$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa File: 95e32c24-9724-3044-bbbe-40ccb8806632.roa (raw, json) Hash identifier: LTvc0Ld5qyjxQdVEfzcwzxxnApLD+jJwu24w4sMAVA0= Subject key identifier: F5:9B:91:B2:A5:BC:B1:7A:F3:D5:FC:E0:89:F4:F0:5B:C4:28:26:C4 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584A30503B635EA09E4E8EAC5E00 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa Signing time: Sat 14 Jun 2025 13:01:04 +0000 ROA not before: Sat 14 Jun 2025 13:01:04 +0000 ROA not after: Fri 12 Sep 2025 13:01:04 +0000 asID: 12083 IP address blocks: 23.28.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:30:50:3b:63:5e:a0:9e:4e:8e:ac:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Jun 14 13:01:04 2025 GMT Not After : Sep 12 13:01:04 2025 GMT Subject: CN=394e2c15-6396-4438-903d-501aebc3024b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3a:a7:98:22:12:5f:7b:61:08:bb:34:52:0e: ad:5c:18:e6:de:2f:b0:20:91:5f:78:be:a7:81:8b: 89:fa:85:bc:eb:38:7a:63:a4:97:38:b0:99:db:ae: cd:2c:04:3e:9e:9e:ba:22:73:06:15:e8:fc:5e:af: 38:38:bb:5c:e7:99:ef:a9:87:20:e4:2c:10:9e:51: 79:7a:8c:06:3f:40:17:a1:55:b8:aa:b8:09:99:9c: 8c:7a:dc:ec:01:de:c0:5a:df:45:8c:66:6e:86:61: 5e:77:84:b3:fc:af:62:f3:5d:c7:17:35:93:5a:6e: 2e:b4:8a:e5:a2:79:2f:08:01:f3:07:57:60:7c:5e: 13:83:46:75:70:1f:f5:72:d3:be:d4:e5:8d:c3:0c: f1:a5:3b:15:4a:5f:fe:56:2e:13:45:01:7a:e4:57: ce:a8:99:b3:51:52:56:87:78:1b:59:87:11:aa:6c: 9b:86:dd:76:8e:87:1e:71:f6:79:51:f0:ad:c1:10: 99:99:9e:92:08:01:3d:f6:26:51:0c:8c:4f:0e:93: 67:8e:28:60:90:83:14:73:82:a7:49:9d:15:67:45: 7e:88:84:92:4a:78:74:23:2c:25:62:5d:6b:93:34: 5d:57:1e:8f:9d:95:23:42:49:ed:63:0d:8d:60:14: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9B:91:B2:A5:BC:B1:7A:F3:D5:FC:E0:89:F4:F0:5B:C4:28:26:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 23.28.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:9e:d2:08:6a:7b:76:51:2d:a7:c5:de:e8:cc:e7:c0:6e:5e: 48:99:8e:51:b4:05:db:64:ef:98:35:63:b6:37:66:34:49:6c: c2:09:c4:b4:66:8b:31:99:59:64:af:dc:c8:06:40:5c:ed:40: 18:db:b1:36:e6:e4:52:c1:7a:c0:a8:0c:14:bd:cd:7d:f5:83: 38:04:05:f2:c9:d7:3b:58:7f:2e:62:4a:67:80:13:db:e6:ee: c8:18:80:be:55:e7:ca:03:d9:bf:f6:2e:d8:69:5e:fb:cb:cf: 03:71:13:eb:f6:2e:7e:6d:7f:74:7b:64:bf:19:82:c2:18:ac: f7:bd:09:4c:f5:11:66:a5:4e:cb:16:b1:66:c8:2a:2f:08:f4: 8d:ab:d2:17:86:c8:62:0f:42:be:f0:47:18:10:9e:04:96:69: ae:4d:a2:f3:ea:eb:e6:87:4a:52:6c:37:c0:a8:20:4e:57:4d: cb:97:00:85:fd:29:a5:86:b6:2f:27:e5:a2:cf:b7:1a:4e:5d: 87:35:fe:e7:58:22:17:2f:5f:2d:2d:46:db:23:e3:ba:2c:36: 83:66:10:52:a0:ae:26:f6:85:c6:8a:5a:6f:75:16:ff:78:29: 70:ee:8a:d1:ee:35:6a:17:0a:01:28:d5:eb:f5:bb:c9:40:ff: e8:db:89:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUDtjXqCeTo6sXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk Mzk0ZTJjMTUtNjM5Ni00NDM4LTkwM2QtNTAxYWViYzMwMjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjqnmCISX3thCLs0Ug6tXBjm3i+wIJFfeL6n gYuJ+oW86zh6Y6SXOLCZ267NLAQ+np66InMGFej8Xq84OLtc55nvqYcg5CwQnlF5 eowGP0AXoVW4qrgJmZyMetzsAd7AWt9FjGZuhmFed4Sz/K9i813HFzWTWm4utIrl onkvCAHzB1dgfF4Tg0Z1cB/1ctO+1OWNwwzxpTsVSl/+Vi4TRQF65FfOqJmzUVJW h3gbWYcRqmybht12jocecfZ5UfCtwRCZmZ6SCAE99iZRDIxPDpNnjihgkIMUc4Kn SZ0VZ0V+iISSSnh0IywlYl1rkzRdVx6PnZUjQkntYw2NYBSGSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWbkbKlvLF689X84In08FvEKCbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvOTVlMzJjMjQtOTcyNC0z MDQ0LWJiYmUtNDBjY2I4ODA2NjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHFxyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOe0ghqe3ZRLafF3ujM58BuXkiZjlG0Bdtk75g1Y7Y3ZjRJbMIJxLRm izGZWWSv3MgGQFztQBjbsTbm5FLBesCoDBS9zX31gzgEBfLJ1ztYfy5iSmeAE9vm 7sgYgL5V58oD2b/2LthpXvvLzwNxE+v2Ln5tf3R7ZL8ZgsIYrPe9CUz1EWalTssW sWbIKi8I9I2r0heGyGIPQr7wRxgQngSWaa5NovPq6+aHSlJsN8CoIE5XTcuXAIX9 KaWGti8n5aLPtxpOXYc1/udYIhcvXy0tRtsj47osNoNmEFKgrib2hcaKWm91Fv94 KXDuitHuNWoXCgEo1ev1u8lA/+jbiS0= -----END CERTIFICATE-----Generated at Mon Jun 30 02:27:02 2025 by rpki-client