$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3497cd41-1116-39ee-822c-7272dcf060e8.roa File: 3497cd41-1116-39ee-822c-7272dcf060e8.roa (raw, json) Hash identifier: Yryvp/DJfjjjsP3WZHBNG2UnfdhORnSoUjlOxB/Cd5A= Subject key identifier: 5F:74:FD:FC:89:11:C3:1D:45:85:79:DE:A7:73:CB:C8:AC:BC:52:5B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBB7B63E7A914FC1592F20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3497cd41-1116-39ee-822c-7272dcf060e8.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33651 IP address blocks: 75.144.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:b7:b6:3e:7a:91:4f:c1:59:2f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=9d7116ac-c7ed-492b-8040-2e55916de27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:89:25:cb:b9:f3:a2:63:fc:8c:8f:f0:cb:a5: 55:a4:78:13:5d:f0:fb:f2:06:7d:ea:dd:1c:cf:c4: 66:13:39:58:a4:c9:18:71:71:95:50:47:13:a6:0e: 15:8d:a8:c1:2e:d9:60:07:a7:6e:04:33:01:d2:6a: 00:c4:ba:33:4a:09:5d:79:46:10:36:51:eb:02:62: 98:9f:2a:55:09:b9:9e:55:76:cd:2f:c9:49:72:7d: 35:67:70:c6:18:01:84:56:37:a6:eb:0c:4e:bf:b2: 03:b4:4a:28:b6:55:ee:76:5a:e7:d4:7d:af:68:a2: b2:0c:53:8b:f5:1d:2c:06:41:a3:9e:87:50:5a:df: 15:6f:3c:37:5c:73:4e:73:7f:2e:8b:4a:86:49:0a: 24:2e:a4:f4:4f:e1:59:c6:85:b1:29:95:55:ac:70: 67:37:51:c8:0c:80:23:ba:ae:a6:fa:d9:5e:32:0f: a3:b1:84:0c:60:ea:5f:4f:4c:55:9e:f7:f3:33:8e: 34:c3:2c:b3:a3:31:10:47:92:6d:64:c4:e2:6e:54: d0:86:55:f2:e9:75:d1:10:12:4a:1e:58:4f:a3:e8: b6:c8:87:2c:08:a5:17:11:c2:e3:c1:c7:86:78:5a: 95:3d:92:4c:f5:f8:e2:21:99:44:cb:12:5d:fd:f0: e4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:74:FD:FC:89:11:C3:1D:45:85:79:DE:A7:73:CB:C8:AC:BC:52:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3497cd41-1116-39ee-822c-7272dcf060e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 75.144.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:94:d5:66:1a:83:2f:f1:66:c5:4f:15:89:f3:a5:5c:fc:bf: 9b:2a:b4:a5:bf:7f:b5:e8:de:50:72:1d:1a:be:32:bd:19:08: 79:46:85:d8:a0:6c:33:f6:30:70:3a:9e:b1:c0:f7:8d:59:63: 42:23:48:bf:75:a3:ef:f5:00:42:12:6b:3c:aa:d8:c4:fd:41: 2c:f5:21:9d:fa:6c:3b:fd:7a:bb:c6:5a:16:60:cb:93:f3:3b: 2c:3c:85:c4:d7:17:1e:8f:a1:57:02:35:ab:c8:b4:63:92:fa: 95:66:bc:ca:d1:19:34:4f:0c:51:da:8d:43:8b:8a:9e:23:99: a4:f7:e4:16:7f:bb:a5:4f:1c:cc:95:af:0b:ac:aa:f0:7c:ba: 37:ac:92:0e:dd:31:ad:8b:86:68:f7:cf:3b:02:bf:72:86:f6: 2e:ec:8d:dd:b4:3d:f0:30:23:cb:b3:f7:b8:18:c7:be:9b:a3: 49:5e:fd:d6:e6:94:f8:75:6f:7f:a5:77:77:fe:6f:bd:df:de: a9:86:81:cf:6b:db:78:c0:57:87:16:1b:55:2f:99:4b:b7:a0: bb:92:7e:1c:80:36:6c:7a:de:8e:ed:04:23:00:0a:9b:b3:69: ed:81:4a:e2:ba:07:cd:40:57:a4:bb:9d:34:af:cf:33:47:93: 2d:3e:3d:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+7e2PnqRT8FZLyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk OWQ3MTE2YWMtYzdlZC00OTJiLTgwNDAtMmU1NTkxNmRlMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4kly7nzomP8jI/wy6VVpHgTXfD78gZ96t0c z8RmEzlYpMkYcXGVUEcTpg4VjajBLtlgB6duBDMB0moAxLozSgldeUYQNlHrAmKY nypVCbmeVXbNL8lJcn01Z3DGGAGEVjem6wxOv7IDtEootlXudlrn1H2vaKKyDFOL 9R0sBkGjnodQWt8Vbzw3XHNOc38ui0qGSQokLqT0T+FZxoWxKZVVrHBnN1HIDIAj uq6m+tleMg+jsYQMYOpfT0xVnvfzM440wyyzozEQR5JtZMTiblTQhlXy6XXREBJK HlhPo+i2yIcsCKUXEcLjwceGeFqVPZJM9fjiIZlEyxJd/fDkswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF90/fyJEcMdRYV53qdzy8isvFJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQ5N2NkNDEtMTExNi0z OWVlLTgyMmMtNzI3MmRjZjA2MGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES5DwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGU1WYagy/xZsVPFYnzpVz8v5sqtKW/f7Xo3lByHRq+Mr0ZCHlGhdig bDP2MHA6nrHA941ZY0IjSL91o+/1AEISazyq2MT9QSz1IZ36bDv9ervGWhZgy5Pz Oyw8hcTXFx6PoVcCNavItGOS+pVmvMrRGTRPDFHajUOLip4jmaT35BZ/u6VPHMyV rwusqvB8ujeskg7dMa2Lhmj3zzsCv3KG9i7sjd20PfAwI8uz97gYx76bo0le/dbm lPh1b3+ld3f+b73f3qmGgc9r23jAV4cWG1UvmUu3oLuSfhyANmx63o7tBCMACpuz ae2BSuK6B81AV6S7nTSvzzNHky0+PXY= -----END CERTIFICATE-----Generated at Tue Jul 1 15:26:39 2025 by rpki-client