$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f5b1caa-350f-3b4e-8c29-e64b32927d54.roa File: 1f5b1caa-350f-3b4e-8c29-e64b32927d54.roa (raw, json) Hash identifier: QN2XJff3S1YIPisvq93bz/mzkz/a9PhrX+BSGXy8UuE= Subject key identifier: 6D:56:60:AE:43:A1:40:3F:84:B1:06:A5:B5:E7:ED:9D:4A:B9:0F:BA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06DAA934E1F31EC3082B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f5b1caa-350f-3b4e-8c29-e64b32927d54.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 67.188.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:da:a9:34:e1:f3:1e:c3:08:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=b07bf817-fc85-4cd1-ba72-c00f4fe51e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:36:5b:68:13:8e:df:7e:f6:9f:29:81:8b:a7: 46:65:57:7a:1f:44:2e:35:90:d6:b0:0e:f8:63:be: 7b:c8:7c:13:79:c2:b1:a6:88:e6:bc:bc:21:ed:e9: c3:ba:5e:fe:65:d4:86:6e:aa:b3:32:35:78:83:70: 67:40:f8:a0:56:4e:17:d5:3d:a3:4b:22:6b:df:1e: e1:1e:ae:b9:3a:7a:9a:83:3f:f0:d7:a2:b5:11:ff: 20:5e:68:65:58:12:9f:32:d7:0e:ca:d4:57:16:d0: 37:37:ff:b4:e7:02:57:b3:43:bd:0a:6b:77:dd:5f: fd:b1:b1:05:a5:57:04:85:2e:aa:b3:76:39:34:fa: b7:f0:13:79:ce:19:d1:90:75:fc:90:0b:80:55:4b: 70:22:be:67:27:bb:e6:85:6c:a5:ae:55:42:71:16: 4a:10:5d:7d:31:28:06:87:a5:7c:e6:31:77:86:99: de:2a:3e:4f:e7:b5:24:03:71:f0:27:42:c6:75:6e: 67:35:00:d3:d0:ab:ec:e3:03:32:4d:9d:01:95:06: d2:dd:d3:f7:e4:92:2d:83:2d:47:0b:38:75:2b:54: d9:f4:ae:71:03:8b:b9:92:ce:ce:74:9f:5c:78:f8: 59:ae:8a:db:ca:0e:6e:f7:c7:54:a8:a1:fb:ad:31: f0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:56:60:AE:43:A1:40:3F:84:B1:06:A5:B5:E7:ED:9D:4A:B9:0F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f5b1caa-350f-3b4e-8c29-e64b32927d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 67.188.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f7:68:11:a4:f9:9c:ab:06:aa:f8:80:6e:7e:16:96:a0:3e: 7c:fb:0f:a6:d3:f6:22:d9:ef:bf:53:99:6c:d3:f8:18:37:3d: 2b:59:36:b7:02:d3:a2:fa:ce:84:7c:1f:a6:9b:52:74:dd:29: e9:b9:3f:b3:1e:a2:9a:30:ef:83:53:7d:6e:89:1d:20:53:8a: 72:2b:d4:49:f2:96:c8:08:59:d1:b3:83:c5:b1:ad:d2:04:63: 46:92:f2:82:b2:7d:9a:16:e3:b1:4b:c9:5c:62:e1:5b:63:58: 2c:64:eb:22:a0:ef:94:08:89:af:32:3d:f3:3e:94:9f:c8:d1: ac:ef:96:b6:be:8d:6e:0f:c8:1b:24:55:d6:e0:f5:30:f0:62: 25:06:f0:e2:f6:33:30:bc:74:fc:46:6b:0f:de:5c:bc:de:18: 1a:23:3b:e3:b5:04:e0:6c:7f:c8:4a:e0:fe:5c:b2:b8:6c:8f: b4:50:8e:4e:ef:47:1b:ed:fa:f8:f8:ae:12:ec:dd:bf:e4:ad: 20:a4:9f:77:32:7e:54:aa:a1:b0:6f:08:3c:54:bb:ef:f9:2c: ce:17:43:cc:74:27:3b:4f:4f:2e:83:4f:f8:8d:6a:64:78:0f: 76:3a:ba:b6:3e:b7:2a:9d:e8:c5:81:9c:22:d5:72:91:25:64: 58:96:bd:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBtqpNOHzHsMIK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YjA3YmY4MTctZmM4NS00Y2QxLWJhNzItYzAwZjRmZTUxZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojZbaBOO3372nymBi6dGZVd6H0QuNZDWsA74 Y757yHwTecKxpojmvLwh7enDul7+ZdSGbqqzMjV4g3BnQPigVk4X1T2jSyJr3x7h Hq65Onqagz/w16K1Ef8gXmhlWBKfMtcOytRXFtA3N/+05wJXs0O9Cmt33V/9sbEF pVcEhS6qs3Y5NPq38BN5zhnRkHX8kAuAVUtwIr5nJ7vmhWylrlVCcRZKEF19MSgG h6V85jF3hpneKj5P57UkA3HwJ0LGdW5nNQDT0Kvs4wMyTZ0BlQbS3dP35JItgy1H Czh1K1TZ9K5xA4u5ks7OdJ9cePhZrorbyg5u98dUqKH7rTHw4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1WYK5DoUA/hLEGpbXn7Z1KuQ+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWY1YjFjYWEtMzUwZi0z YjRlLThjMjktZTY0YjMyOTI3ZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ7yYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX3aBGk+ZyrBqr4gG5+FpagPnz7D6bT9iLZ779TmWzT+Bg3PStZNrcC 06L6zoR8H6abUnTdKem5P7Meopow74NTfW6JHSBTinIr1EnylsgIWdGzg8WxrdIE Y0aS8oKyfZoW47FLyVxi4VtjWCxk6yKg75QIia8yPfM+lJ/I0azvlra+jW4PyBsk Vdbg9TDwYiUG8OL2MzC8dPxGaw/eXLzeGBojO+O1BOBsf8hK4P5csrhsj7RQjk7v Rxvt+vj4rhLs3b/krSCkn3cyflSqobBvCDxUu+/5LM4XQ8x0JztPTy6DT/iNamR4 D3Y6urY+tyqd6MWBnCLVcpElZFiWvQo= -----END CERTIFICATE-----Generated at Mon Jun 16 23:04:46 2025 by rpki-client