$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ab80398-8f10-33ac-905e-df62b36e4342.roa File: 0ab80398-8f10-33ac-905e-df62b36e4342.roa (raw, json) Hash identifier: sgGhko3b1ll5JR495yryy2vCEAbIWpHhD3ICvOQLqCw= Subject key identifier: 3A:DE:3A:4D:7F:53:7A:79:CC:26:20:BC:28:2F:F6:32:D1:C7:33:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F22C161ABA789CBE59CE1B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ab80398-8f10-33ac-905e-df62b36e4342.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 22258 IP address blocks: 76.107.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:16:1a:ba:78:9c:be:59:ce:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=3a2e6b99-dd1e-4d7e-b462-6e7f6258008e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:ca:09:f3:5a:e1:c0:40:ca:fc:c7:7f:82: 14:e0:d6:5c:fe:12:d5:d7:3a:66:1c:2a:f3:38:d3: 94:fc:b1:bd:95:fe:da:6a:93:0e:ea:6e:b1:8f:9a: 54:cc:e0:da:2f:f1:ec:29:75:2e:ea:47:12:6f:20: 00:bf:75:d1:5a:87:8b:29:d9:69:af:ce:00:49:12: 68:a8:61:d4:20:42:a8:86:b9:af:40:0f:2c:42:28: 99:78:a9:32:92:dd:ce:6e:ef:6d:bd:a9:ee:7d:9f: 44:bb:ea:12:88:49:7b:15:a5:ec:c3:44:c9:f0:d4: f0:c8:30:fb:c9:ff:41:b7:d7:2f:4e:2c:54:5b:22: 38:5d:23:10:0b:ea:c3:56:ee:89:22:35:15:1c:45: 9b:f8:34:30:73:29:bb:3f:1b:2c:f0:e1:71:30:46: 83:c4:97:fe:91:73:1c:12:9c:e1:a8:26:bc:40:f6: 33:31:21:a0:4a:af:1b:ae:c7:7e:bc:d1:d6:a8:2b: a6:de:e5:54:ef:8b:06:cf:5d:28:64:6f:51:72:f3: f7:89:b3:ce:2c:d9:15:ba:31:ba:8e:a6:67:7b:a9: b3:da:d3:26:d3:66:86:b9:de:e4:e4:41:fd:db:2d: 51:a6:78:fc:96:a3:87:a6:5b:02:13:dc:ea:f1:82: a3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DE:3A:4D:7F:53:7A:79:CC:26:20:BC:28:2F:F6:32:D1:C7:33:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ab80398-8f10-33ac-905e-df62b36e4342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.107.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b9:4f:a7:f1:67:eb:c2:7e:52:ad:e5:0c:29:c1:b0:db:6b: c1:a9:28:86:ec:2b:39:29:3c:de:18:f8:b2:a1:ac:fb:e2:d5: 4f:47:34:4c:68:47:a6:14:f0:41:18:a1:51:c4:f3:99:df:08: 9f:23:7f:02:30:03:c3:9e:c9:b2:f5:f7:da:95:48:0a:e5:b6: 44:77:84:db:80:d7:bb:f3:53:dc:1b:fe:e7:02:30:34:e1:bf: f5:15:4d:ba:1c:87:f1:5d:d3:c6:4a:e4:c7:a0:35:52:83:cc: 89:c7:71:05:8a:0f:7c:0a:4e:b9:af:da:4d:27:89:71:bf:16: e2:ae:de:7b:b2:7e:ac:88:dd:3f:4d:92:e4:61:01:82:d4:e9: 8c:f0:3f:f7:e7:74:38:2f:2e:5d:03:9e:db:ae:b3:4c:f3:31: 4a:d5:01:e2:bb:7c:6d:ec:6e:0a:74:dc:d2:c1:06:3a:c1:f6: e8:d4:5c:de:bd:01:a0:f1:d3:90:fe:94:ae:f6:1c:eb:b7:ec: 80:6d:bf:b0:0a:0c:93:7c:1d:a0:5f:d0:dd:a7:2e:89:94:26: aa:2d:ac:14:d3:47:c6:f7:fd:9f:08:05:23:b6:51:80:92:78: 28:dd:f9:d4:36:96:d2:83:27:6c:74:21:4e:54:e9:1e:dd:42: f3:0f:98:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLBYaunicvlnOG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk M2EyZTZiOTktZGQxZS00ZDdlLWI0NjItNmU3ZjYyNTgwMDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXPKCfNa4cBAyvzHf4IU4NZc/hLV1zpmHCrz ONOU/LG9lf7aapMO6m6xj5pUzODaL/HsKXUu6kcSbyAAv3XRWoeLKdlpr84ASRJo qGHUIEKohrmvQA8sQiiZeKkykt3Obu9tvanufZ9Eu+oSiEl7FaXsw0TJ8NTwyDD7 yf9Bt9cvTixUWyI4XSMQC+rDVu6JIjUVHEWb+DQwcym7Pxss8OFxMEaDxJf+kXMc EpzhqCa8QPYzMSGgSq8brsd+vNHWqCum3uVU74sGz10oZG9RcvP3ibPOLNkVujG6 jqZne6mz2tMm02aGud7k5EH92y1Rpnj8lqOHplsCE9zq8YKjIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDreOk1/U3p5zCYgvCgv9jLRxzNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGFiODAzOTgtOGYxMC0z M2FjLTkwNWUtZGY2MmIzNmU0MzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTGvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW5T6fxZ+vCflKt5QwpwbDba8GpKIbsKzkpPN4Y+LKhrPvi1U9HNExo R6YU8EEYoVHE85nfCJ8jfwIwA8OeybL199qVSArltkR3hNuA17vzU9wb/ucCMDTh v/UVTboch/Fd08ZK5MegNVKDzInHcQWKD3wKTrmv2k0niXG/FuKu3nuyfqyI3T9N kuRhAYLU6YzwP/fndDgvLl0Dntuus0zzMUrVAeK7fG3sbgp03NLBBjrB9ujUXN69 AaDx05D+lK72HOu37IBtv7AKDJN8HaBf0N2nLomUJqotrBTTR8b3/Z8IBSO2UYCS eCjd+dQ2ltKDJ2x0IU5U6R7dQvMPmEA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:24:55 2025 by rpki-client