$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e036e87-5b8b-3894-9e3c-604729e3aa1b.roa File: 2e036e87-5b8b-3894-9e3c-604729e3aa1b.roa (raw, json) Hash identifier: ll68QsgeyRyRxtw9cpNZje1ySaam8QX5u8b0dgQJt7U= Subject key identifier: 06:0A:E4:2F:BA:7D:A0:2B:A5:B6:CE:4C:E0:97:59:84:79:47:81:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC1F3C8726A075CEFE8900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e036e87-5b8b-3894-9e3c-604729e3aa1b.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 13367 IP address blocks: 76.156.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:1f:3c:87:26:a0:75:ce:fe:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=daf608c1-e884-4c4e-9130-c4510321113f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d6:d2:28:43:28:ff:d2:b8:91:4a:96:7e:aa: aa:4e:1c:1e:d9:59:5d:6a:73:d7:35:ad:a5:82:7d: f5:b4:e4:e3:fc:c9:a3:2c:0c:3c:b1:ac:13:15:a6: c2:84:e9:31:43:f1:86:ec:27:fe:29:c0:d8:c8:95: d3:ed:32:f5:f1:c4:ba:aa:a9:a8:bb:80:9f:5e:ec: 5f:b7:6d:39:7f:85:45:fa:03:59:c1:45:f4:92:24: 9b:e7:79:2f:94:4e:d6:69:b8:4a:7e:d1:21:cc:a9: 46:47:3e:f4:60:10:fd:63:0d:19:1c:43:73:1b:a9: bb:2d:a8:d0:4f:77:5d:94:35:92:7d:b3:e7:93:b3: 4d:87:d1:8a:e8:99:11:52:3d:3b:2a:33:41:4b:47: 1f:c4:43:4f:3a:4b:ae:cb:92:45:fd:8b:33:38:ff: bf:fa:46:a5:02:9f:bd:3d:c0:0f:52:9c:aa:fd:e7: f3:1e:77:a9:71:c3:f9:f3:de:ae:c6:7e:97:85:35: 81:aa:8f:d3:0e:1b:09:ad:19:84:cd:cc:db:37:6c: a0:28:29:54:90:44:a1:52:f9:e1:cf:33:c9:6d:05: bf:48:a2:ad:2f:27:d3:df:01:9f:6b:1b:00:48:b9: 6a:91:18:a0:7c:b5:a0:ea:b1:f6:39:07:47:f6:84: 08:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0A:E4:2F:BA:7D:A0:2B:A5:B6:CE:4C:E0:97:59:84:79:47:81:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e036e87-5b8b-3894-9e3c-604729e3aa1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.156.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:70:10:c7:57:c2:47:01:31:89:d9:1e:d0:b0:70:2d:64:df: b0:2d:b2:52:76:26:16:e2:20:04:8a:28:51:1b:96:71:ea:50: 81:05:03:02:fd:5b:ea:8a:a8:ab:52:a7:53:0b:92:02:99:36: 7d:c9:b1:ec:40:ca:68:10:82:ab:25:0a:3e:fa:ba:7e:ad:1b: 51:b2:aa:e6:ba:d0:1c:b7:92:31:d2:7f:0b:55:da:2b:8d:67: 41:58:1d:42:f2:76:8b:86:f8:49:26:33:43:2b:f4:5b:1d:9c: de:a9:40:27:21:96:7e:67:2c:73:fd:73:07:45:7c:86:46:82: c5:0f:8b:2b:60:e7:00:d7:3e:68:55:d8:77:02:9c:cb:74:89: 7c:18:5b:6b:01:44:11:b6:7c:38:50:99:18:f7:44:32:cb:8c: 93:4e:85:4d:a7:ea:4e:f5:59:47:04:1e:bd:8a:78:b7:87:b2: 36:53:a4:71:62:cd:c4:90:0b:ba:f7:e9:9f:a5:fd:82:df:fa: 43:b1:ff:21:30:4a:c7:61:92:55:76:e2:d0:78:43:bf:8e:9a: b3:78:40:82:c0:de:f8:28:47:aa:27:71:f3:3f:ab:48:bc:04: 7c:8e:7c:6b:b1:26:06:88:b9:8f:d8:71:b5:8c:c4:26:13:3e: a6:de:5c:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/B88hyagdc7+iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZGFmNjA4YzEtZTg4NC00YzRlLTkxMzAtYzQ1MTAzMjExMTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09bSKEMo/9K4kUqWfqqqThwe2VldanPXNa2l gn31tOTj/MmjLAw8sawTFabChOkxQ/GG7Cf+KcDYyJXT7TL18cS6qqmou4CfXuxf t205f4VF+gNZwUX0kiSb53kvlE7WabhKftEhzKlGRz70YBD9Yw0ZHENzG6m7LajQ T3ddlDWSfbPnk7NNh9GK6JkRUj07KjNBS0cfxENPOkuuy5JF/YszOP+/+kalAp+9 PcAPUpyq/efzHnepccP5896uxn6XhTWBqo/TDhsJrRmEzczbN2ygKClUkEShUvnh zzPJbQW/SKKtLyfT3wGfaxsASLlqkRigfLWg6rH2OQdH9oQIdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYK5C+6faArpbbOTOCXWYR5R4EiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmUwMzZlODctNWI4Yi0z ODk0LTllM2MtNjA0NzI5ZTNhYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpwEMdXwkcBMYnZHtCwcC1k37AtslJ2JhbiIASKKFEblnHqUIEFAwL9 W+qKqKtSp1MLkgKZNn3JsexAymgQgqslCj76un6tG1Gyqua60By3kjHSfwtV2iuN Z0FYHULydouG+EkmM0Mr9FsdnN6pQCchln5nLHP9cwdFfIZGgsUPiytg5wDXPmhV 2HcCnMt0iXwYW2sBRBG2fDhQmRj3RDLLjJNOhU2n6k71WUcEHr2KeLeHsjZTpHFi zcSQC7r36Z+l/YLf+kOx/yEwSsdhklV24tB4Q7+OmrN4QILA3vgoR6oncfM/q0i8 BHyOfGuxJgaIuY/YcbWMxCYTPqbeXCQ= -----END CERTIFICATE-----Generated at Tue Jul 1 00:28:45 2025 by rpki-client