$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/047cbcfc-44f0-3b8e-856d-6fcc55eee0b3.roa File: 047cbcfc-44f0-3b8e-856d-6fcc55eee0b3.roa (raw, json) Hash identifier: G2qntSxXr2WYIzFK56PpnyXOOBPKoMCyd8g9Px61u/w= Subject key identifier: BE:78:92:47:BD:9C:7E:67:C3:AB:25:77:30:8C:3F:42:4D:09:AB:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1C101E24542DA58E75700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/047cbcfc-44f0-3b8e-856d-6fcc55eee0b3.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 76.132.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:c1:01:e2:45:42:da:58:e7:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=635a5546-1ace-46cf-8ae2-4f081cf81014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5a:72:4b:b1:bd:31:57:b0:8d:61:38:24:34: 78:3d:36:ca:8e:c5:eb:28:f7:56:01:85:cf:72:3c: 73:eb:ad:fb:2c:e2:f8:9e:1e:f3:30:ba:a4:92:b8: d1:c3:3b:ad:d8:75:7e:fd:32:06:25:da:d8:2a:25: 76:7c:0e:67:98:85:07:a0:3f:07:bb:af:f8:31:93: c0:03:74:7c:5a:d7:3a:26:f5:5d:e3:44:c5:d5:f7: 01:e7:48:0f:32:64:48:4f:67:85:4a:e2:6f:c6:95: d3:62:f1:c3:d9:3d:d7:39:c7:83:d0:a9:c3:04:24: 2b:37:f5:49:a0:6c:4f:7b:1d:5e:28:85:06:aa:1e: 24:62:cf:4c:4d:43:ec:ec:de:a5:5e:26:26:2f:e6: 74:54:a9:ac:b3:3e:c5:cc:08:28:ae:7a:2f:f4:c0: 43:06:e2:d8:5a:51:24:96:72:b5:53:83:2a:7e:d7: 53:06:92:df:c7:8e:83:60:05:95:15:38:c8:eb:27: 18:21:1d:dd:16:82:95:52:33:64:39:c1:dc:be:79: e7:97:fe:6a:21:e1:82:21:62:db:83:f9:65:ff:76: 4b:0d:68:65:bd:18:c7:e7:fc:27:51:12:cc:c0:75: 8b:26:b8:3c:6b:03:b1:57:bb:4b:57:a1:3f:3d:8a: d6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:78:92:47:BD:9C:7E:67:C3:AB:25:77:30:8C:3F:42:4D:09:AB:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/047cbcfc-44f0-3b8e-856d-6fcc55eee0b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.132.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:09:5e:84:95:7d:1f:b0:a4:55:87:4d:4b:5b:af:60:ea:92: bd:0a:d9:f9:37:5e:4d:65:1f:54:31:9e:c7:5e:db:81:75:49: d5:0d:69:bf:73:b9:a2:ef:65:0b:7f:65:c7:31:c8:ed:6a:cd: a8:40:db:97:86:7d:df:66:a9:2e:e4:65:57:d3:fc:37:c3:b5: 17:06:97:6b:1a:91:7a:39:1b:e6:25:61:2e:cd:3c:c7:d9:63: 50:25:80:0f:4b:dd:bd:0a:7a:98:19:fe:f5:91:bd:0e:15:3c: 17:33:21:0a:91:15:30:37:4a:eb:b1:19:e5:27:10:d8:f2:8c: 47:64:ba:be:62:fb:9c:a1:3a:db:7f:6c:bd:d8:0b:09:4b:38: ca:79:98:dc:57:72:a0:0b:52:78:ab:ba:e4:06:ec:c7:4e:7f: ee:13:9e:9c:20:1b:39:0c:7d:bd:5d:b3:37:2c:83:62:ca:ea: 97:b2:37:96:ec:86:d5:e2:cd:6c:19:a5:e1:ba:74:08:33:01: 7b:e5:6f:94:64:ac:26:54:74:0b:26:c1:bc:8f:53:3b:ce:28: 9f:02:ea:67:e9:ce:de:33:ff:fa:94:9c:d2:2d:96:84:e7:c2: 93:d2:27:6e:34:f6:43:64:5c:00:3a:4a:81:2c:a4:4f:ed:d7: 50:ea:32:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksscEB4kVC2ljnVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NjM1YTU1NDYtMWFjZS00NmNmLThhZTItNGYwODFjZjgxMDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVpyS7G9MVewjWE4JDR4PTbKjsXrKPdWAYXP cjxz6637LOL4nh7zMLqkkrjRwzut2HV+/TIGJdrYKiV2fA5nmIUHoD8Hu6/4MZPA A3R8Wtc6JvVd40TF1fcB50gPMmRIT2eFSuJvxpXTYvHD2T3XOceD0KnDBCQrN/VJ oGxPex1eKIUGqh4kYs9MTUPs7N6lXiYmL+Z0VKmssz7FzAgornov9MBDBuLYWlEk lnK1U4MqftdTBpLfx46DYAWVFTjI6ycYIR3dFoKVUjNkOcHcvnnnl/5qIeGCIWLb g/ll/3ZLDWhlvRjH5/wnURLMwHWLJrg8awOxV7tLV6E/PYrWRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL54kke9nH5nw6sldzCMP0JNCavVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDQ3Y2JjZmMtNDRmMC0z YjhlLTg1NmQtNmZjYzU1ZWVlMGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgJXoSVfR+wpFWHTUtbr2Dqkr0K2fk3Xk1lH1Qxnsde24F1SdUNab9z uaLvZQt/ZccxyO1qzahA25eGfd9mqS7kZVfT/DfDtRcGl2sakXo5G+YlYS7NPMfZ Y1AlgA9L3b0KepgZ/vWRvQ4VPBczIQqRFTA3SuuxGeUnENjyjEdkur5i+5yhOtt/ bL3YCwlLOMp5mNxXcqALUniruuQG7MdOf+4TnpwgGzkMfb1dszcsg2LK6peyN5bs htXizWwZpeG6dAgzAXvlb5RkrCZUdAsmwbyPUzvOKJ8C6mfpzt4z//qUnNItloTn wpPSJ2409kNkXAA6SoEspE/t11DqMjA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:18:27 2025 by rpki-client