$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e036e87-5b8b-3894-9e3c-604729e3aa1b.roa File: 2e036e87-5b8b-3894-9e3c-604729e3aa1b.roa (raw, json) Hash identifier: 62P7bWArRXHtJM6wviiuMCjY1sMDiA2Ubg1LcTvGi0Y= Subject key identifier: 44:AC:6D:7F:69:C2:D0:4A:02:3A:28:E6:F1:CB:BA:F4:12:B5:03:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C618208A977783B02C500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e036e87-5b8b-3894-9e3c-604729e3aa1b.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 76.156.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:61:82:08:a9:77:78:3b:02:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=3a769d7b-3eb1-4e0c-912a-46987cf12317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e1:6c:19:f1:11:a9:14:b6:dd:4d:cc:cf:77: f6:70:05:5e:94:09:58:8d:9c:61:8e:2d:a9:59:c4: 74:db:37:5c:fa:f9:ca:87:8f:ab:93:a1:6d:4b:0f: 5c:9d:15:57:ef:4a:6e:96:a5:07:91:b3:a3:0c:41: 0c:4b:8f:7f:ac:37:28:f4:ce:19:41:68:35:7c:cf: ec:b5:cf:ba:9c:7c:b2:ff:fa:6e:c0:52:72:45:3c: 03:f9:65:07:54:76:7f:0b:c4:13:73:b9:b4:d1:90: db:c0:c8:d2:50:5c:f3:e6:98:d4:bb:c2:ca:14:f1: d4:76:00:cd:fb:70:ad:f3:62:d8:fe:9b:ba:66:fd: 0e:52:05:74:70:47:de:7f:44:be:d7:d5:da:7f:4b: 0d:68:02:40:0f:d7:05:69:85:b4:bd:8f:05:88:48: 99:d3:d8:6b:4c:cd:3a:8f:32:e9:44:61:c1:94:52: 27:a1:6a:07:da:1b:5c:99:19:d3:fe:46:49:f2:2e: b7:9c:f4:3a:bc:d4:ce:b8:a4:11:3d:ca:39:89:3c: eb:15:29:f3:19:13:79:82:27:4c:cc:4d:2d:af:f7: b1:a2:b9:99:e3:56:e5:c1:09:54:f2:76:bf:e7:ae: 00:dd:a1:e3:88:3d:0e:55:c6:c4:0f:53:ba:4d:fa: be:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AC:6D:7F:69:C2:D0:4A:02:3A:28:E6:F1:CB:BA:F4:12:B5:03:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e036e87-5b8b-3894-9e3c-604729e3aa1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.156.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:63:d2:b1:98:af:12:ef:d5:d0:b2:eb:70:0f:59:a0:bf:d5: 6c:6b:18:c1:f1:1d:ca:6a:00:b8:dc:a3:22:15:b7:79:26:3a: b7:5d:5d:01:c4:ef:0d:b5:0f:56:ba:7e:7f:2a:bd:26:f7:6c: 3d:b9:27:64:9e:da:ea:84:a0:08:ec:4f:e1:82:9d:e3:20:2f: 48:25:1e:3e:75:87:6f:3e:df:0e:15:0e:fe:6b:90:6e:24:f7: 59:b9:1f:89:d1:73:e1:89:23:40:9e:58:8d:3a:33:1b:12:d4: bb:3d:d0:12:52:5b:bb:ff:9a:de:1e:76:3c:fa:35:66:94:f1: f1:35:ea:ad:08:12:e1:51:3b:13:6e:f2:e8:29:23:09:75:9d: f3:32:1b:ae:41:70:ec:1c:45:be:b5:c8:29:c1:2d:56:a2:4d: d8:64:74:7f:bc:ff:3d:b4:5f:27:b6:41:0b:dc:a2:b6:a5:9e: 67:3c:bf:01:91:f9:48:ab:75:ba:c7:9e:3b:d6:de:e1:0b:90: 1c:20:92:5e:3f:ab:37:c3:ca:07:81:27:90:df:38:77:5b:5c: e1:f8:52:b8:72:2b:79:21:5d:f2:c2:3e:44:57:d3:a0:f1:33: ab:db:05:79:a6:c4:77:dc:95:3e:80:d9:1f:72:2e:16:83:64: ad:05:55:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebGGCCKl3eDsCxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk M2E3NjlkN2ItM2ViMS00ZTBjLTkxMmEtNDY5ODdjZjEyMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+FsGfERqRS23U3Mz3f2cAVelAlYjZxhji2p WcR02zdc+vnKh4+rk6FtSw9cnRVX70pulqUHkbOjDEEMS49/rDco9M4ZQWg1fM/s tc+6nHyy//puwFJyRTwD+WUHVHZ/C8QTc7m00ZDbwMjSUFzz5pjUu8LKFPHUdgDN +3Ct82LY/pu6Zv0OUgV0cEfef0S+19Xaf0sNaAJAD9cFaYW0vY8FiEiZ09hrTM06 jzLpRGHBlFInoWoH2htcmRnT/kZJ8i63nPQ6vNTOuKQRPco5iTzrFSnzGRN5gidM zE0tr/exormZ41blwQlU8na/564A3aHjiD0OVcbED1O6Tfq+WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESsbX9pwtBKAjoo5vHLuvQStQPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmUwMzZlODctNWI4Yi0z ODk0LTllM2MtNjA0NzI5ZTNhYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtj0rGYrxLv1dCy63APWaC/1WxrGMHxHcpqALjcoyIVt3kmOrddXQHE 7w21D1a6fn8qvSb3bD25J2Se2uqEoAjsT+GCneMgL0glHj51h28+3w4VDv5rkG4k 91m5H4nRc+GJI0CeWI06MxsS1Ls90BJSW7v/mt4edjz6NWaU8fE16q0IEuFROxNu 8ugpIwl1nfMyG65BcOwcRb61yCnBLVaiTdhkdH+8/z20Xye2QQvcoralnmc8vwGR +UirdbrHnjvW3uELkBwgkl4/qzfDygeBJ5DfOHdbXOH4UrhyK3khXfLCPkRX06Dx M6vbBXmmxHfclT6A2R9yLhaDZK0FVcA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:36:31 2025 by rpki-client