$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4698b0a5-d288-3194-ad68-e893cd1f0d91.roa File: 4698b0a5-d288-3194-ad68-e893cd1f0d91.roa (raw, json) Hash identifier: RN7m26P/7xJP0/Gq5gH2lWHQIBFJGlEuuZR58Ul87Jg= Subject key identifier: 52:19:40:8D:B5:42:30:DB:FD:0A:09:34:97:32:25:36:31:60:3C:20 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F94CC8BA7A01A25340D240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4698b0a5-d288-3194-ad68-e893cd1f0d91.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 76.143.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:4c:c8:ba:7a:01:a2:53:40:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=af63a4d4-2829-4fa6-9c5d-aa2e585d517e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b7:90:31:ba:40:16:fc:f5:2c:bf:cf:17:57: 95:80:14:e2:cd:fe:02:28:7f:47:ea:25:37:9a:4e: cf:20:0b:b2:1d:3e:3f:a2:d7:b0:4c:e9:d0:b3:01: 72:ce:7d:f0:64:f1:25:64:e3:3a:4d:a8:45:a6:d1: a6:61:24:58:55:98:78:65:4e:e8:65:a5:a8:88:90: ff:07:2e:15:8d:d6:f2:ae:94:fc:5f:f1:7b:9f:c2: 97:a5:ef:0c:f3:a0:64:b0:d8:78:ba:cd:0f:e2:e2: 60:e8:d6:b1:81:49:5e:6f:85:47:b7:96:fc:48:66: 8d:16:10:cd:18:f3:e1:d6:ec:19:f4:27:1d:b6:40: e8:6d:13:68:2e:52:75:b0:16:b2:ae:9d:d6:ba:66: 84:cf:91:22:9f:89:93:d8:1a:d3:6e:47:2e:7a:6f: 2f:66:39:e6:cf:ef:f7:2d:f5:2e:76:7b:da:95:a4: 9d:ba:75:14:b7:a5:a6:4f:ff:82:dc:d4:ab:65:c8: 7d:c9:d9:7a:af:4c:5d:eb:e8:d5:8c:fc:42:21:78: 8d:e2:dc:a2:04:ae:6f:ce:ed:50:7f:85:98:ca:85: 4f:0e:f2:3c:23:d6:2a:b4:54:94:dd:62:56:d1:0f: 42:fc:99:a1:8a:a0:26:12:bf:4c:99:29:1b:5b:fd: 3e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:19:40:8D:B5:42:30:DB:FD:0A:09:34:97:32:25:36:31:60:3C:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4698b0a5-d288-3194-ad68-e893cd1f0d91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.143.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:f8:9b:b9:67:fa:d6:2c:c7:5b:a9:02:8c:c6:79:a0:6c:f4: 8e:88:bf:59:ec:df:20:b7:b4:2e:23:3c:a7:8f:8c:aa:0d:60: eb:f4:5b:89:ad:b4:51:97:31:6d:58:20:bb:0e:4a:9b:6d:23: db:d8:b8:6a:06:11:d2:93:98:30:4e:e1:01:bf:3a:92:c1:35: 16:ca:25:65:e6:ba:a7:9b:58:4d:6a:b2:ff:94:c1:5d:14:91: 7f:9c:2e:06:ac:10:91:fe:2b:81:af:5a:23:dc:0d:26:56:e8: 53:24:14:84:ea:65:87:3e:45:e3:5e:25:86:b2:db:51:f1:c7: b9:5e:3f:70:68:a4:c8:89:ab:61:2c:a0:e9:04:b5:e9:04:af: 51:79:59:37:84:cd:74:3b:81:2f:b4:14:9a:73:df:4b:bd:cc: 53:91:ef:9d:6a:b7:91:1f:c5:94:a3:a0:68:e3:d3:e0:36:9a: 1b:ae:3f:bb:e0:59:e3:06:f9:b8:d9:55:9c:75:4b:6f:2e:5e: 90:11:5b:a3:fe:24:93:b9:7f:1f:98:69:70:b7:52:7a:4e:5a: 16:01:9b:95:ee:91:b8:8d:e4:20:78:4c:7d:c2:70:63:42:45: 8f:85:03:14:a2:23:b3:e9:d6:f4:99:13:c2:04:73:8b:bc:66: c8:ee:18:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+UzIunoBolNA0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YWY2M2E0ZDQtMjgyOS00ZmE2LTljNWQtYWEyZTU4NWQ1MTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbeQMbpAFvz1LL/PF1eVgBTizf4CKH9H6iU3 mk7PIAuyHT4/otewTOnQswFyzn3wZPElZOM6TahFptGmYSRYVZh4ZU7oZaWoiJD/ By4VjdbyrpT8X/F7n8KXpe8M86BksNh4us0P4uJg6NaxgUleb4VHt5b8SGaNFhDN GPPh1uwZ9CcdtkDobRNoLlJ1sBayrp3WumaEz5Ein4mT2BrTbkcuem8vZjnmz+/3 LfUudnvalaSdunUUt6WmT/+C3NSrZch9ydl6r0xd6+jVjPxCIXiN4tyiBK5vzu1Q f4WYyoVPDvI8I9YqtFSU3WJW0Q9C/JmhiqAmEr9MmSkbW/0+PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIZQI21QjDb/QoJNJcyJTYxYDwgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDY5OGIwYTUtZDI4OC0z MTk0LWFkNjgtZTg5M2NkMWYwZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKT4m7ln+tYsx1upAozGeaBs9I6Iv1ns3yC3tC4jPKePjKoNYOv0W4mt tFGXMW1YILsOSpttI9vYuGoGEdKTmDBO4QG/OpLBNRbKJWXmuqebWE1qsv+UwV0U kX+cLgasEJH+K4GvWiPcDSZW6FMkFITqZYc+ReNeJYay21Hxx7leP3BopMiJq2Es oOkEtekEr1F5WTeEzXQ7gS+0FJpz30u9zFOR751qt5EfxZSjoGjj0+A2mhuuP7vg WeMG+bjZVZx1S28uXpARW6P+JJO5fx+YaXC3UnpOWhYBm5XukbiN5CB4TH3CcGNC RY+FAxSiI7Pp1vSZE8IEc4u8ZsjuGDQ= -----END CERTIFICATE-----Generated at Mon Apr 7 09:41:42 2025 by rpki-client