$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6806357c-b334-34cc-9e62-d12712a0bc1b.roa File: 6806357c-b334-34cc-9e62-d12712a0bc1b.roa (raw, json) Hash identifier: C58cqhVEbspH3BCLCLkkKTQl5puU3EZOTRTeE6UhG3g= Subject key identifier: 93:DD:EB:21:AB:C1:96:E0:9A:7C:9A:67:7D:4A:C8:60:B2:53:6E:E1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F22C19533F503D1D1117E6D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6806357c-b334-34cc-9e62-d12712a0bc1b.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 22258 IP address blocks: 76.138.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:19:53:3f:50:3d:1d:11:17:e6:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=e2f2bcb2-a30d-43cb-bee5-0714125db756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:0e:b6:39:9d:8e:12:c9:5d:f4:68:a8:62: 68:36:df:8f:45:ad:0d:7b:07:3d:bd:30:ff:2f:2b: 8e:30:29:2b:8f:a6:33:6f:88:da:58:c6:1b:34:4f: e1:76:61:18:74:79:68:98:46:51:8e:86:36:10:a1: 49:e9:1e:c7:d5:9a:00:31:71:61:04:09:98:de:33: cf:d8:13:eb:88:d5:3a:c7:08:9e:ef:75:92:78:cb: e9:69:fe:ea:86:23:9d:b4:41:71:9e:35:1d:d6:00: 5f:26:a7:08:4c:8d:d9:74:41:5d:d3:cc:30:25:61: c3:24:7c:53:34:52:24:53:35:f8:ac:ed:94:05:26: bf:8b:a1:43:5c:ab:55:2b:be:9f:a3:42:94:1c:74: d1:12:f2:cf:23:76:47:3b:d8:2d:f4:83:82:ef:95: a9:0e:0c:c5:72:c5:ba:5e:98:d3:07:5c:30:7f:64: 86:39:35:7b:24:2f:18:4d:0b:0f:e2:37:f3:91:b0: 02:d9:60:60:a3:80:a2:03:93:da:30:64:8c:60:3b: c6:3c:e6:64:46:4f:cb:3a:d2:21:f2:e5:b3:e0:eb: 7f:97:5c:2c:5e:70:bd:fc:9d:d7:80:83:1e:c8:80: 86:34:34:d7:5d:39:cd:91:dd:23:7d:14:2d:00:2b: fe:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DD:EB:21:AB:C1:96:E0:9A:7C:9A:67:7D:4A:C8:60:B2:53:6E:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6806357c-b334-34cc-9e62-d12712a0bc1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.138.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:8f:2b:6d:71:a9:ab:5a:49:31:94:94:66:b8:54:4e:84:99: c8:27:a7:cf:d7:c6:24:8a:50:77:1f:33:6d:d3:19:f3:a8:e1: 8b:01:22:c5:95:cb:a3:1a:e0:ec:cc:88:32:f5:5a:38:47:ae: f6:54:20:5a:26:50:c0:4c:56:cf:ca:36:53:04:e3:af:4f:73: 99:75:61:81:74:e2:73:ca:a8:c8:70:80:d9:28:dd:5b:18:9b: 38:88:23:72:55:68:89:f5:25:d5:e1:17:e6:42:01:b0:3b:06: 26:a9:6d:7f:b5:0f:dc:27:05:27:f9:c5:f3:49:c5:33:50:be: 3e:27:1a:2d:22:28:50:5a:ed:3a:0d:2e:39:5d:1b:3e:c7:8f: 74:4a:d1:60:a1:f5:47:69:7d:09:3e:a4:b1:f8:35:2b:95:db: 53:a5:c0:75:25:6c:ba:e0:d5:3f:e6:94:0b:28:06:c8:56:a8: 68:f4:4a:e7:ad:8a:a5:74:cd:96:65:80:3f:2d:e8:7a:95:e8: da:55:ca:b3:90:a8:b4:ae:af:c6:5e:e0:66:9a:78:98:5b:c7: 4a:f8:e1:99:34:7f:a8:bf:4a:9c:7e:7f:ad:10:d4:64:8d:4a: b9:f8:99:de:f7:36:05:04:6c:0a:bb:3b:52:7d:af:8c:65:02: 72:8e:e6:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLBlTP1A9HREX5tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTJmMmJjYjItYTMwZC00M2NiLWJlZTUtMDcxNDEyNWRiNzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9EOtjmdjhLJXfRoqGJoNt+PRa0Newc9vTD/ LyuOMCkrj6Yzb4jaWMYbNE/hdmEYdHlomEZRjoY2EKFJ6R7H1ZoAMXFhBAmY3jPP 2BPriNU6xwie73WSeMvpaf7qhiOdtEFxnjUd1gBfJqcITI3ZdEFd08wwJWHDJHxT NFIkUzX4rO2UBSa/i6FDXKtVK76fo0KUHHTREvLPI3ZHO9gt9IOC75WpDgzFcsW6 XpjTB1wwf2SGOTV7JC8YTQsP4jfzkbAC2WBgo4CiA5PaMGSMYDvGPOZkRk/LOtIh 8uWz4Ot/l1wsXnC9/J3XgIMeyICGNDTXXTnNkd0jfRQtACv+XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPd6yGrwZbgmnyaZ31KyGCyU27hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjgwNjM1N2MtYjMzNC0z NGNjLTllNjItZDEyNzEyYTBiYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGPK21xqataSTGUlGa4VE6Emcgnp8/XxiSKUHcfM23TGfOo4YsBIsWV y6Ma4OzMiDL1WjhHrvZUIFomUMBMVs/KNlME469Pc5l1YYF04nPKqMhwgNko3VsY mziII3JVaIn1JdXhF+ZCAbA7BiapbX+1D9wnBSf5xfNJxTNQvj4nGi0iKFBa7ToN LjldGz7Hj3RK0WCh9UdpfQk+pLH4NSuV21OlwHUlbLrg1T/mlAsoBshWqGj0Suet iqV0zZZlgD8t6HqV6NpVyrOQqLSur8Ze4GaaeJhbx0r44Zk0f6i/Spx+f60Q1GSN Srn4md73NgUEbAq7O1J9r4xlAnKO5jc= -----END CERTIFICATE-----Generated at Mon Apr 7 09:43:21 2025 by rpki-client