$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfd8a4ec-f8dc-3eb6-b5b4-78fa44e21649.roa File: cfd8a4ec-f8dc-3eb6-b5b4-78fa44e21649.roa (raw, json) Hash identifier: fuMX9yMCqiVRUGdxJgZaisCKrw+dSq8jcyzplLYjWYY= Subject key identifier: B0:CA:A6:BF:BE:43:92:9A:AC:5C:AA:E6:7C:26:62:21:63:76:13:BD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD79D683030F24E4AF6660 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfd8a4ec-f8dc-3eb6-b5b4-78fa44e21649.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 13367 IP address blocks: 76.113.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:79:d6:83:03:0f:24:e4:af:66:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=830793ba-5355-422b-bbca-57a53bd61c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:38:11:26:96:bb:64:4d:65:d9:f4:8a:f9: 31:43:4c:62:a3:fe:aa:50:5b:18:10:4f:de:e4:91: 61:48:aa:00:11:a0:38:06:34:8f:d5:73:ff:a3:54: a4:2e:d5:25:09:1a:58:65:57:bb:8b:4d:58:26:1a: 05:3d:c0:89:99:5e:7c:fe:7a:97:10:6f:5a:6b:1f: 2f:b8:62:2e:e9:91:48:1d:47:b5:69:f6:80:50:64: 6f:a8:2c:69:a4:e1:aa:a6:25:6e:f0:43:f3:ef:8b: 75:b5:f2:93:7f:55:aa:54:70:43:a5:87:6a:44:46: 86:f0:9e:a8:17:1f:26:ed:6e:be:33:18:d3:c5:c2: af:e4:32:a4:0a:1a:b7:a1:84:62:dc:03:27:67:b3: fe:49:b3:30:d1:b5:db:de:19:9d:8a:d4:9a:95:bb: 36:cc:66:23:a4:dc:9d:52:e8:ac:37:97:64:2c:61: 53:b1:1e:fb:8b:3a:76:cd:25:33:fc:cc:cc:39:65: ed:30:4e:ec:4a:26:29:89:06:02:0a:c6:0c:df:12: bd:09:8e:ea:a0:ff:f8:90:50:f5:67:6a:4f:68:fa: e0:69:95:ff:d4:b9:fe:db:f0:98:3e:9b:52:fa:5b: 74:4a:7d:b8:f1:aa:1b:b6:8d:b9:c9:c2:e9:1f:4e: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CA:A6:BF:BE:43:92:9A:AC:5C:AA:E6:7C:26:62:21:63:76:13:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfd8a4ec-f8dc-3eb6-b5b4-78fa44e21649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.113.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:48:40:11:ed:c2:77:e6:90:31:bf:a6:0a:19:a7:ff:14:68: 39:ae:36:35:35:e5:ed:9d:55:00:58:e0:11:c6:58:dc:ec:f8: 70:1d:27:1a:fc:af:77:70:85:bd:b3:56:9c:ae:82:dc:89:35: 48:84:cf:25:94:cf:83:0f:9f:48:9f:fd:cd:51:0f:01:e8:bf: 30:d4:a8:bf:0e:22:71:b2:08:be:89:39:fa:9c:c1:24:38:46: 14:dd:cf:b5:3c:a0:a6:db:8f:8e:b0:61:0e:38:74:f7:83:55: be:5a:40:b5:16:af:94:ad:4f:6f:4b:f2:9d:f4:11:13:a3:da: 16:68:3a:2f:e3:49:ea:b7:74:97:9d:d1:1b:0c:df:5c:4f:89: 2b:bc:94:2a:a5:82:0a:5c:f8:e9:0a:10:3d:2c:69:fd:1b:d3: 01:71:20:0a:90:fa:d6:15:dd:d0:25:80:1d:45:b3:c4:80:5d: 5f:95:49:81:62:89:c5:5e:78:90:a5:11:ec:1a:5d:a2:b4:14: c7:dd:ed:18:f9:79:76:4d:d5:d4:39:f4:33:6c:28:c4:7d:8c: b5:fe:87:d4:e8:4f:9b:f5:7d:f1:c2:1e:bf:f3:59:7a:d2:9f: 03:ec:26:bd:1e:7e:4d:5d:6a:41:64:63:35:fc:a6:5e:2c:25: f1:24:37:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc/XnWgwMPJOSvZmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ODMwNzkzYmEtNTM1NS00MjJiLWJiY2EtNTdhNTNiZDYxYzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5M4ESaWu2RNZdn0ivkxQ0xio/6qUFsYEE/e 5JFhSKoAEaA4BjSP1XP/o1SkLtUlCRpYZVe7i01YJhoFPcCJmV58/nqXEG9aax8v uGIu6ZFIHUe1afaAUGRvqCxppOGqpiVu8EPz74t1tfKTf1WqVHBDpYdqREaG8J6o Fx8m7W6+MxjTxcKv5DKkChq3oYRi3AMnZ7P+SbMw0bXb3hmditSalbs2zGYjpNyd UuisN5dkLGFTsR77izp2zSUz/MzMOWXtME7sSiYpiQYCCsYM3xK9CY7qoP/4kFD1 Z2pPaPrgaZX/1Ln+2/CYPptS+lt0Sn248aobto25ycLpH0617wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDKpr++Q5KarFyq5nwmYiFjdhO9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZkOGE0ZWMtZjhkYy0z ZWI2LWI1YjQtNzhmYTQ0ZTIxNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTHHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlIQBHtwnfmkDG/pgoZp/8UaDmuNjU15e2dVQBY4BHGWNzs+HAdJxr8 r3dwhb2zVpyugtyJNUiEzyWUz4MPn0if/c1RDwHovzDUqL8OInGyCL6JOfqcwSQ4 RhTdz7U8oKbbj46wYQ44dPeDVb5aQLUWr5StT29L8p30EROj2hZoOi/jSeq3dJed 0RsM31xPiSu8lCqlggpc+OkKED0saf0b0wFxIAqQ+tYV3dAlgB1Fs8SAXV+VSYFi icVeeJClEewaXaK0FMfd7Rj5eXZN1dQ59DNsKMR9jLX+h9ToT5v1ffHCHr/zWXrS nwPsJr0efk1dakFkYzX8pl4sJfEkN2Y= -----END CERTIFICATE-----Generated at Mon Jun 30 16:11:41 2025 by rpki-client