$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6db2e8a0-2639-34e0-bd34-a3edafa99fe9.roa File: 6db2e8a0-2639-34e0-bd34-a3edafa99fe9.roa (raw, json) Hash identifier: GCt6MfNTBGynV8D4O6/KgDgX5j0uBRDr4pWpBhLuBrU= Subject key identifier: CA:55:CE:9D:C8:E0:B1:59:40:E1:DA:F0:16:65:43:66:D2:F7:C4:FF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4EE2830E4F46FDA3A6C17C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6db2e8a0-2639-34e0-bd34-a3edafa99fe9.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7015 IP address blocks: 76.152.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ee:28:30:e4:f4:6f:da:3a:6c:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=7f90d02e-3b01-4940-ad7d-91e23f1f38ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d6:c1:8b:20:fa:06:94:69:e3:03:84:be:aa: a9:13:33:c7:5e:8d:e5:68:07:cb:41:31:58:08:54: 6e:e1:e9:b2:a7:66:3f:7b:b1:91:d7:d5:52:06:d8: 06:44:49:e6:67:37:f0:a0:b6:68:a1:9d:fb:9d:1a: 07:39:eb:4a:18:12:4b:f0:1b:e9:87:5a:dd:1e:0e: 2b:e7:7a:b0:aa:d9:7d:2f:25:56:f0:ac:04:c9:5e: b9:61:c4:16:67:f1:37:6b:fa:0c:3d:32:c9:bb:d9: 24:e4:1e:83:59:2b:82:27:65:60:cb:cb:8e:90:74: e1:62:7b:79:5f:18:c1:c5:15:20:e6:0d:f0:58:13: a2:eb:ce:56:79:a7:3e:21:63:75:75:89:9e:31:f4: a8:00:33:4c:86:e1:cc:53:f8:af:21:86:cf:dd:b9: 8e:2e:f5:7c:5f:90:0f:de:35:71:7b:c6:3a:35:11: 37:33:0a:3c:36:50:8e:60:9d:e3:b7:41:97:0a:99: 97:e1:24:9b:d9:0b:1c:a2:49:fd:68:0d:51:63:e8: 17:79:61:cf:14:a0:90:dc:1c:46:eb:b0:c3:1e:0c: ba:06:20:4c:17:90:c5:74:34:7e:76:b5:f1:5d:82: 1e:ad:87:ab:f0:76:3c:7c:54:d5:80:63:54:36:58: c8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:55:CE:9D:C8:E0:B1:59:40:E1:DA:F0:16:65:43:66:D2:F7:C4:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6db2e8a0-2639-34e0-bd34-a3edafa99fe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.152.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a9:39:21:a4:3d:14:4a:14:78:a7:e2:ed:c7:40:5a:cd:ed: e6:bb:43:14:c1:08:33:f5:b9:78:9f:d9:33:75:61:e5:39:0c: e4:4e:8d:2d:8d:b5:8f:85:cc:05:fa:3d:1e:54:9a:20:5d:24: 3a:4e:bd:1e:d8:a6:01:9c:68:47:76:f1:34:56:28:3b:7f:6f: a6:eb:ed:4b:1e:c6:de:12:eb:03:62:ed:f7:de:d5:f2:c0:76: 8f:cf:e3:ad:d3:d6:d0:7d:10:46:33:d3:20:c3:bb:8a:19:70: 09:72:cf:5b:17:22:5b:20:33:48:75:77:43:09:f4:fa:d6:3c: b3:70:4d:28:6e:f6:36:2a:b7:2e:87:29:6b:75:f6:cc:c9:0d: d1:63:6e:96:0d:2b:4f:22:4a:e1:0d:6b:2a:20:e6:cf:2d:ac: a4:d3:94:e3:07:36:80:19:cf:66:d1:c3:ef:21:01:fb:0e:3c: 8a:3e:80:99:e4:25:3f:91:69:02:bb:21:85:ba:6e:7a:4c:94: eb:64:12:2c:e1:dc:0a:88:b3:e7:cb:44:16:a0:de:02:d7:32: b6:b2:d1:28:e2:ad:41:eb:98:38:74:62:38:a0:c4:be:e8:7d: cc:16:af:3d:5e:dc:9c:0a:38:fd:e9:9b:59:de:c0:39:f8:f9: 7d:f9:82:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07igw5PRv2jpsF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk N2Y5MGQwMmUtM2IwMS00OTQwLWFkN2QtOTFlMjNmMWYzOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNbBiyD6BpRp4wOEvqqpEzPHXo3laAfLQTFY CFRu4emyp2Y/e7GR19VSBtgGREnmZzfwoLZooZ37nRoHOetKGBJL8Bvph1rdHg4r 53qwqtl9LyVW8KwEyV65YcQWZ/E3a/oMPTLJu9kk5B6DWSuCJ2Vgy8uOkHThYnt5 XxjBxRUg5g3wWBOi685Weac+IWN1dYmeMfSoADNMhuHMU/ivIYbP3bmOLvV8X5AP 3jVxe8Y6NRE3Mwo8NlCOYJ3jt0GXCpmX4SSb2Qscokn9aA1RY+gXeWHPFKCQ3BxG 67DDHgy6BiBMF5DFdDR+drXxXYIerYer8HY8fFTVgGNUNljIaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpVzp3I4LFZQOHa8BZlQ2bS98T/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmRiMmU4YTAtMjYzOS0z NGUwLWJkMzQtYTNlZGFmYTk5ZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTJjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWpOSGkPRRKFHin4u3HQFrN7ea7QxTBCDP1uXif2TN1YeU5DOROjS2N tY+FzAX6PR5UmiBdJDpOvR7YpgGcaEd28TRWKDt/b6br7Usext4S6wNi7ffe1fLA do/P463T1tB9EEYz0yDDu4oZcAlyz1sXIlsgM0h1d0MJ9PrWPLNwTShu9jYqty6H KWt19szJDdFjbpYNK08iSuENayog5s8trKTTlOMHNoAZz2bRw+8hAfsOPIo+gJnk JT+RaQK7IYW6bnpMlOtkEizh3AqIs+fLRBag3gLXMray0SjirUHrmDh0YjigxL7o fcwWrz1e3JwKOP3pm1newDn4+X35glo= -----END CERTIFICATE-----Generated at Wed Aug 6 05:15:16 2025 by rpki-client