$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1130fe69-f62a-391d-a951-044a8697f47d.roa File: 1130fe69-f62a-391d-a951-044a8697f47d.roa (raw, json) Hash identifier: lkdDIS280YS/8Vf3TyZIXwQjvnP20kDx7T7r6MW1nR0= Subject key identifier: 31:2A:6E:19:49:DF:C4:56:B8:54:DA:8D:5B:CA:C7:06:00:33:EE:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D5629A9770A519CF82F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1130fe69-f62a-391d-a951-044a8697f47d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33490 IP address blocks: 76.138.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:56:29:a9:77:0a:51:9c:f8:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=7da68852-a861-4e2d-b229-f117412f041e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:31:b6:40:b3:99:dc:d7:78:45:38:8e:69:d9: f7:93:41:11:58:7f:41:75:5c:93:6f:cf:43:00:60: 85:a7:c1:d0:0a:3d:38:72:e4:8f:ce:f2:78:30:dc: 89:05:44:6e:34:64:09:77:3c:54:dd:6f:f1:19:d6: b2:bd:cf:c3:48:21:a8:89:46:19:79:4d:9b:88:54: 36:ca:81:ac:93:8e:18:cb:b3:47:5c:a8:21:73:e0: 9d:40:1d:c1:dd:3d:41:8b:5a:a2:6c:c7:a3:0c:c3: 6d:75:87:57:19:39:47:3c:65:a5:6e:dd:9e:b7:7a: d5:40:7f:59:60:ac:dc:74:5b:ee:67:3a:c5:ce:48: a8:a9:ac:8c:c5:d7:60:4d:e0:bc:9f:32:ba:f4:8d: 88:07:72:39:08:db:6a:f0:e9:71:a2:e2:50:39:cc: f5:23:96:b8:ed:cf:f2:f8:f2:c0:82:a7:1e:fe:36: b9:a7:cc:cd:38:77:eb:43:15:42:98:86:76:14:07: 9a:15:6f:6a:2e:b6:66:07:47:ad:d9:49:d9:64:ac: 5e:0b:8f:88:66:15:ca:25:17:d6:d5:47:f0:de:cf: cf:c7:e8:9b:09:4f:21:98:d6:ee:b9:a2:f4:38:5c: 72:f6:b7:24:59:b8:74:78:94:91:d7:a3:78:13:c6: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2A:6E:19:49:DF:C4:56:B8:54:DA:8D:5B:CA:C7:06:00:33:EE:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1130fe69-f62a-391d-a951-044a8697f47d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.138.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c1:35:14:f2:ab:b7:0d:59:50:2f:90:9d:e1:9f:27:7c:d5: 26:45:d5:d4:c4:a5:dd:30:a1:98:c1:a8:7e:f7:23:28:ca:b1: 30:b1:1f:19:72:7d:94:29:bb:99:d5:f8:38:35:f9:13:a4:e6: 57:95:a1:61:4e:5a:b9:83:1c:e6:d3:20:2e:24:4d:8b:8a:48: 64:ac:52:c3:e5:cf:19:b8:80:73:14:2f:ee:b5:3e:db:ab:62: 8a:ac:39:8a:f4:55:9a:a8:7b:88:68:1d:a3:8a:8a:79:93:b2: 97:6b:55:6c:d1:3e:f8:ed:87:bb:f7:0e:24:b7:0b:c5:a2:53: 02:44:62:b2:8e:27:2b:c5:5b:78:fa:a3:95:3f:bf:57:1a:eb: 6c:45:d7:5f:fc:2e:e5:48:45:5e:f7:5b:3c:19:ef:8e:3a:87: 40:6f:dc:05:8b:f7:d4:ae:ac:57:3c:26:8b:57:15:27:eb:46: 35:32:3d:fc:aa:60:b4:68:f7:d7:01:9b:05:22:48:71:fb:d7: 45:7c:43:51:c6:9d:e6:37:15:e1:82:03:f4:b7:1a:3f:6c:27: 65:83:41:f2:d1:9b:8a:df:81:2d:1c:33:dd:b1:b1:3c:f7:b2: 7b:80:51:3f:24:09:5e:d9:88:91:7e:ec:a0:41:98:9b:d7:cf: 1b:27:92:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebVYpqXcKUZz4L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk N2RhNjg4NTItYTg2MS00ZTJkLWIyMjktZjExNzQxMmYwNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozG2QLOZ3Nd4RTiOadn3k0ERWH9BdVyTb89D AGCFp8HQCj04cuSPzvJ4MNyJBURuNGQJdzxU3W/xGdayvc/DSCGoiUYZeU2biFQ2 yoGsk44Yy7NHXKghc+CdQB3B3T1Bi1qibMejDMNtdYdXGTlHPGWlbt2et3rVQH9Z YKzcdFvuZzrFzkioqayMxddgTeC8nzK69I2IB3I5CNtq8OlxouJQOcz1I5a47c/y +PLAgqce/ja5p8zNOHfrQxVCmIZ2FAeaFW9qLrZmB0et2UnZZKxeC4+IZhXKJRfW 1Ufw3s/Px+ibCU8hmNbuuaL0OFxy9rckWbh0eJSR16N4E8Z6uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEqbhlJ38RWuFTajVvKxwYAM+6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTEzMGZlNjktZjYyYS0z OTFkLWE5NTEtMDQ0YTg2OTdmNDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHTIqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvBNRTyq7cNWVAvkJ3hnyd81SZF1dTEpd0woZjBqH73IyjKsTCxHxly fZQpu5nV+Dg1+ROk5leVoWFOWrmDHObTIC4kTYuKSGSsUsPlzxm4gHMUL+61Ptur YoqsOYr0VZqoe4hoHaOKinmTspdrVWzRPvjth7v3DiS3C8WiUwJEYrKOJyvFW3j6 o5U/v1ca62xF11/8LuVIRV73WzwZ7446h0Bv3AWL99SurFc8JotXFSfrRjUyPfyq YLRo99cBmwUiSHH710V8Q1HGneY3FeGCA/S3Gj9sJ2WDQfLRm4rfgS0cM92xsTz3 snuAUT8kCV7ZiJF+7KBBmJvXzxsnkmw= -----END CERTIFICATE-----Generated at Mon Apr 7 05:58:27 2025 by rpki-client