$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02aa2f66-f2aa-3cb4-809e-04d900d0258f.roa File: 02aa2f66-f2aa-3cb4-809e-04d900d0258f.roa (raw, json) Hash identifier: ZDwYJiKVlGdyiKkqggnifScePvaJUNb2Jzjro9ORkWY= Subject key identifier: 3C:0A:31:EC:77:4C:23:26:4C:8E:66:2A:7A:94:DF:20:96:54:D4:68 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB01C175E12215F177844C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02aa2f66-f2aa-3cb4-809e-04d900d0258f.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 76.132.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:1c:17:5e:12:21:5f:17:78:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f322081c-d8d6-42e8-a2d4-c673dfb69c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:e9:66:51:1d:d9:34:c9:0a:49:92:43:00: 43:34:80:d9:2d:e7:2b:af:ec:19:a7:eb:b6:65:d4: 54:c9:db:e9:eb:07:f0:82:2f:48:b1:04:15:47:7e: 84:ac:63:d8:a5:f6:32:70:9b:3e:14:bb:4c:2f:9f: 74:d8:17:5e:78:c4:10:33:62:6b:71:17:14:0d:0d: d8:a7:70:82:3f:d7:7a:16:be:4f:f8:6f:9f:d8:98: 64:75:ce:a2:95:f9:0f:ed:15:41:05:4a:8f:ca:74: 62:52:2b:31:56:13:e4:36:18:14:3c:6e:04:de:fc: 02:3f:da:84:5c:cb:fb:5d:c5:cd:8c:6b:e9:53:00: 2a:f9:f2:cd:3e:ae:10:d7:23:3d:58:99:b7:d3:e3: a4:3d:cb:a3:15:ad:5a:04:ab:a1:2a:48:3f:4e:9e: 99:51:15:7f:d0:44:9f:20:c4:62:80:ac:79:19:92: 30:51:40:ba:2c:93:aa:d3:ce:f5:10:d8:dd:91:7f: da:9d:4b:c7:31:46:a5:38:11:37:98:9a:a4:f5:cb: 15:66:e1:3c:90:68:b3:62:af:22:ff:35:4b:a4:75: 37:85:6a:58:67:f4:b2:25:97:5c:21:17:48:ec:86: 4b:e8:de:9e:3a:98:fb:f3:66:c7:49:c4:77:b1:b9: 65:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0A:31:EC:77:4C:23:26:4C:8E:66:2A:7A:94:DF:20:96:54:D4:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02aa2f66-f2aa-3cb4-809e-04d900d0258f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.132.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:e0:61:0b:dc:d6:2d:7b:e3:3a:47:18:3c:7e:c8:f9:fb:05: b6:c2:3a:79:07:e4:0a:6f:45:04:a7:95:5a:00:74:db:92:5e: 4e:b3:5a:ed:7e:3a:76:4a:a6:93:8f:6a:17:90:57:1c:be:cf: eb:64:cd:05:90:08:b3:c3:e8:65:3e:f3:1d:65:bd:32:17:07: 5f:7d:2a:16:fa:4a:e3:1a:19:1d:5c:40:14:88:ac:65:18:f4: 40:7c:e5:21:a1:bf:67:1c:6a:d4:50:fc:8b:19:45:b5:89:6b: 66:fa:01:3e:e6:bd:d1:cf:d9:c3:1c:99:f7:c6:ea:84:b4:dd: a0:ef:c2:eb:54:b7:02:08:80:45:f1:55:8d:cf:2f:68:48:92: 95:0d:54:8a:2d:de:a2:21:18:65:11:70:34:e8:cf:c5:86:f8: de:f8:fc:b9:4c:72:99:7a:3b:59:4f:51:f1:8c:5c:b5:23:ce: eb:5c:fc:1b:de:6d:c9:17:7c:96:01:6b:5c:24:1a:a2:f1:b5: be:de:3b:35:b6:8d:0f:50:ad:23:ac:92:52:a9:5f:95:92:9e: 7e:d6:48:69:84:45:71:5d:15:4a:a2:34:97:2d:36:03:da:5a: f5:90:fb:09:15:15:dc:e9:72:a1:a1:38:34:4e:6a:87:28:4c: d5:87:2a:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssBwXXhIhXxd4RMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjMyMjA4MWMtZDhkNi00MmU4LWEyZDQtYzY3M2RmYjY5YzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC7pZlEd2TTJCkmSQwBDNIDZLecrr+wZp+u2 ZdRUydvp6wfwgi9IsQQVR36ErGPYpfYycJs+FLtML5902BdeeMQQM2JrcRcUDQ3Y p3CCP9d6Fr5P+G+f2Jhkdc6ilfkP7RVBBUqPynRiUisxVhPkNhgUPG4E3vwCP9qE XMv7XcXNjGvpUwAq+fLNPq4Q1yM9WJm30+OkPcujFa1aBKuhKkg/Tp6ZURV/0ESf IMRigKx5GZIwUUC6LJOq0871ENjdkX/anUvHMUalOBE3mJqk9csVZuE8kGizYq8i /zVLpHU3hWpYZ/SyJZdcIRdI7IZL6N6eOpj782bHScR3sbllvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwKMex3TCMmTI5mKnqU3yCWVNRoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDJhYTJmNjYtZjJhYS0z Y2I0LTgwOWUtMDRkOTAwZDAyNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTISUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMvgYQvc1i174zpHGDx+yPn7BbbCOnkH5ApvRQSnlVoAdNuSXk6zWu1+ OnZKppOPaheQVxy+z+tkzQWQCLPD6GU+8x1lvTIXB199Khb6SuMaGR1cQBSIrGUY 9EB85SGhv2ccatRQ/IsZRbWJa2b6AT7mvdHP2cMcmffG6oS03aDvwutUtwIIgEXx VY3PL2hIkpUNVIot3qIhGGURcDToz8WG+N74/LlMcpl6O1lPUfGMXLUjzutc/Bve bckXfJYBa1wkGqLxtb7eOzW2jQ9QrSOsklKpX5WSnn7WSGmERXFdFUqiNJctNgPa WvWQ+wkVFdzpcqGhODROaocoTNWHKu8= -----END CERTIFICATE-----Generated at Mon Apr 7 05:58:34 2025 by rpki-client