$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11935c26-ba37-3ffb-9ec2-91a1711db1ec.roa File: 11935c26-ba37-3ffb-9ec2-91a1711db1ec.roa (raw, json) Hash identifier: wLkasKcbulqfLqFFJp8DgbnGDoIzMifrQHF3Z559ur8= Subject key identifier: 33:92:5B:BE:0D:9D:95:D1:98:B2:C1:D1:F6:7A:D7:19:DC:62:4D:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B98202DCA84EDFBC33200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11935c26-ba37-3ffb-9ec2-91a1711db1ec.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 76.122.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:98:20:2d:ca:84:ed:fb:c3:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=66d2829f-18f6-4b48-9fc3-ef2260946f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:97:4f:9c:db:dc:fa:a4:7b:60:cb:54:fd: cf:5a:f7:50:f6:0e:25:42:40:72:61:8f:4f:fd:e1: f5:3f:26:58:3c:f4:48:11:8e:cc:72:21:90:f7:97: 3d:66:59:fe:aa:e7:ce:18:2f:08:1b:dd:aa:20:91: 87:cb:ac:1c:52:46:eb:ba:e6:eb:a2:4c:57:84:87: 01:fb:1d:fd:4e:3b:b6:e6:97:2d:48:90:9d:08:15: 49:24:70:5d:bc:9a:39:4a:1c:56:fe:69:3b:ce:4a: 2e:d1:bb:a0:29:c4:03:42:15:12:7a:9a:23:bb:3d: 82:f2:a0:56:3a:5b:87:68:6e:08:a5:f2:66:c8:be: cb:04:92:55:f2:76:d6:03:ce:1c:4d:a9:31:d7:c7: e3:8e:ca:03:7e:ed:8c:86:5a:4f:09:73:50:e5:fc: f8:8c:98:33:fd:97:b0:70:0e:35:e5:e9:ed:aa:99: 04:98:8d:52:b5:8d:af:a0:e2:0c:47:c0:18:da:9b: 3d:fb:4b:4b:8e:c4:fc:12:bb:30:0a:64:cb:6b:97: 84:37:62:d4:f8:e3:1c:d1:5f:11:60:38:bd:f7:25: d9:0f:6f:12:da:9e:ab:f7:b3:06:f3:d3:e4:65:ee: 0d:67:f7:9d:88:50:0d:39:22:90:be:15:a4:0c:bc: 68:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:92:5B:BE:0D:9D:95:D1:98:B2:C1:D1:F6:7A:D7:19:DC:62:4D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11935c26-ba37-3ffb-9ec2-91a1711db1ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.122.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:27:7b:8f:92:9a:5f:d9:dd:63:08:be:11:8f:5a:2a:01:fb: 3a:67:c8:11:22:b0:8e:c8:fd:31:32:4f:67:43:f7:73:00:aa: 9a:75:93:58:44:d7:d4:44:8c:a5:fa:a0:9d:eb:ec:23:3c:7c: 4d:50:cd:09:99:85:c0:7d:6b:1e:68:ec:51:4d:02:0e:78:73: 91:18:32:b4:eb:ae:42:f1:d9:8f:01:ef:7a:68:a4:97:07:32: 45:d6:d9:82:a7:13:3a:6d:90:85:a8:19:d8:4d:97:e0:c0:23: 57:4f:1a:cd:0b:e5:e9:65:c9:da:d2:4e:b5:9f:d2:ba:d8:b2: 47:ed:66:e8:d1:71:6c:6b:ab:79:f1:73:05:b4:45:42:07:0a: d3:4a:07:05:51:19:ba:d5:0c:9d:c4:b6:2b:47:69:01:77:4b: 62:0f:f8:c7:9b:32:0f:84:5d:8b:e8:5e:92:58:a9:6e:75:f2: c2:34:2c:1c:04:59:59:41:06:e4:6a:ff:d9:6c:85:37:59:65: a7:ed:4b:bd:cb:fa:30:9f:fb:2a:8f:ad:8f:b0:b9:33:8d:8f: 24:ed:37:df:0a:4c:34:98:53:24:1b:3d:39:39:7a:69:48:40: 05:47:c0:12:1d:42:ce:41:f4:ae:97:a4:43:91:6e:bb:57:ee: f3:9a:4c:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea5ggLcqE7fvDMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NjZkMjgyOWYtMThmNi00YjQ4LTlmYzMtZWYyMjYwOTQ2ZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO6XT5zb3Pqke2DLVP3PWvdQ9g4lQkByYY9P /eH1PyZYPPRIEY7MciGQ95c9Zln+qufOGC8IG92qIJGHy6wcUkbruubrokxXhIcB +x39Tju25pctSJCdCBVJJHBdvJo5ShxW/mk7zkou0bugKcQDQhUSepojuz2C8qBW OluHaG4IpfJmyL7LBJJV8nbWA84cTakx18fjjsoDfu2MhlpPCXNQ5fz4jJgz/Zew cA415entqpkEmI1StY2voOIMR8AY2ps9+0tLjsT8ErswCmTLa5eEN2LU+OMc0V8R YDi99yXZD28S2p6r97MG89PkZe4NZ/ediFANOSKQvhWkDLxo1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOSW74NnZXRmLLB0fZ61xncYk2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTE5MzVjMjYtYmEzNy0z ZmZiLTllYzItOTFhMTcxMWRiMWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANsne4+Sml/Z3WMIvhGPWioB+zpnyBEisI7I/TEyT2dD93MAqpp1k1hE 19REjKX6oJ3r7CM8fE1QzQmZhcB9ax5o7FFNAg54c5EYMrTrrkLx2Y8B73popJcH MkXW2YKnEzptkIWoGdhNl+DAI1dPGs0L5ellydrSTrWf0rrYskftZujRcWxrq3nx cwW0RUIHCtNKBwVRGbrVDJ3EtitHaQF3S2IP+MebMg+EXYvoXpJYqW518sI0LBwE WVlBBuRq/9lshTdZZaftS73L+jCf+yqPrY+wuTONjyTtN98KTDSYUyQbPTk5emlI QAVHwBIdQs5B9K6XpEORbrtX7vOaTEg= -----END CERTIFICATE-----Generated at Mon Apr 7 09:45:28 2025 by rpki-client