961105b025.roa (raw, json) Hash identifier: QZcU946crDrFjzupJL3UIlc5xKU5GZpy3QzSL+V+qZg= Subject key identifier: 8D:AB:87:4F:1D:5C:1E:CC:2D:04:CB:9F:C1:A3:4E:2C:D3:31:B5:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A00DAE7C0B34DB4975CF21900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdbc77e-63a9-33e7-82a9-ed961105b025.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 33657 IP address blocks: 76.96.133.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:e7:c0:b3:4d:b4:97:5c:f2:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=fa52b1a1-7525-4eab-99bb-b28912e4d61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:60:70:96:f3:a7:ed:78:dd:cf:67:58:ad: af:1e:42:11:5d:06:aa:02:b9:74:5d:47:b0:26:ba: f7:87:34:b9:cd:c9:0d:dc:f3:c1:42:f8:6c:35:d6: 75:33:c6:a4:f1:64:25:7c:fc:38:2a:2d:a0:40:5b: 98:2d:2b:e6:72:18:86:eb:a3:b8:a3:8d:e6:86:3e: 08:5f:40:c0:71:eb:44:3d:db:77:da:07:0f:43:47: f6:11:14:d4:7b:6f:93:07:52:47:7f:42:7b:94:8e: 4b:8a:79:e5:c8:92:da:c6:cd:67:5f:5f:02:85:19: 21:d8:79:95:ec:63:8a:f4:5b:9a:2b:4e:f1:db:b2: 5a:05:f1:12:f2:84:ab:1d:0e:f9:c4:4d:0c:71:a7: c6:6a:27:a4:e0:6e:06:a7:04:f3:30:cc:09:b9:85: e4:39:f6:c1:d9:51:6a:ea:95:86:94:29:84:ec:26: 5b:11:7f:8c:95:fb:6e:f3:51:b3:7b:79:3c:b7:d6: 7f:16:3d:5f:2c:7d:65:47:46:b6:89:4c:b7:ae:c8: 71:b8:d8:f6:f7:da:62:af:09:3a:96:b7:4d:33:0f: 54:7b:90:39:4a:20:5b:d0:61:ed:4d:46:27:2a:d0: 26:e0:4d:2a:24:17:b5:95:74:12:03:12:59:56:d6: b2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AB:87:4F:1D:5C:1E:CC:2D:04:CB:9F:C1:A3:4E:2C:D3:31:B5:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfdbc77e-63a9-33e7-82a9-ed961105b025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.96.133.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:66:fa:fd:c5:b6:25:1d:c5:da:be:49:ac:1d:72:87:11:9e: 96:25:9a:10:87:70:51:9d:a2:00:da:53:1d:a8:2b:3c:4e:41: 01:dd:56:7d:19:63:74:c9:ba:2a:f1:21:b3:33:81:40:59:62: 6c:92:9a:3c:24:02:53:d3:e0:48:07:5b:a2:b1:31:80:14:8c: 67:de:d4:03:a3:90:18:2f:f3:27:b3:ce:a2:33:28:41:f9:5e: 98:e5:47:b3:a7:7c:fe:f4:96:53:57:8d:8a:58:08:c4:3b:17: a0:0a:9b:6c:34:57:d8:13:8d:44:7d:dd:b2:37:50:bf:26:a1: 6b:aa:8f:d1:70:0a:cd:a9:e1:c3:95:36:21:e1:c9:62:93:07: 7e:42:f1:81:ba:50:6d:8b:94:93:8a:52:97:59:f8:63:29:ae: 05:43:74:ef:bd:ba:9d:a8:94:fd:04:de:4f:8d:f4:50:73:cc: 03:e8:3a:17:e9:cc:ab:5b:cd:97:b1:6b:5d:72:3f:70:eb:29: 0a:71:d4:a5:c7:e1:72:36:c1:14:22:93:c5:40:88:df:dd:72: 16:10:82:5b:31:bb:83:49:2d:c4:29:4f:46:91:17:2a:33:a3: 18:c4:a0:59:26:de:b5:f0:31:9c:29:56:eb:c3:cd:b4:4a:ce: 3b:a4:38:85 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoA2ufAs020l1zyGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ZmE1MmIxYTEtNzUyNS00ZWFiLTk5YmItYjI4OTEyZTRkNjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqZgcJbzp+143c9nWK2vHkIRXQaqArl0XUew Jrr3hzS5zckN3PPBQvhsNdZ1M8ak8WQlfPw4Ki2gQFuYLSvmchiG66O4o43mhj4I X0DAcetEPdt32gcPQ0f2ERTUe2+TB1JHf0J7lI5LinnlyJLaxs1nX18ChRkh2HmV 7GOK9FuaK07x27JaBfES8oSrHQ75xE0McafGaiek4G4GpwTzMMwJuYXkOfbB2VFq 6pWGlCmE7CZbEX+Mlftu81Gze3k8t9Z/Fj1fLH1lR0a2iUy3rshxuNj299pirwk6 lrdNMw9Ue5A5SiBb0GHtTUYnKtAm4E0qJBe1lXQSAxJZVtaySQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI2rh08dXB7MLQTLn8GjTizTMbXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGZkYmM3N2UtNjNhOS0z M2U3LTgyYTktZWQ5NjExMDViMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUETGCFgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQByZvr9xbYlHcXavkmsHXKHEZ6WJZoQh3BRnaIA2lMdqCs8TkEB3VZ9 GWN0yboq8SGzM4FAWWJskpo8JAJT0+BIB1uisTGAFIxn3tQDo5AYL/Mns86iMyhB +V6Y5Uezp3z+9JZTV42KWAjEOxegCptsNFfYE41Efd2yN1C/JqFrqo/RcArNqeHD lTYh4clikwd+QvGBulBti5STilKXWfhjKa4FQ3TvvbqdqJT9BN5PjfRQc8wD6DoX 6cyrW82XsWtdcj9w6ykKcdSlx+FyNsEUIpPFQIjf3XIWEIJbMbuDSS3EKU9GkRcq M6MYxKBZJt618DGcKVbrw820Ss47pDiF -----END CERTIFICATE-----Generated at Wed Jun 4 23:57:39 2025 by rpki-client