$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ab779a0-a7a2-3a2d-8272-e9693e0fc944.roa File: 6ab779a0-a7a2-3a2d-8272-e9693e0fc944.roa (raw, json) Hash identifier: KjHvCdBGd6ufxm9iI5OMw0ptut8CYkp0kGAVxxQtWaw= Subject key identifier: 4E:51:59:8F:F6:77:09:C1:56:9E:A9:95:B0:47:D8:B9:3F:51:2A:B4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B9B3EB3B96FBAF46C8040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ab779a0-a7a2-3a2d-8272-e9693e0fc944.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 76.129.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:9b:3e:b3:b9:6f:ba:f4:6c:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=33fb25f0-474b-4f18-936c-b071d093cb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:32:35:80:1b:7b:14:b2:76:f2:62:69:a1:f8: 7d:17:6c:0d:77:59:b3:c3:b6:07:90:f3:a5:84:55: 1b:53:d9:8f:57:6e:9a:01:42:8a:00:92:19:b9:cd: 5d:de:0f:e4:2e:a3:d3:de:b2:a2:30:31:56:b3:92: 9a:0f:86:40:d7:09:da:fe:1f:aa:19:89:af:17:27: 0f:1b:4a:e8:3b:c7:b8:77:a6:a3:9d:6d:f4:95:00: 4e:13:bc:68:99:eb:5a:15:f3:b5:7e:cf:24:80:9a: d5:75:d7:0a:e4:1e:44:3f:53:9f:06:7e:d6:dc:83: b1:7f:74:f2:e8:2f:fe:d2:00:0d:25:45:53:01:2f: 8c:37:05:f6:59:d0:90:88:23:cf:93:9d:d9:8c:c4: a0:04:fa:4a:d0:05:15:de:ea:16:12:dc:bb:6e:21: 94:23:ad:b3:bf:ed:50:a4:bd:2b:b7:97:cd:88:a8: b2:6d:ae:12:d7:7d:a3:ad:fc:c0:ed:8d:cb:8d:b0: 27:0e:46:4e:98:24:d2:8d:32:fe:ee:ce:54:f3:20: 96:4c:2f:0e:64:83:b7:38:ce:69:22:e9:e4:cc:17: db:8a:95:dc:46:09:3c:56:b4:64:09:9e:3d:6a:cc: 5a:11:31:41:bc:b7:d8:ca:f7:6e:f7:9f:29:7b:d6: 63:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:51:59:8F:F6:77:09:C1:56:9E:A9:95:B0:47:D8:B9:3F:51:2A:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ab779a0-a7a2-3a2d-8272-e9693e0fc944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.129.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:70:4d:7c:75:68:85:04:35:3a:e8:3e:80:ba:68:c0:73:93: 4f:a9:ee:5b:a7:aa:fa:a4:86:93:9b:9a:d6:d2:ef:07:d4:b8: e9:be:55:6b:f6:4f:65:33:0e:ec:f7:8c:7f:09:11:63:3a:b1: f7:62:9a:ce:9b:d0:64:f6:91:bd:31:1b:a1:9c:9d:91:42:10: 48:e0:2d:88:d3:39:1b:c2:d2:b0:ba:f7:d8:e4:d7:b0:10:03: 3f:db:56:eb:43:9d:bf:9d:ce:ce:ee:0e:c3:ca:fb:f2:48:b5: 67:21:25:c2:01:8e:30:26:7c:03:6c:df:fb:1f:bb:67:20:8e: 05:7d:0d:fb:0d:2d:24:a0:4a:b3:6d:5a:95:4c:d3:6e:e0:f6: 23:d8:fb:b4:cb:36:2f:05:37:1c:a1:d3:05:27:21:46:17:7a: c2:46:a6:1e:b9:29:37:d7:67:51:d3:69:f3:f4:e1:a2:96:11: 5a:b6:42:c9:29:2c:9d:bc:2c:68:68:13:13:3d:9d:86:a9:ae: 6b:b6:00:6f:82:53:77:4b:8c:13:25:f5:dd:b7:51:24:ed:09: 85:0c:20:dd:b0:0e:dc:8c:f8:44:e2:67:de:5e:f9:18:a7:05: f6:b2:88:bd:23:6e:ca:be:80:13:c2:21:70:25:2d:e7:4d:65: f7:e9:dd:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea5s+s7lvuvRsgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MzNmYjI1ZjAtNDc0Yi00ZjE4LTkzNmMtYjA3MWQwOTNjYjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DI1gBt7FLJ28mJpofh9F2wNd1mzw7YHkPOl hFUbU9mPV26aAUKKAJIZuc1d3g/kLqPT3rKiMDFWs5KaD4ZA1wna/h+qGYmvFycP G0roO8e4d6ajnW30lQBOE7xometaFfO1fs8kgJrVddcK5B5EP1OfBn7W3IOxf3Ty 6C/+0gANJUVTAS+MNwX2WdCQiCPPk53ZjMSgBPpK0AUV3uoWEty7biGUI62zv+1Q pL0rt5fNiKiyba4S132jrfzA7Y3LjbAnDkZOmCTSjTL+7s5U8yCWTC8OZIO3OM5p IunkzBfbipXcRgk8VrRkCZ49asxaETFBvLfYyvdu958pe9Zj0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5RWY/2dwnBVp6plbBH2Lk/USq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmFiNzc5YTAtYTdhMi0z YTJkLTgyNzItZTk2OTNlMGZjOTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTIHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNwTXx1aIUENTroPoC6aMBzk0+p7lunqvqkhpObmtbS7wfUuOm+VWv2 T2UzDuz3jH8JEWM6sfdims6b0GT2kb0xG6GcnZFCEEjgLYjTORvC0rC699jk17AQ Az/bVutDnb+dzs7uDsPK+/JItWchJcIBjjAmfANs3/sfu2cgjgV9DfsNLSSgSrNt WpVM027g9iPY+7TLNi8FNxyh0wUnIUYXesJGph65KTfXZ1HTafP04aKWEVq2Qskp LJ28LGhoExM9nYaprmu2AG+CU3dLjBMl9d23USTtCYUMIN2wDtyM+ETiZ95e+Rin BfayiL0jbsq+gBPCIXAlLedNZffp3QM= -----END CERTIFICATE-----Generated at Mon Apr 7 06:29:40 2025 by rpki-client