$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0b40e38-3d89-3eb0-a063-ed6674492c2b.roa File: d0b40e38-3d89-3eb0-a063-ed6674492c2b.roa (raw, json) Hash identifier: ZQyKM006I4ymh9wLM8zcIYfrnNNeIy2jYOySG+TUaGo= Subject key identifier: 90:D9:92:10:5D:A7:7C:6E:8B:08:6A:74:D0:F8:7E:F6:8F:10:FF:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C07359BDF7446FF3676BB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0b40e38-3d89-3eb0-a063-ed6674492c2b.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33660 IP address blocks: 76.149.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:07:35:9b:df:74:46:ff:36:76:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=b53beb56-8c79-458d-b6b8-43035cc3432f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e5:3a:33:39:10:0b:5b:b5:b3:85:50:49:c1: cf:14:db:45:d7:19:64:5f:9c:30:51:90:f9:20:c6: 35:08:57:30:ba:d4:5c:4a:a5:66:ea:99:63:20:ef: 2b:e3:63:95:20:f1:85:13:87:8e:90:4a:55:63:88: fb:65:44:37:63:fd:68:af:fa:e2:10:be:92:af:ab: 26:6d:6c:1e:f6:14:2d:63:ab:d0:09:f1:01:cb:96: ff:9a:20:e6:b1:49:4b:91:13:fb:8a:21:30:3e:6c: c6:be:48:a2:d7:34:1e:f7:6f:ec:0e:37:f7:46:03: 94:9a:66:50:d3:35:0b:8c:4b:02:cf:70:c4:82:b3: 57:79:f0:e7:f7:58:74:2f:7b:80:e4:b2:48:3f:70: 09:c1:4d:16:aa:67:dd:6f:64:90:f8:a2:7b:07:a6: 97:ac:05:a8:4d:6a:0a:82:a6:d1:6d:bb:b3:51:eb: 9a:ad:13:43:ee:28:f5:ed:4a:22:c9:c8:d6:7e:9d: ea:7d:be:ea:bd:61:10:16:38:44:63:e1:31:26:b0: 4e:c1:98:76:ef:77:7c:98:05:cd:e7:c3:6d:b5:da: c3:57:8c:67:b4:13:1e:9b:95:29:5e:8e:43:96:f7: 94:d9:bc:34:29:3c:69:c3:fb:41:1a:d8:91:c7:3f: b9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D9:92:10:5D:A7:7C:6E:8B:08:6A:74:D0:F8:7E:F6:8F:10:FF:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0b40e38-3d89-3eb0-a063-ed6674492c2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.149.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:09:93:f0:32:76:1b:07:6d:30:7b:bb:d2:88:bb:c7:44:4d: e9:95:ac:86:8a:ed:8e:f1:45:e9:36:67:cc:b4:74:df:73:1b: cc:5f:a6:e1:d5:ac:f5:76:d2:f1:be:f5:be:d2:54:90:67:a6: 0f:fb:48:22:c0:6d:74:df:55:bf:9a:e6:03:83:06:a6:4a:97: 37:27:98:82:48:4b:82:a4:d0:35:94:4a:57:93:34:3d:0f:7d: aa:53:ad:0e:7c:38:57:57:47:9c:e0:bf:bc:59:50:f1:ad:d1: 48:5f:db:18:1c:5a:ce:11:6e:43:f4:5b:cb:8e:14:93:25:19: 03:32:3a:99:fe:e7:77:66:a7:10:93:17:81:3c:13:c1:bf:c8: 4c:3d:32:43:2b:a4:1b:37:a1:a2:db:e2:a9:9b:d6:49:97:de: 98:b6:70:b9:df:ca:5c:40:eb:1f:bd:9b:56:e9:f7:2e:40:39: 32:b4:c7:5a:c9:22:9f:07:66:85:e7:44:f3:54:47:3a:8f:94: 74:4c:e2:b7:34:47:7e:7f:1d:b1:0b:fd:01:ce:8a:fe:36:29: 86:c1:3a:42:4c:f6:4d:b1:0a:ef:c2:c4:32:20:4f:ed:6c:3e: 5c:e2:0f:dd:88:47:6a:b0:5f:74:79:63:9b:77:7d:a2:b7:a7: 2c:fb:1b:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBzWb33RG/zZ2u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YjUzYmViNTYtOGM3OS00NThkLWI2YjgtNDMwMzVjYzM0MzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OU6MzkQC1u1s4VQScHPFNtF1xlkX5wwUZD5 IMY1CFcwutRcSqVm6pljIO8r42OVIPGFE4eOkEpVY4j7ZUQ3Y/1or/riEL6Sr6sm bWwe9hQtY6vQCfEBy5b/miDmsUlLkRP7iiEwPmzGvkii1zQe92/sDjf3RgOUmmZQ 0zULjEsCz3DEgrNXefDn91h0L3uA5LJIP3AJwU0Wqmfdb2SQ+KJ7B6aXrAWoTWoK gqbRbbuzUeuarRND7ij17UoiycjWfp3qfb7qvWEQFjhEY+ExJrBOwZh273d8mAXN 58NttdrDV4xntBMem5UpXo5DlveU2bw0KTxpw/tBGtiRxz+5GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDZkhBdp3xuiwhqdND4fvaPEP9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDBiNDBlMzgtM2Q4OS0z ZWIwLWEwNjMtZWQ2Njc0NDkyYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJWKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANgJk/AydhsHbTB7u9KIu8dETemVrIaK7Y7xRek2Z8y0dN9zG8xfpuHV rPV20vG+9b7SVJBnpg/7SCLAbXTfVb+a5gODBqZKlzcnmIJIS4Kk0DWUSleTND0P fapTrQ58OFdXR5zgv7xZUPGt0Uhf2xgcWs4RbkP0W8uOFJMlGQMyOpn+53dmpxCT F4E8E8G/yEw9MkMrpBs3oaLb4qmb1kmX3pi2cLnfylxA6x+9m1bp9y5AOTK0x1rJ Ip8HZoXnRPNURzqPlHRM4rc0R35/HbEL/QHOiv42KYbBOkJM9k2xCu/CxDIgT+1s PlziD92IR2qwX3R5Y5t3faK3pyz7GyY= -----END CERTIFICATE-----Generated at Sun Jun 22 21:30:25 2025 by rpki-client