$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76d218ee-5db1-30b6-a920-b14b290b63b8.roa File: 76d218ee-5db1-30b6-a920-b14b290b63b8.roa (raw, json) Hash identifier: aTg4elg2sI7Zf4QFakbXag8vUFdfqjwK8+/KTi6aTH4= Subject key identifier: B6:A3:B6:C2:00:FD:0B:55:8D:0F:68:BA:51:A1:48:DD:A6:65:E3:BD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7C6DD7897CC6DF5D19160 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76d218ee-5db1-30b6-a920-b14b290b63b8.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 76.122.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:c6:dd:78:97:cc:6d:f5:d1:91:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=447d8e8c-e033-4b6f-9da2-ce6318abf7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:0b:7f:7a:0f:58:8f:9d:5d:84:85:48:89: a6:f6:c0:6c:65:70:4b:9c:0e:93:25:a1:76:d7:ae: 86:9a:fb:84:77:f7:c4:bb:f8:48:30:6d:f8:ac:82: eb:d0:56:f4:e2:34:0b:00:18:ee:51:83:51:3b:94: 45:ee:9c:0c:f8:e2:77:72:a2:4e:df:bc:b9:9a:72: 94:3b:da:bc:62:50:0e:ae:c6:01:2a:f9:76:2c:5a: 80:9a:db:d5:b5:27:d4:a1:67:d4:10:14:ae:b2:d0: 1a:b5:7f:a3:64:85:d8:08:f4:c1:67:b1:ce:21:28: 30:ce:4e:59:3f:16:71:cc:aa:0f:79:fa:8a:b3:4c: 2a:b9:7b:05:a9:1b:49:7e:dd:de:8c:d8:22:29:06: d5:69:b4:a5:ff:71:ac:a3:00:1b:d8:be:c3:54:de: 55:11:78:d7:63:d2:4a:e7:d5:a1:1f:45:3e:c2:b2: e4:2d:6a:0c:fb:d0:71:41:d2:90:b7:f9:6e:5d:13: fe:18:05:ff:e1:4b:2d:4d:06:c5:5d:81:5c:96:b2: f2:f9:66:df:b2:32:ac:a4:33:f1:65:ed:6d:db:d6: b4:c1:de:46:51:99:36:e0:4b:a7:cc:7e:5e:8d:36: 37:8d:76:e0:51:91:6d:8d:28:d9:d0:18:bb:73:0b: cb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A3:B6:C2:00:FD:0B:55:8D:0F:68:BA:51:A1:48:DD:A6:65:E3:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76d218ee-5db1-30b6-a920-b14b290b63b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.122.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:4d:1e:6e:39:aa:46:c9:0c:c4:d6:72:aa:87:22:61:47:5c: 18:cd:62:83:e5:24:a7:8f:cc:fe:bd:d3:85:14:9e:74:32:a0: 77:d1:fb:12:53:52:53:a5:d8:45:72:e1:2d:d7:a9:3c:d7:f2: 69:cc:d2:07:aa:2b:86:23:55:a5:71:9c:7d:9f:d4:fc:20:ca: 8c:cf:49:e7:47:05:55:48:c3:a8:6d:a1:8f:72:ac:de:7c:eb: 95:34:7b:46:77:ca:e7:09:e9:b2:ff:ab:30:b0:23:61:6c:b2: 8c:5a:93:db:0b:ad:1d:59:6a:ff:4d:04:bc:ad:90:46:4c:73: ae:c7:c6:79:00:0d:a4:f4:03:dd:66:cc:23:72:ea:32:ff:64: 7a:04:ba:51:cc:86:17:f8:61:9b:a3:47:2f:b5:ae:ce:c3:e4: 5a:b2:b8:c4:1f:94:59:f3:40:03:01:75:7c:b0:ef:22:69:99: 82:58:2f:73:60:a6:24:91:1b:7c:f5:e7:9f:3e:16:87:b3:48: 54:23:49:aa:03:a4:83:60:7d:bf:11:3f:e7:e7:ba:a7:6a:0f: 49:f8:48:b5:74:11:a0:75:cf:0d:24:84:d6:8e:2c:93:53:17: 97:23:5d:43:8e:84:70:e9:a0:e0:c5:0c:b6:6a:74:b7:3b:8a: 12:5e:b2:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj098bdeJfMbfXRkWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NDQ3ZDhlOGMtZTAzMy00YjZmLTlkYTItY2U2MzE4YWJmN2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiMLf3oPWI+dXYSFSImm9sBsZXBLnA6TJaF2 166GmvuEd/fEu/hIMG34rILr0Fb04jQLABjuUYNRO5RF7pwM+OJ3cqJO37y5mnKU O9q8YlAOrsYBKvl2LFqAmtvVtSfUoWfUEBSustAatX+jZIXYCPTBZ7HOISgwzk5Z PxZxzKoPefqKs0wquXsFqRtJft3ejNgiKQbVabSl/3GsowAb2L7DVN5VEXjXY9JK 59WhH0U+wrLkLWoM+9BxQdKQt/luXRP+GAX/4UstTQbFXYFclrLy+WbfsjKspDPx Ze1t29a0wd5GUZk24EunzH5ejTY3jXbgUZFtjSjZ0Bi7cwvLlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLajtsIA/QtVjQ9oulGhSN2mZeO9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzZkMjE4ZWUtNWRiMS0z MGI2LWE5MjAtYjE0YjI5MGI2M2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTHqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdNHm45qkbJDMTWcqqHImFHXBjNYoPlJKePzP6904UUnnQyoHfR+xJT UlOl2EVy4S3XqTzX8mnM0geqK4YjVaVxnH2f1PwgyozPSedHBVVIw6htoY9yrN58 65U0e0Z3yucJ6bL/qzCwI2Fssoxak9sLrR1Zav9NBLytkEZMc67HxnkADaT0A91m zCNy6jL/ZHoEulHMhhf4YZujRy+1rs7D5FqyuMQflFnzQAMBdXyw7yJpmYJYL3Ng piSRG3z1558+FoezSFQjSaoDpINgfb8RP+fnuqdqD0n4SLV0EaB1zw0khNaOLJNT F5cjXUOOhHDpoODFDLZqdLc7ihJeshg= -----END CERTIFICATE-----Generated at Mon Apr 7 06:24:14 2025 by rpki-client