$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72e6c31d-8e79-36d1-8056-a8f4ad72ac6d.roa File: 72e6c31d-8e79-36d1-8056-a8f4ad72ac6d.roa (raw, json) Hash identifier: 7bgeFmLPZ6Rk5yACKW2hpK4dEWsLtwUNaqPuJm4OM3o= Subject key identifier: 9C:83:7B:CE:E7:F2:83:59:AC:8C:09:55:09:D8:09:CC:2A:7A:52:82 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF20AEF4BEE95B66891440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72e6c31d-8e79-36d1-8056-a8f4ad72ac6d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 76.124.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:20:ae:f4:be:e9:5b:66:89:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=eae0dc62-6bf1-4148-9d65-c14b31a9fc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:aa:3b:48:a8:0a:c0:6e:69:22:bb:db:0d:f4: 39:ee:69:94:1f:53:5e:45:2e:fd:61:4a:f3:8c:cc: 53:6b:86:91:29:47:00:d7:00:09:c3:4d:39:2e:e7: 8f:d9:e5:ee:84:3e:0a:a0:0d:e2:57:50:86:3f:d4: 68:f6:31:f9:e4:19:e7:88:0c:c2:4f:36:c5:cc:58: 35:5f:dd:e7:a5:7f:33:c5:27:8d:46:f7:46:b2:99: 99:fc:47:2a:b1:96:cb:27:26:fd:49:5c:a8:85:f7: db:ea:59:ec:2a:d2:93:93:32:61:d9:c7:71:78:f8: 9a:c0:64:0f:47:d4:02:03:96:c3:6f:49:01:4b:b5: e5:f1:1a:9c:8b:87:1c:79:f9:74:ce:75:57:3a:fa: 7d:cf:58:cf:2b:4c:77:1d:44:52:45:e7:c4:0b:d4: 60:fc:53:c8:d3:6c:54:95:ce:48:f6:5d:d1:75:33: 12:70:39:1d:0c:52:18:a6:60:b2:c1:f1:bc:fb:25: 71:d7:87:de:ee:4d:b2:85:72:e1:6e:c0:c8:b1:f3: 93:39:6e:3e:15:ec:25:be:d1:f0:01:8c:6a:dd:83: c2:57:32:05:c6:c3:93:49:d2:11:26:f6:68:99:f3: e3:67:9e:ac:f9:90:b0:60:06:b4:eb:6d:84:7e:a8: 09:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:83:7B:CE:E7:F2:83:59:AC:8C:09:55:09:D8:09:CC:2A:7A:52:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72e6c31d-8e79-36d1-8056-a8f4ad72ac6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.124.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f8:55:28:aa:c1:87:93:3c:58:52:84:1d:b4:8b:7a:eb:02: 01:c3:c0:82:fa:84:82:30:ad:9c:4b:b3:bc:d7:70:81:21:b4: 27:4f:6d:df:10:54:f3:88:6b:b3:45:db:8f:e8:fe:af:4a:40: 10:b6:85:ad:a9:ba:a9:77:6c:bb:58:62:38:24:2c:f5:78:89: a0:92:04:e2:92:d7:e8:a2:e8:a1:90:ce:b1:9e:c5:f3:06:6d: de:c0:d7:e3:ca:c2:65:97:f1:08:80:2c:0a:65:17:fa:ae:4c: 71:10:6d:1f:b6:56:27:73:aa:b3:5d:2d:5e:ac:b2:b2:75:cf: 8e:96:0e:53:3b:d0:65:b3:d4:ff:04:07:3a:cf:7f:bd:6f:23: 1a:96:82:19:7b:2e:81:36:4c:fb:cb:19:a2:88:9b:2c:04:ce: 55:05:77:17:6e:22:be:5f:29:c9:f6:a0:9c:17:1b:18:c3:13: 81:06:5c:da:e8:fa:f4:8c:b3:9c:0a:d8:e5:06:94:6c:c7:51: 80:2f:54:d8:43:72:6a:d4:ae:b9:f8:59:7b:23:8b:d5:5b:18: d7:2c:eb:c2:2c:a7:de:71:51:79:87:8c:80:48:58:4d:44:0a: 29:47:dd:00:fe:65:b7:a2:55:67:fb:36:33:40:19:3f:3e:08: 05:b6:f0:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksryCu9L7pW2aJFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZWFlMGRjNjItNmJmMS00MTQ4LTlkNjUtYzE0YjMxYTlmYzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ao7SKgKwG5pIrvbDfQ57mmUH1NeRS79YUrz jMxTa4aRKUcA1wAJw005LueP2eXuhD4KoA3iV1CGP9Ro9jH55BnniAzCTzbFzFg1 X93npX8zxSeNRvdGspmZ/EcqsZbLJyb9SVyohffb6lnsKtKTkzJh2cdxePiawGQP R9QCA5bDb0kBS7Xl8Rqci4ccefl0znVXOvp9z1jPK0x3HURSRefEC9Rg/FPI02xU lc5I9l3RdTMScDkdDFIYpmCywfG8+yVx14fe7k2yhXLhbsDIsfOTOW4+FewlvtHw AYxq3YPCVzIFxsOTSdIRJvZomfPjZ56s+ZCwYAa0622EfqgJgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyDe87n8oNZrIwJVQnYCcwqelKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzJlNmMzMWQtOGU3OS0z NmQxLTgwNTYtYThmNGFkNzJhYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTHyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF74VSiqwYeTPFhShB20i3rrAgHDwIL6hIIwrZxLs7zXcIEhtCdPbd8Q VPOIa7NF24/o/q9KQBC2ha2puql3bLtYYjgkLPV4iaCSBOKS1+ii6KGQzrGexfMG bd7A1+PKwmWX8QiALAplF/quTHEQbR+2VidzqrNdLV6ssrJ1z46WDlM70GWz1P8E BzrPf71vIxqWghl7LoE2TPvLGaKImywEzlUFdxduIr5fKcn2oJwXGxjDE4EGXNro +vSMs5wK2OUGlGzHUYAvVNhDcmrUrrn4WXsji9VbGNcs68Isp95xUXmHjIBIWE1E CilH3QD+ZbeiVWf7NjNAGT8+CAW28P8= -----END CERTIFICATE-----Generated at Sun Apr 6 18:17:53 2025 by rpki-client