$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2095b7e6-658c-33e7-8e0a-8b513e210762.roa File: 2095b7e6-658c-33e7-8e0a-8b513e210762.roa (raw, json) Hash identifier: jCKjrn6J6JPsb9RtLoTfULorLe91XSAJFE+hr8wUfsQ= Subject key identifier: 36:27:C5:49:3D:B1:51:CC:FE:51:B8:71:91:9E:E1:0D:56:10:E2:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C058F6963C9885658ADB180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2095b7e6-658c-33e7-8e0a-8b513e210762.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33660 IP address blocks: 76.129.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:8f:69:63:c9:88:56:58:ad:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=ee0b1706-dd99-4d1c-b8f2-6fd20186f432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:31:3d:3e:73:d1:8b:62:49:d3:e3:41:ba:23: ac:50:dd:f3:ad:8c:d2:aa:75:5d:85:14:8d:11:99: e6:7d:48:a8:5f:d2:a6:bc:70:99:38:8e:3f:3c:c8: 1a:08:d8:88:be:84:1a:00:d3:52:dd:54:9f:08:f9: ad:db:7d:94:b1:00:88:9a:fe:35:62:76:eb:0d:cb: f6:7a:39:99:f2:33:f5:16:90:50:67:66:8b:6b:78: db:bb:2f:ba:fc:88:e0:75:22:f9:56:ba:ee:7d:29: 59:14:ac:0e:0a:86:18:3c:89:4f:02:20:24:0a:c0: e5:f8:14:ca:2f:e6:a3:57:39:d8:93:5d:b1:27:18: f0:09:2b:65:90:a6:15:81:38:de:90:34:0b:f5:25: 89:38:df:2b:e0:73:66:88:87:88:ed:bd:69:74:96: 57:6e:4e:99:cd:9f:7e:4a:75:fa:26:15:ce:61:41: 78:83:ee:f1:8b:9d:e0:20:a2:c9:6f:d9:4d:6b:f1: 7e:d2:1c:f7:35:d8:76:b7:2e:ed:f8:2e:96:40:58: 46:ff:45:c2:93:bd:79:d3:b8:14:c8:b2:0b:0e:e5: 0b:3b:05:ef:b0:b8:0f:72:d9:52:ee:22:7a:f7:ba: d5:0b:ab:37:08:6f:83:ef:0e:c4:c4:d2:29:15:d3: aa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:27:C5:49:3D:B1:51:CC:FE:51:B8:71:91:9E:E1:0D:56:10:E2:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2095b7e6-658c-33e7-8e0a-8b513e210762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.129.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b2:7d:92:1e:7a:f6:a8:b1:09:8e:53:15:d5:9e:6d:29:3f: a5:fa:a7:73:1a:51:71:60:8f:41:89:9e:26:91:ad:c4:bb:63: 7f:31:b4:4c:30:61:fd:0a:ac:a3:fc:c5:18:1c:2b:4a:35:eb: ff:5a:a2:61:28:a3:0f:86:29:c9:ed:b3:7c:97:2d:a8:21:8a: 0b:7d:a9:13:aa:ee:03:91:28:2c:41:d3:c5:85:6d:65:5e:42: 8e:45:ae:91:24:0a:cb:67:f6:5a:50:36:21:12:32:24:8a:0e: 87:0a:7a:cc:54:54:9f:9b:b5:28:a1:51:e5:22:8a:d3:e0:68: de:cc:57:f1:70:8e:c0:4c:47:85:da:ba:6a:8b:21:c8:39:36: 4e:37:0d:0b:39:63:c0:10:17:e3:2b:45:ff:2a:43:a2:36:05: 04:72:41:f8:6b:10:e7:0b:ba:4d:92:c9:04:22:4f:94:9e:7c: 34:ae:de:b3:e6:94:c9:35:6d:33:28:79:1c:06:84:d1:80:2f: 18:65:6b:b6:3f:77:33:f6:a3:b8:3a:7c:56:54:55:da:f1:3c: 17:98:24:ce:c6:12:74:1a:8f:10:1d:a7:35:91:b2:02:33:50: dc:3f:96:1f:ad:40:11:82:7b:25:7f:9d:39:ab:62:6d:f6:56: bb:d7:ae:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBY9pY8mIVlitsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZWUwYjE3MDYtZGQ5OS00ZDFjLWI4ZjItNmZkMjAxODZmNDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzE9PnPRi2JJ0+NBuiOsUN3zrYzSqnVdhRSN EZnmfUioX9KmvHCZOI4/PMgaCNiIvoQaANNS3VSfCPmt232UsQCImv41YnbrDcv2 ejmZ8jP1FpBQZ2aLa3jbuy+6/IjgdSL5VrrufSlZFKwOCoYYPIlPAiAkCsDl+BTK L+ajVznYk12xJxjwCStlkKYVgTjekDQL9SWJON8r4HNmiIeI7b1pdJZXbk6ZzZ9+ SnX6JhXOYUF4g+7xi53gIKLJb9lNa/F+0hz3Ndh2ty7t+C6WQFhG/0XCk71507gU yLILDuULOwXvsLgPctlS7iJ697rVC6s3CG+D7w7ExNIpFdOqDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYnxUk9sVHM/lG4cZGe4Q1WEOIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjA5NWI3ZTYtNjU4Yy0z M2U3LThlMGEtOGI1MTNlMjEwNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIFUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECyfZIeevaosQmOUxXVnm0pP6X6p3MaUXFgj0GJniaRrcS7Y38xtEww Yf0KrKP8xRgcK0o16/9aomEoow+GKcnts3yXLaghigt9qROq7gORKCxB08WFbWVe Qo5FrpEkCstn9lpQNiESMiSKDocKesxUVJ+btSihUeUiitPgaN7MV/FwjsBMR4Xa umqLIcg5Nk43DQs5Y8AQF+MrRf8qQ6I2BQRyQfhrEOcLuk2SyQQiT5SefDSu3rPm lMk1bTMoeRwGhNGALxhla7Y/dzP2o7g6fFZUVdrxPBeYJM7GEnQajxAdpzWRsgIz UNw/lh+tQBGCeyV/nTmrYm32VrvXrqQ= -----END CERTIFICATE-----Generated at Mon Jun 30 09:51:56 2025 by rpki-client