$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f43666-e719-3a3b-842f-19d63e1d9c71.roa File: 28f43666-e719-3a3b-842f-19d63e1d9c71.roa (raw, json) Hash identifier: FbGaXelcmA04xm4E4jDSqS+nEOVuBdbLz9P4hn6r3ck= Subject key identifier: 53:55:65:A6:33:D1:6C:F8:5E:DB:3F:DB:76:A7:0A:DF:64:A3:C0:93 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F94DBD36B7021B7319D280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f43666-e719-3a3b-842f-19d63e1d9c71.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 76.143.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:4d:bd:36:b7:02:1b:73:19:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=019bd4a2-02ca-4c7f-9206-3bf7c2d7f1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:70:db:ed:5c:7a:40:fd:64:ca:f6:00:c5:ac: 8c:9b:8c:70:b0:a4:c6:a8:89:18:18:4a:37:c7:97: ea:4a:26:82:42:39:c7:e5:5e:01:e6:56:54:6f:70: d6:d5:3b:2a:39:8b:2b:0e:14:4f:94:4a:2b:78:7c: 12:70:1b:dc:9c:e1:42:04:8e:40:9a:97:2b:79:db: 4f:c2:29:8e:ba:b3:e8:f2:b9:0e:60:a6:10:77:a9: 97:7b:69:fa:0f:d5:1a:6a:79:ed:96:38:01:d4:21: cf:24:1b:2a:e3:62:dc:d4:71:7c:45:b9:c5:9d:26: 42:e7:25:4d:7e:d5:82:14:3a:df:7d:c6:0f:41:c4: 66:72:be:b0:4d:07:7b:4f:21:a1:68:86:47:36:11: 7b:ee:e2:8f:98:a1:40:f9:7b:89:a5:37:ec:bc:3a: 94:3d:39:74:73:6a:c2:b1:f7:f2:11:3b:5c:2f:05: bd:f5:f7:02:a9:5e:a5:a1:0f:0e:68:7c:be:7c:04: b4:62:d1:c6:98:3e:81:fb:8a:0b:ae:51:eb:e8:ee: b1:3e:4e:4a:b9:fd:ef:26:07:bf:9f:8c:c2:75:34: ad:43:07:ae:54:68:eb:9b:d8:89:ff:93:37:52:cc: fd:30:e0:69:a6:c6:8e:25:9d:49:78:f8:6e:67:bd: 12:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:55:65:A6:33:D1:6C:F8:5E:DB:3F:DB:76:A7:0A:DF:64:A3:C0:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f43666-e719-3a3b-842f-19d63e1d9c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.143.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:74:24:af:6f:a0:1b:9e:99:a2:80:e6:49:61:cc:ed:46:3e: 01:b5:09:32:2b:ec:30:86:97:8f:dc:64:fe:15:34:55:fe:b2: 87:11:db:aa:c2:64:64:54:c1:b8:88:ce:b0:64:ea:5b:53:c2: f1:b8:31:aa:d4:bd:00:31:d9:a3:c0:33:91:28:a0:0b:87:33: 39:ef:9f:51:de:7f:f7:b5:30:79:67:bd:29:d3:5d:8e:59:2c: 08:0b:20:1e:58:b8:3b:11:a0:fe:50:6a:62:9a:f0:fa:83:c1: 4f:75:0f:88:ea:2c:5d:ec:5d:5c:16:9a:9c:25:2d:ed:a1:1d: 1e:d5:ac:42:83:8e:5b:9c:2d:93:71:48:0d:61:f5:9b:87:83: 29:61:5d:bc:d5:69:3f:1c:2b:d3:3a:5c:3d:5f:95:24:83:fe: 50:4c:02:9a:7c:32:e3:3a:d6:01:f6:00:80:50:1c:a2:17:2c: c2:36:88:e2:0e:dc:0f:36:15:23:45:2a:12:5e:86:42:c7:6f: e8:4f:6f:27:55:06:9a:e8:02:b6:38:97:2b:1a:53:d3:09:e0: 53:24:b6:38:7f:32:ad:ff:29:4e:8d:0f:bf:13:e9:d7:59:84: bb:ab:49:6d:ce:99:f6:8e:05:91:32:d5:d8:04:21:ca:63:ff: 90:ce:b4:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+U29NrcCG3MZ0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MDE5YmQ0YTItMDJjYS00YzdmLTkyMDYtM2JmN2MyZDdmMWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3Db7Vx6QP1kyvYAxayMm4xwsKTGqIkYGEo3 x5fqSiaCQjnH5V4B5lZUb3DW1TsqOYsrDhRPlEoreHwScBvcnOFCBI5AmpcredtP wimOurPo8rkOYKYQd6mXe2n6D9UaanntljgB1CHPJBsq42Lc1HF8RbnFnSZC5yVN ftWCFDrffcYPQcRmcr6wTQd7TyGhaIZHNhF77uKPmKFA+XuJpTfsvDqUPTl0c2rC sffyETtcLwW99fcCqV6loQ8OaHy+fAS0YtHGmD6B+4oLrlHr6O6xPk5Kuf3vJge/ n4zCdTStQweuVGjrm9iJ/5M3Usz9MOBppsaOJZ1JePhuZ70StwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNVZaYz0Wz4Xts/23anCt9ko8CTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjhmNDM2NjYtZTcxOS0z YTNiLTg0MmYtMTlkNjNlMWQ5YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR0JK9voBuemaKA5klhzO1GPgG1CTIr7DCGl4/cZP4VNFX+socR26rC ZGRUwbiIzrBk6ltTwvG4MarUvQAx2aPAM5EooAuHMznvn1Hef/e1MHlnvSnTXY5Z LAgLIB5YuDsRoP5QamKa8PqDwU91D4jqLF3sXVwWmpwlLe2hHR7VrEKDjlucLZNx SA1h9ZuHgylhXbzVaT8cK9M6XD1flSSD/lBMApp8MuM61gH2AIBQHKIXLMI2iOIO 3A82FSNFKhJehkLHb+hPbydVBproArY4lysaU9MJ4FMktjh/Mq3/KU6ND78T6ddZ hLurSW3OmfaOBZEy1dgEIcpj/5DOtEA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:05:06 2025 by rpki-client