$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1901459c-ea71-35c8-980c-22f9e838993c.roa File: 1901459c-ea71-35c8-980c-22f9e838993c.roa (raw, json) Hash identifier: 9kJxOPan/CpnWR6VrEbA7DPKkLeggyDd4+jtSAFvDKQ= Subject key identifier: D9:35:24:46:C0:50:A3:8F:27:52:10:18:7F:FC:B4:5F:98:60:61:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7FFC66DA073C9FFA7B740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1901459c-ea71-35c8-980c-22f9e838993c.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 76.143.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:ff:c6:6d:a0:73:c9:ff:a7:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=a6f5d675-8bca-4a42-b361-baaa87d33cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:30:51:46:c8:1c:b9:5a:61:79:e2:da:bf:87: 64:e0:ae:a5:b6:14:0d:3f:59:67:b1:e8:53:20:31: 71:1c:56:f2:b3:83:fb:c4:d9:eb:67:b9:72:11:48: f2:1b:21:12:2c:ed:64:b7:3d:68:f8:e4:f9:83:7b: 9d:bc:2e:18:b5:c1:d8:29:9e:e0:87:b4:43:d4:1a: ce:5d:b6:64:4b:3c:50:5f:60:16:db:93:61:79:12: b2:8b:70:9a:6d:47:f7:39:d3:c2:65:25:2d:19:f0: b3:25:27:b9:95:dc:ff:e2:cf:5a:6d:b4:b6:3f:46: d3:64:cb:b0:80:fc:6d:35:81:1b:5a:34:53:ed:42: 41:31:38:43:c3:62:a8:09:85:09:b8:b9:06:cf:cb: 5e:86:a0:25:08:9c:ff:60:76:56:3e:2d:13:25:b3: 0f:cb:4e:ed:9d:4b:94:0e:80:9a:39:0c:74:7d:7a: 18:a4:4e:e4:fc:73:8d:e4:5a:aa:84:f5:08:41:8a: ce:c7:6c:a6:92:b8:25:0b:4c:e1:dd:fe:a1:20:f3: 01:2e:1c:62:f5:b2:81:05:37:95:c4:2b:48:62:e1: 06:3f:20:b1:6b:60:fa:49:b9:d0:df:9a:e8:32:15: e3:20:c3:58:ed:50:91:cc:27:f9:39:8c:12:ae:de: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:35:24:46:C0:50:A3:8F:27:52:10:18:7F:FC:B4:5F:98:60:61:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1901459c-ea71-35c8-980c-22f9e838993c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.143.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:d3:dc:93:da:fe:ed:5c:ab:38:96:41:71:9c:d7:f3:81:8e: 76:f0:0a:2b:83:1c:eb:9e:60:e9:2d:98:69:d5:0a:b5:30:ca: c9:39:1e:f9:19:c6:b8:68:ce:09:5b:21:d0:58:ad:cc:c6:72: 1e:7e:4b:b5:73:67:60:89:55:9b:14:de:71:03:43:5e:bc:d6: 13:ee:68:0d:5f:99:98:06:1f:44:0f:31:d9:23:0a:f9:77:e5: 35:6f:20:00:bf:88:4b:c3:46:05:c9:22:ef:33:0a:d8:72:68: 67:11:cd:87:d9:20:95:ae:dd:a0:39:36:4c:a1:a7:df:bf:1b: 7d:07:b5:73:6e:f7:8a:25:c5:92:2e:9e:28:d4:47:e5:98:29: b5:b8:45:bf:b2:f0:6f:f1:3c:50:32:08:12:78:bc:2a:ea:f8: 52:3b:c6:c2:be:64:5a:47:bf:dd:8e:6f:83:f3:9f:ff:ac:e5: b3:2a:95:78:38:5c:e2:f5:3d:1d:e2:4f:d4:c3:ed:fb:60:e6: 2a:2a:04:87:25:4f:fd:06:3b:75:89:64:51:f1:64:ba:f3:3d: 1a:da:b9:e5:f4:0e:fa:43:e8:78:67:67:f1:d0:81:67:3f:1f: a7:fb:dc:e6:6f:7e:5a:91:a2:dc:2d:4f:4a:c9:bc:ce:cb:ff: 50:18:be:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09//GbaBzyf+nt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YTZmNWQ2NzUtOGJjYS00YTQyLWIzNjEtYmFhYTg3ZDMzY2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTBRRsgcuVpheeLav4dk4K6lthQNP1lnsehT IDFxHFbys4P7xNnrZ7lyEUjyGyESLO1ktz1o+OT5g3udvC4YtcHYKZ7gh7RD1BrO XbZkSzxQX2AW25NheRKyi3CabUf3OdPCZSUtGfCzJSe5ldz/4s9abbS2P0bTZMuw gPxtNYEbWjRT7UJBMThDw2KoCYUJuLkGz8tehqAlCJz/YHZWPi0TJbMPy07tnUuU DoCaOQx0fXoYpE7k/HON5FqqhPUIQYrOx2ymkrglC0zh3f6hIPMBLhxi9bKBBTeV xCtIYuEGPyCxa2D6SbnQ35roMhXjIMNY7VCRzCf5OYwSrt6E7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNk1JEbAUKOPJ1IQGH/8tF+YYGGXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTkwMTQ1OWMtZWE3MS0z NWM4LTk4MGMtMjJmOWU4Mzg5OTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANrT3JPa/u1cqziWQXGc1/OBjnbwCiuDHOueYOktmGnVCrUwysk5HvkZ xrhozglbIdBYrczGch5+S7VzZ2CJVZsU3nEDQ1681hPuaA1fmZgGH0QPMdkjCvl3 5TVvIAC/iEvDRgXJIu8zCthyaGcRzYfZIJWu3aA5Nkyhp9+/G30HtXNu94olxZIu nijUR+WYKbW4Rb+y8G/xPFAyCBJ4vCrq+FI7xsK+ZFpHv92Ob4Pzn/+s5bMqlXg4 XOL1PR3iT9TD7ftg5ioqBIclT/0GO3WJZFHxZLrzPRraueX0DvpD6HhnZ/HQgWc/ H6f73OZvflqRotwtT0rJvM7L/1AYvg8= -----END CERTIFICATE-----Generated at Mon Apr 7 05:58:20 2025 by rpki-client