$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf89f43e-7890-34db-9002-46b198295e0f.roa File: bf89f43e-7890-34db-9002-46b198295e0f.roa (raw, json) Hash identifier: mjJ9OJ/g0vbmYt5N9GRbtXlgL+pDPuXPoUyoZL0eykU= Subject key identifier: F3:C5:AC:13:C5:B3:28:80:56:F5:6A:86:6B:75:64:64:63:4C:CA:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C073686A07005D759902300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf89f43e-7890-34db-9002-46b198295e0f.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33660 IP address blocks: 76.149.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:36:86:a0:70:05:d7:59:90:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=c6a352dc-6ca1-4403-b993-34190e0b0ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3c:96:5d:be:7f:e3:23:50:37:8e:62:19:f2: 57:dc:2d:8b:48:10:0c:c3:d4:77:8b:63:f6:32:0a: 07:1c:64:cf:24:3f:da:db:85:41:00:d2:5f:45:85: 34:c0:1e:bb:28:25:22:da:b2:cf:d9:b6:39:e1:61: 2c:16:c9:48:ab:ed:ef:f8:26:e1:61:dd:54:c7:34: d7:aa:d6:fc:a3:71:36:e9:91:5f:8a:26:9d:cd:4c: 7d:38:be:76:bc:62:b6:fb:d6:e6:af:d0:a6:b1:ab: a1:dc:da:46:84:be:bd:f7:f7:06:a8:3e:f6:28:44: bd:b6:eb:2b:5e:c1:71:42:ed:d8:35:81:5b:67:7a: 38:7c:02:9d:27:4e:e1:5e:ab:b5:fb:3c:70:76:8b: 78:4c:8d:fd:03:e4:72:00:ef:b6:05:4d:eb:78:0c: 58:47:c1:6e:f0:fd:22:e3:ce:42:3a:ec:a3:44:e6: 32:ed:6a:85:75:8e:99:31:80:08:3e:57:f1:b0:60: 19:e4:7e:46:84:20:6e:ed:07:1c:73:ad:54:d3:44: 87:9c:22:31:57:e3:45:3d:52:ab:a0:6b:ec:f0:e1: ef:a5:56:7a:50:d8:ef:f5:d7:d0:00:8a:af:3f:2a: fb:28:b3:6c:91:09:49:09:32:4b:2f:65:2a:77:42: 2c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C5:AC:13:C5:B3:28:80:56:F5:6A:86:6B:75:64:64:63:4C:CA:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf89f43e-7890-34db-9002-46b198295e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.149.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:24:41:4e:01:f6:01:0f:ea:90:61:9b:54:56:ee:1d:17:04: 1e:64:6b:c8:d0:79:d8:17:c9:18:2d:ed:14:57:53:11:18:6c: 99:b6:88:c1:be:99:b5:93:44:33:eb:d4:ba:66:2f:20:5e:27: 41:67:05:9c:94:a6:54:cb:46:f2:c4:fc:ba:d6:3a:c6:26:d4: 4a:4f:11:fc:bc:3c:3f:5f:4f:c4:20:d2:33:cc:82:12:b1:da: cd:f8:f8:96:16:60:96:56:6d:1f:1c:ea:eb:d8:1a:a9:bd:da: 2b:e7:4a:96:a7:56:3e:d7:f5:50:ff:2e:fe:d2:bc:d9:12:d3: f8:fa:99:a1:df:de:8b:05:93:d2:90:67:53:d2:cc:4f:d2:1b: d5:6f:60:75:87:08:2c:bc:79:f6:6e:3d:08:b0:b1:0f:90:cd: 91:3e:d3:cb:cb:48:3f:b3:66:78:23:21:c5:6e:a1:2c:24:27: 5b:4a:84:2c:19:93:58:69:7d:61:1f:0a:ba:b6:a8:b9:50:4f: ac:06:9f:19:c0:9b:34:1c:5f:f2:f3:6d:48:73:1c:b2:b0:37: 30:cb:9d:2b:51:0d:54:d8:e3:ba:91:6a:b8:86:9e:66:70:f4: ae:fa:2b:4c:bc:9c:24:92:6a:f4:fc:43:0f:a6:53:86:46:ae: 5e:e1:e5:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBzaGoHAF11mQIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YzZhMzUyZGMtNmNhMS00NDAzLWI5OTMtMzQxOTBlMGIwYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDyWXb5/4yNQN45iGfJX3C2LSBAMw9R3i2P2 MgoHHGTPJD/a24VBANJfRYU0wB67KCUi2rLP2bY54WEsFslIq+3v+CbhYd1UxzTX qtb8o3E26ZFfiiadzUx9OL52vGK2+9bmr9Cmsauh3NpGhL699/cGqD72KES9tusr XsFxQu3YNYFbZ3o4fAKdJ07hXqu1+zxwdot4TI39A+RyAO+2BU3reAxYR8Fu8P0i 485COuyjROYy7WqFdY6ZMYAIPlfxsGAZ5H5GhCBu7Qccc61U00SHnCIxV+NFPVKr oGvs8OHvpVZ6UNjv9dfQAIqvPyr7KLNskQlJCTJLL2Uqd0Is5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPFrBPFsyiAVvVqhmt1ZGRjTMo0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY4OWY0M2UtNzg5MC0z NGRiLTkwMDItNDZiMTk4Mjk1ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYkQU4B9gEP6pBhm1RW7h0XBB5ka8jQedgXyRgt7RRXUxEYbJm2iMG+ mbWTRDPr1LpmLyBeJ0FnBZyUplTLRvLE/LrWOsYm1EpPEfy8PD9fT8Qg0jPMghKx 2s34+JYWYJZWbR8c6uvYGqm92ivnSpanVj7X9VD/Lv7SvNkS0/j6maHf3osFk9KQ Z1PSzE/SG9VvYHWHCCy8efZuPQiwsQ+QzZE+08vLSD+zZngjIcVuoSwkJ1tKhCwZ k1hpfWEfCrq2qLlQT6wGnxnAmzQcX/LzbUhzHLKwNzDLnStRDVTY47qRariGnmZw 9K76K0y8nCSSavT8Qw+mU4ZGrl7h5Zc= -----END CERTIFICATE-----Generated at Sun Jun 22 21:31:36 2025 by rpki-client