$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/568ebe28-ac81-3ff3-b458-a46f773593c4.roa File: 568ebe28-ac81-3ff3-b458-a46f773593c4.roa (raw, json) Hash identifier: BdGSESz0rAt9/vvRWoA3cHC8qwg8scTsmnHuTx52z8M= Subject key identifier: 26:0F:B7:E0:2D:EB:9E:6C:D8:F4:AF:CF:48:90:64:D7:0F:62:11:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F903DA3D293C727CCF1380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/568ebe28-ac81-3ff3-b458-a46f773593c4.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 76.139.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:03:da:3d:29:3c:72:7c:cf:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ba05e3e2-faab-4de5-b7e8-1acea9716c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:30:4d:0f:d5:17:ad:c6:3a:51:be:13:f9:9a: b9:34:d3:bb:af:78:fa:23:7a:98:e9:15:8e:7f:cf: 7b:29:08:08:ea:fc:eb:14:0d:82:d7:31:bb:62:68: 86:66:95:8c:61:20:a9:b1:dc:a5:27:2f:79:de:32: 3e:09:94:f0:40:44:67:b5:cd:26:c3:a1:8f:5f:85: ac:90:5e:cc:2e:85:23:2f:ec:6f:cf:46:94:32:44: db:88:0e:ba:46:66:67:91:23:c4:08:b8:ba:0c:05: 5b:18:f2:6b:ab:ee:0a:7d:b6:35:3d:25:c5:7a:58: 46:40:8d:83:23:c3:2e:12:f3:a4:4d:46:66:fe:2f: 05:56:ff:70:9e:17:95:3f:7e:91:a4:68:b8:fd:af: f8:8b:e5:f2:00:f1:44:b7:85:e0:0c:3f:37:8b:e5: 5f:90:0e:35:74:68:58:5f:db:42:5b:21:5a:9e:25: 60:79:8d:fc:cc:42:85:4d:98:a2:e0:65:08:34:ef: c6:fd:28:48:33:4a:8d:67:a0:29:71:54:0c:e8:a7: ef:9f:65:9e:35:ce:04:ac:09:ea:db:f3:f6:ab:ca: e5:94:fc:e8:59:a5:a3:a8:77:42:29:8f:91:07:01: db:f9:79:b9:17:82:a5:c9:0f:dc:54:ec:d3:5e:87: 90:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0F:B7:E0:2D:EB:9E:6C:D8:F4:AF:CF:48:90:64:D7:0F:62:11:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/568ebe28-ac81-3ff3-b458-a46f773593c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.139.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:5e:bd:a5:5f:9c:47:b7:d1:7b:99:5b:43:ac:c9:8b:bf:f3: bc:df:95:8d:3d:c5:3b:67:f2:f4:e4:e6:19:53:c4:36:21:d2: a3:e4:9f:00:b3:e4:eb:e1:13:f0:19:a6:af:c1:dd:77:33:80: fa:96:0a:fc:e3:48:75:e9:a8:a5:22:20:4f:fc:0c:54:8d:d3: b7:08:7f:ea:d3:83:6f:31:a2:a6:9a:50:21:6e:3e:11:62:87: d9:57:11:b4:5b:7f:d5:4a:f4:58:c4:a1:23:b0:2d:15:a2:fb: d2:1e:fb:ef:f5:a4:95:65:d9:2d:f6:42:28:8a:53:10:b6:df: a5:12:d9:99:9d:ee:22:d5:33:49:88:83:dc:df:fb:e1:a6:85: 42:10:e5:99:ff:03:8c:c8:e8:c4:64:93:44:24:19:c0:f6:b0: 07:ed:fd:1b:06:b4:40:73:98:43:6b:a2:99:a2:f2:99:fc:21: 73:09:50:8a:91:2e:a4:6b:ae:de:c3:23:31:40:2c:f5:4d:c3: c1:9f:36:e6:cc:3d:57:80:a1:99:36:90:bb:ba:19:48:32:e7: f6:f5:fd:9e:b6:b3:03:4f:7f:cd:93:04:4b:98:ee:a5:5c:a2: 56:c9:ad:20:bd:4a:c7:56:26:02:4a:7d:05:76:d5:da:e9:63: 6d:d3:98:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+QPaPSk8cnzPE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YmEwNWUzZTItZmFhYi00ZGU1LWI3ZTgtMWFjZWE5NzE2YzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjBND9UXrcY6Ub4T+Zq5NNO7r3j6I3qY6RWO f897KQgI6vzrFA2C1zG7YmiGZpWMYSCpsdylJy953jI+CZTwQERntc0mw6GPX4Ws kF7MLoUjL+xvz0aUMkTbiA66RmZnkSPECLi6DAVbGPJrq+4KfbY1PSXFelhGQI2D I8MuEvOkTUZm/i8FVv9wnheVP36RpGi4/a/4i+XyAPFEt4XgDD83i+VfkA41dGhY X9tCWyFaniVgeY38zEKFTZii4GUINO/G/ShIM0qNZ6ApcVQM6Kfvn2WeNc4ErAnq 2/P2q8rllPzoWaWjqHdCKY+RBwHb+Xm5F4KlyQ/cVOzTXoeQ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYPt+At655s2PSvz0iQZNcPYhFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTY4ZWJlMjgtYWM4MS0z ZmYzLWI0NTgtYTQ2Zjc3MzU5M2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpevaVfnEe30XuZW0OsyYu/87zflY09xTtn8vTk5hlTxDYh0qPknwCz 5OvhE/AZpq/B3XczgPqWCvzjSHXpqKUiIE/8DFSN07cIf+rTg28xoqaaUCFuPhFi h9lXEbRbf9VK9FjEoSOwLRWi+9Ie++/1pJVl2S32QiiKUxC236US2Zmd7iLVM0mI g9zf++GmhUIQ5Zn/A4zI6MRkk0QkGcD2sAft/RsGtEBzmENropmi8pn8IXMJUIqR LqRrrt7DIzFALPVNw8GfNubMPVeAoZk2kLu6GUgy5/b1/Z62swNPf82TBEuY7qVc olbJrSC9SsdWJgJKfQV21drpY23TmLg= -----END CERTIFICATE-----Generated at Mon Apr 7 06:17:47 2025 by rpki-client