$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3982a7c8-72ed-3c43-8865-efa5aaad0e92.roa File: 3982a7c8-72ed-3c43-8865-efa5aaad0e92.roa (raw, json) Hash identifier: TR9FQjuJbemtPfuF5jWpnqsG3KAYVyTOkmj+idHlzV0= Subject key identifier: 68:8B:D8:32:C3:0D:9A:95:70:2A:8A:9D:5E:6E:B5:2B:FE:83:74:F2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB9063FE62E32BD4DF1900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3982a7c8-72ed-3c43-8865-efa5aaad0e92.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 7725 IP address blocks: 75.144.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:90:63:fe:62:e3:2b:d4:df:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=fbf09ea1-2f54-480d-9fe9-a5b97420d08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:1f:90:ff:39:ec:7f:27:6e:8f:b1:38:33:8e: c8:ab:0e:f7:64:88:75:cf:d4:96:eb:8a:c4:87:b4: b5:b5:1b:41:da:cb:85:c8:24:b9:b8:b4:4a:d4:c5: 2a:6d:c3:65:f5:19:a8:54:1c:92:c0:b1:5a:46:2c: 61:f0:38:fe:c5:5e:f4:d9:19:20:28:c9:78:0f:27: 96:ad:90:9f:b7:a4:55:c5:6f:bb:0f:26:e1:99:eb: 25:3f:90:69:83:fb:86:72:67:11:3c:aa:11:66:05: 71:7d:cc:1e:33:85:59:a4:bc:90:cb:4e:61:49:b0: 1e:0b:4f:c9:ea:63:a7:22:39:26:14:8c:3f:9d:c5: a5:63:a0:23:6a:e6:35:37:91:52:4f:37:80:0b:45: 3d:28:cb:43:ea:33:b1:de:45:33:0f:74:be:9a:7e: 03:de:39:14:01:42:b8:f3:35:fb:ae:d4:ed:12:2d: 0f:c4:d4:8e:17:90:31:ad:38:e5:54:11:ac:68:5d: 93:47:ba:36:4e:da:a1:1c:e4:71:ff:e1:7f:0f:00: 70:46:b7:cf:92:68:c4:6f:79:47:45:d0:90:46:59: 0a:4e:3f:7c:dc:df:d5:5f:5b:c1:88:6b:cb:79:ab: 86:1b:c7:4f:6d:a2:ae:6a:92:e6:64:c9:80:20:dd: 16:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8B:D8:32:C3:0D:9A:95:70:2A:8A:9D:5E:6E:B5:2B:FE:83:74:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3982a7c8-72ed-3c43-8865-efa5aaad0e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 75.144.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:45:9e:68:4b:9c:ea:78:c4:c2:45:90:e8:d5:a0:53:52:29: 59:2a:ae:ab:e4:bf:25:48:9d:01:4b:e3:2c:34:62:71:e2:b8: 9d:c4:72:95:4f:dc:db:8d:77:2d:24:7c:aa:fd:04:2f:91:f2: 79:4d:72:5c:c7:be:a4:32:08:92:23:bc:d4:21:fb:ae:98:65: 52:08:c2:9c:44:b0:d2:2d:5d:e4:dd:1f:cb:cf:1a:33:23:77: 5d:13:61:19:37:08:fc:fd:09:13:25:c7:23:86:4e:6e:1f:e9: 0e:85:af:56:75:10:8b:14:69:6b:9e:35:c6:98:f5:5a:dd:6a: 6d:d3:1e:e3:74:f8:28:f1:4a:7d:fc:07:26:36:00:fc:6e:69: 2b:58:43:d4:e6:56:76:ed:43:6f:55:45:82:8b:e0:b8:b9:5d: 82:6c:ee:9e:38:47:8b:b7:78:ae:fb:a9:9a:71:d5:38:b1:a6: bd:6f:61:6e:78:3e:6a:c4:d5:df:96:0d:8c:3a:aa:c7:de:b6: ea:2a:63:24:09:4e:54:8a:15:e0:89:46:72:29:c2:31:68:c7: a4:bf:8e:10:fe:05:9c:4c:c8:50:6e:d2:15:33:5d:12:96:6e: 52:27:e4:b7:9c:37:c0:45:50:9e:7c:7f:c7:26:9a:f6:02:1a: aa:22:6e:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+5Bj/mLjK9TfGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZmJmMDllYTEtMmY1NC00ODBkLTlmZTktYTViOTc0MjBkMDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+h+Q/znsfyduj7E4M47Iqw73ZIh1z9SW64rE h7S1tRtB2suFyCS5uLRK1MUqbcNl9RmoVBySwLFaRixh8Dj+xV702RkgKMl4DyeW rZCft6RVxW+7DybhmeslP5Bpg/uGcmcRPKoRZgVxfcweM4VZpLyQy05hSbAeC0/J 6mOnIjkmFIw/ncWlY6AjauY1N5FSTzeAC0U9KMtD6jOx3kUzD3S+mn4D3jkUAUK4 8zX7rtTtEi0PxNSOF5AxrTjlVBGsaF2TR7o2TtqhHORx/+F/DwBwRrfPkmjEb3lH RdCQRlkKTj983N/VX1vBiGvLeauGG8dPbaKuapLmZMmAIN0WkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiL2DLDDZqVcCqKnV5utSv+g3TyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzk4MmE3YzgtNzJlZC0z YzQzLTg4NjUtZWZhNWFhYWQwZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS5DoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtFnmhLnOp4xMJFkOjVoFNSKVkqrqvkvyVInQFL4yw0YnHiuJ3EcpVP 3NuNdy0kfKr9BC+R8nlNclzHvqQyCJIjvNQh+66YZVIIwpxEsNItXeTdH8vPGjMj d10TYRk3CPz9CRMlxyOGTm4f6Q6Fr1Z1EIsUaWueNcaY9Vrdam3THuN0+CjxSn38 ByY2APxuaStYQ9TmVnbtQ29VRYKL4Li5XYJs7p44R4u3eK77qZpx1Tixpr1vYW54 PmrE1d+WDYw6qsfetuoqYyQJTlSKFeCJRnIpwjFox6S/jhD+BZxMyFBu0hUzXRKW blIn5LecN8BFUJ58f8cmmvYCGqoibvU= -----END CERTIFICATE-----Generated at Tue Jul 1 21:17:34 2025 by rpki-client