$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7a8baf3-cafd-3b1d-b21a-dda7ae5e530b.roa File: f7a8baf3-cafd-3b1d-b21a-dda7ae5e530b.roa (raw, json) Hash identifier: WnKLaZj2dHPl0ABxafP0Bb+92dBmX48sEgeYJQoSUZo= Subject key identifier: 03:F7:68:33:A7:A6:8D:2D:D2:DD:8C:17:82:7A:40:32:8A:94:19:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C07CE8FD76DF6D2BE808C40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7a8baf3-cafd-3b1d-b21a-dda7ae5e530b.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 67.165.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:ce:8f:d7:6d:f6:d2:be:80:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=b27cfab2-3bd0-4bb3-ba1f-660a1744c457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b8:b7:0c:f9:51:39:fd:91:6e:ec:16:11:86: ad:83:40:05:06:60:34:4f:42:a7:f5:81:b1:35:cf: 12:bc:fd:0e:bf:fb:d9:3a:a2:d4:7c:85:5f:7a:1e: 28:55:1a:21:ad:af:ad:8c:1e:db:c8:19:fe:ad:b6: ee:be:99:66:1a:ca:67:f9:c8:10:d1:99:a7:9a:05: a6:52:9a:77:36:77:48:42:ce:42:dc:a0:db:13:3e: 08:45:21:1c:4e:c4:e2:89:62:bd:cc:fb:f7:44:f2: 2a:41:30:05:da:2c:92:ff:72:b1:79:95:7d:90:47: be:18:14:13:fa:48:98:9b:4a:d6:dd:d5:bb:73:2f: b5:ee:d9:11:f4:7b:3f:9b:a7:69:5e:f8:2a:a1:12: d4:bb:7e:43:0e:d3:02:9e:24:72:42:86:30:24:5a: 76:47:8b:e3:b1:0a:f2:47:e5:a5:a1:79:dd:5b:6d: 92:0e:59:d0:f8:c8:77:75:73:b2:8a:ff:df:f5:52: 4e:e3:92:8a:f8:7f:e0:ac:ad:55:c5:62:36:03:84: f3:48:96:39:61:80:16:67:b5:b4:83:5b:e8:90:d4: 2b:35:a3:e1:f4:5c:dc:84:46:94:41:4e:b1:9e:72: 8c:79:24:d4:29:7f:4c:8e:56:d8:5d:bc:1d:43:e6: 48:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F7:68:33:A7:A6:8D:2D:D2:DD:8C:17:82:7A:40:32:8A:94:19:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7a8baf3-cafd-3b1d-b21a-dda7ae5e530b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.165.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:82:0f:61:1a:ff:fd:6e:f4:95:33:d3:e0:5a:34:e3:3a:32: c5:66:f7:76:d3:91:89:81:68:f4:ee:05:68:96:60:cb:0c:f2: f9:d3:96:a7:cf:ef:22:f9:12:d1:70:39:81:fd:0a:ba:d0:e9: 10:82:a9:e6:f3:af:86:f9:a6:ad:92:1d:cf:f6:18:4a:c6:65: a9:7c:e2:2d:83:00:4a:d8:99:f5:c7:04:42:d4:04:4d:ab:7d: 0f:3b:bf:57:1e:25:b7:5d:a3:5c:0a:65:8b:3f:15:df:93:c5: 80:61:18:fc:de:c8:82:b8:9e:dd:21:45:60:87:11:70:cd:86: 5a:78:b8:07:41:1e:2f:ce:97:80:29:d1:e6:e5:d6:e1:3a:88: f8:08:46:13:3d:76:1f:1f:71:06:55:96:ad:19:c0:89:46:3c: 61:12:81:02:52:8e:6b:fb:c4:f7:3e:9d:a6:07:7e:3c:90:7e: c0:f9:5f:ed:5e:36:e6:e3:ba:93:8d:9c:22:29:24:6c:b3:62: 9f:40:a5:f8:e6:3a:10:fe:ba:ac:c2:91:7d:e9:23:57:96:a2: 6a:a7:76:49:96:91:8b:43:14:bb:88:a0:ed:50:da:f4:ae:9d: 88:fa:80:bf:78:a2:33:39:d4:42:af:2a:50:c7:87:c0:c1:35: b8:50:30:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMB86P12320r6AjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YjI3Y2ZhYjItM2JkMC00YmIzLWJhMWYtNjYwYTE3NDRjNDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLi3DPlROf2RbuwWEYatg0AFBmA0T0Kn9YGx Nc8SvP0Ov/vZOqLUfIVfeh4oVRohra+tjB7byBn+rbbuvplmGspn+cgQ0ZmnmgWm Upp3NndIQs5C3KDbEz4IRSEcTsTiiWK9zPv3RPIqQTAF2iyS/3KxeZV9kEe+GBQT +kiYm0rW3dW7cy+17tkR9Hs/m6dpXvgqoRLUu35DDtMCniRyQoYwJFp2R4vjsQry R+WloXndW22SDlnQ+Mh3dXOyiv/f9VJO45KK+H/grK1VxWI2A4TzSJY5YYAWZ7W0 g1vokNQrNaPh9FzchEaUQU6xnnKMeSTUKX9MjlbYXbwdQ+ZI+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP3aDOnpo0t0t2MF4J6QDKKlBlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjdhOGJhZjMtY2FmZC0z YjFkLWIyMWEtZGRhN2FlNWU1MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ6WsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWCD2Ea//1u9JUz0+BaNOM6MsVm93bTkYmBaPTuBWiWYMsM8vnTlqfP 7yL5EtFwOYH9CrrQ6RCCqebzr4b5pq2SHc/2GErGZal84i2DAErYmfXHBELUBE2r fQ87v1ceJbddo1wKZYs/Fd+TxYBhGPzeyIK4nt0hRWCHEXDNhlp4uAdBHi/Ol4Ap 0ebl1uE6iPgIRhM9dh8fcQZVlq0ZwIlGPGESgQJSjmv7xPc+naYHfjyQfsD5X+1e NubjupONnCIpJGyzYp9ApfjmOhD+uqzCkX3pI1eWomqndkmWkYtDFLuIoO1Q2vSu nYj6gL94ojM51EKvKlDHh8DBNbhQMBk= -----END CERTIFICATE-----Generated at Wed Jun 4 23:25:12 2025 by rpki-client