$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5100ee57-fbd1-36e8-a3e6-2f4be4aa2ce3.roa File: 5100ee57-fbd1-36e8-a3e6-2f4be4aa2ce3.roa (raw, json) Hash identifier: s0DUgD53MYQOpPBvyQIccxayeJ81of6vN1DUxgit+TA= Subject key identifier: F0:B7:98:D0:F3:3C:4E:B6:8E:7E:53:B3:15:ED:82:52:AE:87:5C:A5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6DFDE6812B921EBB02A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5100ee57-fbd1-36e8-a3e6-2f4be4aa2ce3.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 76.138.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:df:de:68:12:b9:21:eb:b0:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d5ed3909-77c4-4a50-b76a-ba6c6d1127ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:cd:b3:bb:92:9f:d5:48:01:d1:8c:7d:11: da:91:83:66:c3:bf:a7:07:45:1f:57:83:34:46:50: a9:2b:29:d0:95:42:d3:da:c2:5d:b8:30:c1:f9:28: 27:aa:21:54:69:06:18:72:9e:48:59:0c:44:09:8a: 28:75:18:49:c7:31:0a:c0:27:6d:e8:52:a5:f5:5e: 27:df:cc:0a:b8:3d:a4:a2:8c:f9:a2:4f:44:1c:1f: df:f5:62:28:cd:19:33:2b:02:eb:4e:30:cb:44:7c: 1b:6d:80:77:2a:8a:31:6b:ff:78:d2:e2:86:4e:a3: 76:da:a4:fd:81:80:e8:50:c8:af:47:a3:b2:3e:7a: a8:67:a7:26:e4:57:86:84:7d:d4:42:79:e7:ec:1e: 73:f2:ad:0b:34:20:3b:d5:ba:b4:be:fc:7a:9f:03: ef:e2:4e:9e:21:fc:52:f9:42:74:19:f8:0e:2f:8d: b7:ef:13:71:ef:fa:71:53:23:47:1c:df:32:4f:22: aa:72:18:0c:73:0a:5f:6e:42:6f:f8:fa:f0:53:fd: 31:7f:2f:40:f2:d9:f5:51:2c:17:4a:d5:32:04:4f: fe:65:27:d3:c7:21:71:07:41:96:64:68:4c:df:6e: 3d:ef:0e:09:43:c7:48:68:90:83:fa:82:d3:e2:c3: 2b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B7:98:D0:F3:3C:4E:B6:8E:7E:53:B3:15:ED:82:52:AE:87:5C:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5100ee57-fbd1-36e8-a3e6-2f4be4aa2ce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.138.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ce:83:90:10:8e:5c:4b:43:5e:7c:14:7e:c6:c7:6d:96:0b: c6:18:64:ff:88:20:d1:39:c4:13:72:2e:a0:10:6f:e9:5b:ba: c3:67:fc:7a:de:3a:da:3d:8a:55:6d:ed:c5:b9:a2:55:2e:b9: c8:b3:6d:3f:37:5d:c8:1c:8e:e5:90:78:63:16:9b:62:8b:77: d3:d6:13:77:83:96:41:ab:d0:1a:59:79:9e:31:eb:c8:b1:b1: 4b:cd:b7:a4:d1:19:3d:92:6d:bf:6a:df:81:14:aa:23:c5:92: f6:97:08:df:80:4e:aa:27:01:ab:32:70:8e:15:e4:ce:ff:63: 12:57:ba:7a:97:f7:4b:40:16:75:4f:47:59:ac:e2:3b:bb:a0: 1e:8a:64:dc:20:8a:5b:75:d4:0c:5c:80:ea:f5:8b:ed:4f:8d: 18:14:f9:75:97:e7:cb:c4:00:14:f8:9a:98:57:ac:a2:aa:69: 48:8f:15:9f:2a:9a:15:25:38:79:e2:57:70:ae:44:b1:a1:25: 37:96:03:0d:16:ce:de:0d:9e:5f:72:87:63:9c:09:6d:7a:69: ab:a2:0d:0d:3b:4d:9e:0d:d1:94:8b:7c:9f:07:98:c4:34:0e: c2:78:4e:13:53:54:16:44:44:fb:b6:19:e8:bc:63:89:1c:4b: ca:2a:4e:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09t/eaBK5IeuwKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDVlZDM5MDktNzdjNC00YTUwLWI3NmEtYmE2YzZkMTEyN2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy3Ns7uSn9VIAdGMfRHakYNmw7+nB0UfV4M0 RlCpKynQlULT2sJduDDB+SgnqiFUaQYYcp5IWQxECYoodRhJxzEKwCdt6FKl9V4n 38wKuD2kooz5ok9EHB/f9WIozRkzKwLrTjDLRHwbbYB3Kooxa/940uKGTqN22qT9 gYDoUMivR6OyPnqoZ6cm5FeGhH3UQnnn7B5z8q0LNCA71bq0vvx6nwPv4k6eIfxS +UJ0GfgOL4237xNx7/pxUyNHHN8yTyKqchgMcwpfbkJv+PrwU/0xfy9A8tn1USwX StUyBE/+ZSfTxyFxB0GWZGhM32497w4JQ8dIaJCD+oLT4sMrwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPC3mNDzPE62jn5TsxXtglKuh1ylMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTEwMGVlNTctZmJkMS0z NmU4LWEzZTYtMmY0YmU0YWEyY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTIrYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXOg5AQjlxLQ158FH7Gx22WC8YYZP+IINE5xBNyLqAQb+lbusNn/Hre Oto9ilVt7cW5olUuucizbT83XcgcjuWQeGMWm2KLd9PWE3eDlkGr0BpZeZ4x68ix sUvNt6TRGT2Sbb9q34EUqiPFkvaXCN+ATqonAasycI4V5M7/YxJXunqX90tAFnVP R1ms4ju7oB6KZNwgilt11AxcgOr1i+1PjRgU+XWX58vEABT4mphXrKKqaUiPFZ8q mhUlOHniV3CuRLGhJTeWAw0Wzt4Nnl9yh2OcCW16aauiDQ07TZ4N0ZSLfJ8HmMQ0 DsJ4ThNTVBZERPu2Gei8Y4kcS8oqTi4= -----END CERTIFICATE-----Generated at Mon Apr 7 05:51:15 2025 by rpki-client