$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33a1a152-614f-3ac9-819e-b896958602af.roa File: 33a1a152-614f-3ac9-819e-b896958602af.roa (raw, json) Hash identifier: ysf86lWs64mWuKTG5f4ui+GXbuInCHiOjtXp6GgXriM= Subject key identifier: 08:1B:48:03:C1:5B:CF:F3:6A:BD:7F:41:30:4E:0F:2B:D3:F0:F9:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0454ED21B04EFA30CBA40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33a1a152-614f-3ac9-819e-b896958602af.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33660 IP address blocks: 76.149.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:45:4e:d2:1b:04:ef:a3:0c:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f7867df1-5ed6-437a-9ba6-7c00c2f53cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:be:25:50:a6:58:f0:d3:43:cb:59:33:5d:62: 61:b1:d2:42:57:e1:ec:bb:c4:2d:5f:df:7a:11:ec: d7:51:5d:b4:88:da:3c:68:ac:af:76:aa:cd:b0:b9: e6:85:b2:69:0a:f7:fa:9b:7a:33:84:0b:77:69:d0: 3c:91:2a:6e:fb:a7:9f:3e:4c:50:39:cd:69:b8:59: 74:db:31:0f:e8:76:54:2b:65:9d:af:c4:35:e8:a7: 2d:9a:3d:5c:f1:a6:48:7e:19:e5:16:e7:55:d1:6b: a0:82:76:d4:08:7b:0d:3b:ff:97:16:52:35:00:ad: 85:db:cf:eb:ca:f1:89:d0:05:b3:1a:66:96:bf:e5: 12:97:eb:0b:67:9d:cd:f3:54:19:60:43:35:3c:84: 1c:78:aa:dd:4d:bf:dd:aa:7b:a2:3a:af:d3:53:86: 5b:71:57:61:78:f2:01:69:07:6e:20:5f:c0:fd:4b: e9:02:8c:b4:4b:c4:ad:d7:84:6b:26:51:77:78:83: e7:06:2b:b7:c7:49:7b:9a:48:59:70:fd:49:54:8e: 31:3f:56:41:bd:84:cc:bd:c6:73:05:1c:ea:ef:33: 53:70:52:8d:4a:24:49:59:f2:0c:b8:f5:e8:41:a7: 50:4e:f8:2e:d5:3c:85:d1:c0:ca:59:ae:da:ed:e0: c4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1B:48:03:C1:5B:CF:F3:6A:BD:7F:41:30:4E:0F:2B:D3:F0:F9:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33a1a152-614f-3ac9-819e-b896958602af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.149.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:24:c0:f9:b3:4f:f7:a8:ef:cb:de:31:9a:e0:17:2e:b0:6f: da:50:64:18:3f:66:68:73:96:a3:02:09:f1:dd:68:6d:e9:30: 02:e7:c8:63:b2:d7:cf:ae:e0:ca:2b:08:b0:4c:e3:d2:e9:90: 98:ca:de:a7:af:2d:eb:40:55:a0:61:4f:4b:cc:42:cb:9c:5a: ab:02:c5:8b:44:cf:38:97:79:d0:44:82:0e:aa:75:de:c7:0e: 37:63:72:cd:8b:c8:80:0a:39:e3:25:de:bb:b4:ff:26:18:ee: 26:6c:b1:20:a1:b1:7e:ed:ba:af:15:dd:53:5a:41:10:d7:17: 18:d8:94:3c:5c:d7:ae:5f:75:9a:47:b3:72:0c:b0:40:13:2f: 36:91:4d:34:68:5f:49:0a:d7:df:cb:5a:9c:5c:fe:d0:ab:b9: 6b:77:3f:0c:d8:dd:5b:6f:61:0a:54:bb:f6:00:e1:84:65:53: ee:9b:2c:f6:fc:12:57:9b:1b:ed:0b:c0:46:66:31:0a:70:1c: 3a:ed:4c:fe:d9:25:17:ad:11:6e:1e:2c:65:a0:37:69:3d:ef: bf:e4:92:e1:b1:61:b2:8c:3f:d1:18:5d:9a:63:e4:0d:6b:99: 0f:ec:c4:da:f9:47:26:b9:34:47:cb:b4:dc:b4:74:88:71:2a: 78:45:fe:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssEVO0hsE76MMukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk Zjc4NjdkZjEtNWVkNi00MzdhLTliYTYtN2MwMGMyZjUzY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL4lUKZY8NNDy1kzXWJhsdJCV+Hsu8QtX996 EezXUV20iNo8aKyvdqrNsLnmhbJpCvf6m3ozhAt3adA8kSpu+6efPkxQOc1puFl0 2zEP6HZUK2Wdr8Q16Kctmj1c8aZIfhnlFudV0WuggnbUCHsNO/+XFlI1AK2F28/r yvGJ0AWzGmaWv+USl+sLZ53N81QZYEM1PIQceKrdTb/dqnuiOq/TU4ZbcVdhePIB aQduIF/A/UvpAoy0S8St14RrJlF3eIPnBiu3x0l7mkhZcP1JVI4xP1ZBvYTMvcZz BRzq7zNTcFKNSiRJWfIMuPXoQadQTvgu1TyF0cDKWa7a7eDErQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgbSAPBW8/zar1/QTBODyvT8PmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzNhMWExNTItNjE0Zi0z YWM5LTgxOWUtYjg5Njk1ODYwMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANskwPmzT/eo78veMZrgFy6wb9pQZBg/ZmhzlqMCCfHdaG3pMALnyGOy 18+u4MorCLBM49LpkJjK3qevLetAVaBhT0vMQsucWqsCxYtEzziXedBEgg6qdd7H Djdjcs2LyIAKOeMl3ru0/yYY7iZssSChsX7tuq8V3VNaQRDXFxjYlDxc165fdZpH s3IMsEATLzaRTTRoX0kK19/LWpxc/tCruWt3PwzY3VtvYQpUu/YA4YRlU+6bLPb8 ElebG+0LwEZmMQpwHDrtTP7ZJRetEW4eLGWgN2k977/kkuGxYbKMP9EYXZpj5A1r mQ/sxNr5Rya5NEfLtNy0dIhxKnhF/sM= -----END CERTIFICATE-----Generated at Mon Apr 7 09:48:51 2025 by rpki-client