$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dab4974-b240-3f78-84c7-576f84302820.roa File: 2dab4974-b240-3f78-84c7-576f84302820.roa (raw, json) Hash identifier: DrvEerS7lr03AUe1f0LecwUVxUe7wWHoL/dbj9ukjoM= Subject key identifier: AF:98:07:6A:47:EA:8E:5B:4F:A1:CA:40:37:B5:0B:8D:BE:A5:0E:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFDA740F0EA1F0A3BB179E4 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dab4974-b240-3f78-84c7-576f84302820.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33491 IP address blocks: 71.57.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:a7:40:f0:ea:1f:0a:3b:b1:79:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=84e68e5a-3b21-4d1b-9aed-988bf75822f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0c:f1:85:2b:d7:68:d4:06:94:39:01:73:dc: 89:b9:82:a5:c5:d9:ca:3b:f7:2d:51:1a:06:ae:1b: c0:50:76:54:87:40:b6:48:ed:ef:28:89:5e:66:a6: c3:3c:8b:e4:4a:2e:27:c9:db:ab:18:cd:ad:13:8d: dc:99:c0:e1:1c:17:fe:0e:06:b0:c3:3a:eb:ae:fd: 32:c6:4b:77:ab:cf:05:a9:09:fa:47:6d:1c:7c:c0: 37:17:9f:52:fd:68:c5:62:16:ba:03:7d:bb:3d:f1: 25:77:9c:ba:88:ae:f3:48:c4:1d:fd:53:b7:42:47: 43:79:4e:c2:1e:35:51:bf:ff:94:87:3e:ab:d4:01: 18:bc:c9:04:ad:12:49:53:6a:17:05:9d:2e:46:74: ba:47:2f:a3:fb:82:23:eb:14:a5:ef:3a:bc:c4:b1: c7:0c:40:c3:b8:47:5a:92:cb:c7:49:ae:77:0a:5e: 33:98:cd:d2:76:e4:f7:07:3a:11:be:10:49:a2:f6: d4:e7:2d:c9:bd:ce:0c:15:5c:00:db:05:49:13:91: af:72:54:46:cf:4f:00:a2:ef:8c:81:43:aa:80:8d: 63:e8:ea:56:b7:f6:47:9d:9c:89:53:82:25:5d:d1: fe:59:a1:a7:1c:6c:8f:c1:88:c1:c2:d0:37:a5:33: 86:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:98:07:6A:47:EA:8E:5B:4F:A1:CA:40:37:B5:0B:8D:BE:A5:0E:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dab4974-b240-3f78-84c7-576f84302820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.57.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:90:53:87:8f:8b:c1:b9:24:33:ec:77:a6:27:ed:ee:82:f3: 27:39:b9:72:61:06:1e:39:c6:2b:a8:93:b6:19:b3:87:e3:51: 18:02:6d:2e:07:b3:2f:f0:58:05:89:71:25:a4:bc:a2:07:c3: 3e:d3:d6:e5:f7:31:dd:33:a7:15:0e:23:77:e0:48:a4:82:a9: 7c:02:a6:bb:02:a0:94:d0:4e:b1:65:3a:b2:c3:0d:5f:61:e2: f8:51:ae:28:c6:5a:92:5e:6b:33:33:ea:66:2d:9f:0d:12:8c: 3e:d8:c0:9c:ee:bc:21:17:c9:45:49:3e:d4:0e:89:b7:d8:78: 96:24:e7:04:4f:be:85:b2:d6:af:fe:d6:af:61:59:cb:dc:7d: 52:69:f1:17:0d:5c:e3:be:26:ef:96:64:53:b5:79:0d:aa:13: 9f:06:ad:a6:00:f4:5b:fa:ee:17:d1:ac:a5:c2:7d:3c:e4:6e: 3a:7a:99:30:e9:7e:10:ab:0e:1d:ff:db:c4:13:ca:d6:ad:57: ef:4b:9e:48:1b:4d:61:d0:c8:88:44:bd:1c:ae:04:c6:6c:45: e1:f8:6f:87:e4:9c:c8:a9:96:e5:0b:08:30:b1:7a:23:ad:9a: 3d:64:91:84:91:59:d7:0c:c5:c9:87:d2:1e:a3:b9:a4:bd:8e: 72:95:5c:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/adA8OofCjuxeeQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ODRlNjhlNWEtM2IyMS00ZDFiLTlhZWQtOTg4YmY3NTgyMmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAzxhSvXaNQGlDkBc9yJuYKlxdnKO/ctURoG rhvAUHZUh0C2SO3vKIleZqbDPIvkSi4nydurGM2tE43cmcDhHBf+Dgawwzrrrv0y xkt3q88FqQn6R20cfMA3F59S/WjFYha6A327PfEld5y6iK7zSMQd/VO3QkdDeU7C HjVRv/+Uhz6r1AEYvMkErRJJU2oXBZ0uRnS6Ry+j+4Ij6xSl7zq8xLHHDEDDuEda ksvHSa53Cl4zmM3SduT3BzoRvhBJovbU5y3Jvc4MFVwA2wVJE5GvclRGz08Aou+M gUOqgI1j6OpWt/ZHnZyJU4IlXdH+WaGnHGyPwYjBwtA3pTOGnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+YB2pH6o5bT6HKQDe1C42+pQ6XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmRhYjQ5NzQtYjI0MC0z Zjc4LTg0YzctNTc2Zjg0MzAyODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRzkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqQU4ePi8G5JDPsd6Yn7e6C8yc5uXJhBh45xiuok7YZs4fjURgCbS4H sy/wWAWJcSWkvKIHwz7T1uX3Md0zpxUOI3fgSKSCqXwCprsCoJTQTrFlOrLDDV9h 4vhRrijGWpJeazMz6mYtnw0SjD7YwJzuvCEXyUVJPtQOibfYeJYk5wRPvoWy1q/+ 1q9hWcvcfVJp8RcNXOO+Ju+WZFO1eQ2qE58GraYA9Fv67hfRrKXCfTzkbjp6mTDp fhCrDh3/28QTytatV+9LnkgbTWHQyIhEvRyuBMZsReH4b4fknMipluULCDCxeiOt mj1kkYSRWdcMxcmH0h6juaS9jnKVXNQ= -----END CERTIFICATE-----Generated at Tue Jul 1 22:49:29 2025 by rpki-client