$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec062dc3-1a58-35a8-a799-c3a7fe8e3acd.roa File: ec062dc3-1a58-35a8-a799-c3a7fe8e3acd.roa (raw, json) Hash identifier: cCeszw/NQ+kKoAd8/9NTJ8QgbRXrS+lq2CLju4ozytY= Subject key identifier: 67:E2:8A:13:A6:17:05:58:27:A6:D2:4F:2D:2D:2C:8E:AF:80:F6:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C07A7F3B9F54F9A01227300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec062dc3-1a58-35a8-a799-c3a7fe8e3acd.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33287 IP address blocks: 76.98.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:a7:f3:b9:f5:4f:9a:01:22:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=420205e5-051a-4965-8861-b27b931c07c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:46:b3:09:9f:e9:9f:9f:9e:69:ff:68:63: 41:3a:dc:ee:d8:94:25:c0:78:f4:2c:bc:b6:c9:46: 99:5f:b1:de:ae:e1:f6:89:3f:a4:bf:ae:34:17:03: 5d:cd:8c:63:6e:1e:1b:53:85:90:30:26:20:b4:bc: b2:8b:4c:a7:09:37:8e:53:16:95:fa:b8:f5:44:4a: c9:50:51:c9:b1:a8:14:09:af:81:ed:54:08:c9:56: b7:38:9e:b5:33:e0:f5:7a:a0:f8:ab:c0:48:0f:c1: 71:3e:71:d4:fa:9b:e4:37:5d:42:a9:af:29:8d:8f: ce:83:b0:ef:7a:df:8f:a1:3e:26:25:58:c6:c6:ca: 2d:a3:3a:a5:d1:8e:b8:0e:eb:74:ec:2f:5a:78:3b: 3b:ba:3e:37:94:55:49:f5:57:5d:c9:4c:87:82:85: bd:0b:5d:96:d0:f0:26:a7:60:13:81:0d:c3:25:72: bb:f3:90:9f:40:50:fb:1d:c3:e4:41:bf:0d:fc:09: 7a:b3:55:f1:fd:91:ce:92:30:04:68:25:87:de:98: fb:c1:3f:87:85:ba:bc:ff:c8:c6:ab:d3:54:6b:c1: 2d:43:a1:85:b8:f1:26:87:12:9a:12:66:ee:f1:23: 68:8b:30:39:52:a3:49:7d:16:64:d3:ab:22:5f:d4: 89:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E2:8A:13:A6:17:05:58:27:A6:D2:4F:2D:2D:2C:8E:AF:80:F6:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ec062dc3-1a58-35a8-a799-c3a7fe8e3acd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.98.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:10:7d:db:2f:6d:65:05:ea:18:7f:ac:a6:d1:3f:8e:3c:95: 75:71:25:10:90:c7:3f:46:47:24:ae:7c:7f:fc:89:8f:38:76: f3:82:b0:a0:21:a1:9b:02:6b:e6:89:3b:71:02:60:2c:f8:65: fc:ae:e6:e7:64:b6:3f:88:a2:6f:15:4a:9e:71:d7:a9:3f:12: 2c:e3:19:d1:ac:6b:48:d4:12:95:30:28:51:c9:f4:60:1d:18: c8:46:59:23:ec:03:2e:e9:a1:10:25:d3:86:2a:0d:e3:f8:ef: b6:b3:20:8c:fd:64:35:a4:af:83:59:7e:8c:fd:f6:d9:4b:b0: db:4b:3b:62:2c:18:91:5d:95:53:48:59:1f:3b:38:fd:09:c7: 8b:74:f9:0a:14:c2:79:43:fd:ef:13:fb:82:94:64:81:86:89: 42:81:b7:dc:70:e9:e9:38:21:c1:b9:67:2e:58:2d:58:bb:52: f9:e2:ff:a8:58:a4:4e:b8:80:44:29:4c:b3:3c:a8:a4:14:4e: ca:69:6a:6e:6b:a5:f3:de:c4:b8:19:3a:37:85:5e:5b:92:ea: 40:b0:ae:37:e9:5e:5c:35:23:74:a5:ac:8b:f3:d9:9b:ba:ad: e6:d8:25:94:da:e5:b2:bb:0e:3f:f0:d8:7a:f2:c9:da:98:2e: ba:f4:9d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB6fzufVPmgEicwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NDIwMjA1ZTUtMDUxYS00OTY1LTg4NjEtYjI3YjkzMWMwN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorBGswmf6Z+fnmn/aGNBOtzu2JQlwHj0LLy2 yUaZX7HeruH2iT+kv640FwNdzYxjbh4bU4WQMCYgtLyyi0ynCTeOUxaV+rj1RErJ UFHJsagUCa+B7VQIyVa3OJ61M+D1eqD4q8BID8FxPnHU+pvkN11Cqa8pjY/Og7Dv et+PoT4mJVjGxsotozql0Y64Dut07C9aeDs7uj43lFVJ9VddyUyHgoW9C12W0PAm p2ATgQ3DJXK785CfQFD7HcPkQb8N/Al6s1Xx/ZHOkjAEaCWH3pj7wT+Hhbq8/8jG q9NUa8EtQ6GFuPEmhxKaEmbu8SNoizA5UqNJfRZk06siX9SJqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfiihOmFwVYJ6bSTy0tLI6vgPa3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWMwNjJkYzMtMWE1OC0z NWE4LWE3OTktYzNhN2ZlOGUzYWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTGKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYQfdsvbWUF6hh/rKbRP448lXVxJRCQxz9GRySufH/8iY84dvOCsKAh oZsCa+aJO3ECYCz4Zfyu5udktj+Iom8VSp5x16k/EizjGdGsa0jUEpUwKFHJ9GAd GMhGWSPsAy7poRAl04YqDeP477azIIz9ZDWkr4NZfoz99tlLsNtLO2IsGJFdlVNI WR87OP0Jx4t0+QoUwnlD/e8T+4KUZIGGiUKBt9xw6ek4IcG5Zy5YLVi7Uvni/6hY pE64gEQpTLM8qKQUTsppam5rpfPexLgZOjeFXluS6kCwrjfpXlw1I3SlrIvz2Zu6 rebYJZTa5bK7Dj/w2HryydqYLrr0nWs= -----END CERTIFICATE-----Generated at Tue Jun 3 04:53:37 2025 by rpki-client