$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7cb706b0-7e9e-33d3-9c72-5a652a70ed1b.roa File: 7cb706b0-7e9e-33d3-9c72-5a652a70ed1b.roa (raw, json) Hash identifier: ylYQ4U5mps2EZm4JXn7a2Aetb+XHJ4KKteXKE3o6d0k= Subject key identifier: 1E:04:CD:D4:E7:20:90:67:DE:B7:D2:1E:DD:49:86:A0:BE:E2:34:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1458E78B3728847F45780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7cb706b0-7e9e-33d3-9c72-5a652a70ed1b.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 76.136.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:45:8e:78:b3:72:88:47:f4:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=60c7b45d-7138-46a3-b6cb-f1574e1295b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:df:de:67:dc:c5:31:25:3b:da:db:69:e6: a6:1a:ae:60:0a:78:80:77:af:d8:d7:ca:17:85:e1: a8:30:8e:40:5b:e7:ce:ab:a1:b1:fc:24:6f:9b:f0: 5e:d6:09:7b:44:47:75:80:81:5a:1a:de:95:5b:56: 24:76:50:40:e6:db:9f:60:f9:e1:03:ce:9b:ab:e3: 5c:42:eb:d8:69:28:63:64:0b:96:7e:5a:f8:21:82: 1a:bf:52:cd:81:b7:d1:36:38:1b:45:76:d1:b7:f5: 05:53:d6:0a:79:a2:02:35:c0:e4:db:2f:a7:87:3a: 1c:e4:89:e7:c0:9c:06:92:34:3f:c7:ef:13:14:7a: ab:89:73:7f:f8:df:a1:d2:80:2e:38:73:bd:29:67: 55:aa:eb:b2:f7:38:a0:a5:45:94:f1:5b:9e:46:a8: bc:fc:41:b8:b5:be:4a:1c:11:65:e1:1b:03:99:c2: 47:6f:26:83:79:9d:75:89:3e:c0:c1:4d:32:96:9a: 03:5f:63:00:41:bf:7d:b8:43:c2:2e:84:67:36:88: 6a:4d:56:d9:7b:17:3a:eb:f9:e8:be:a6:98:54:53: 0b:cc:4f:64:30:a2:a8:31:aa:be:71:08:40:6a:ef: f8:78:0a:14:de:6b:6b:f2:09:4d:f1:42:61:f6:b9: f5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:04:CD:D4:E7:20:90:67:DE:B7:D2:1E:DD:49:86:A0:BE:E2:34:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7cb706b0-7e9e-33d3-9c72-5a652a70ed1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.136.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:3d:ee:88:e8:62:52:d3:f9:a3:7d:ce:9e:48:76:2b:87:57: 0a:2e:33:24:b6:a6:1f:96:d3:91:0f:0a:43:cd:6f:d8:b5:4a: 0b:51:05:d3:00:96:85:14:ae:3e:51:9d:f0:1b:b3:37:8a:43: aa:ec:b0:97:41:6c:4c:97:a9:bc:e7:f5:51:9e:37:5c:8a:4e: ae:d8:4b:42:2c:06:d2:1c:90:4b:69:97:95:de:bb:67:24:43: 1b:96:fd:65:e8:34:79:cf:f4:df:56:84:fa:67:b8:4e:e5:f9: 3d:b7:50:63:e9:e9:b6:2d:8f:58:d4:e7:15:a5:50:37:49:5e: ff:6c:f1:8d:9c:ff:66:d9:90:dd:de:5b:03:c5:5d:86:41:63: 17:63:47:bf:86:c2:bb:5c:e5:76:46:2d:32:eb:79:92:92:b0: eb:64:57:46:f9:da:18:28:8b:0e:c9:32:4c:8a:aa:d2:50:4d: fd:49:57:66:68:21:01:db:83:e0:e3:fd:a5:77:87:0e:2a:2f: 46:34:45:ef:eb:fe:5e:23:5e:71:79:d4:95:10:7f:09:e2:c4: 4c:fa:23:f6:62:83:80:d6:7f:57:d8:9a:ac:c6:69:26:a2:88: d2:12:2a:89:64:aa:b3:11:cf:d0:14:01:24:58:5b:c4:33:dd: 25:56:30:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssUWOeLNyiEf0V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NjBjN2I0NWQtNzEzOC00NmEzLWI2Y2ItZjE1NzRlMTI5NWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDbf3mfcxTElO9rbaeamGq5gCniAd6/Y18oX heGoMI5AW+fOq6Gx/CRvm/Be1gl7REd1gIFaGt6VW1YkdlBA5tufYPnhA86bq+Nc QuvYaShjZAuWflr4IYIav1LNgbfRNjgbRXbRt/UFU9YKeaICNcDk2y+nhzoc5Inn wJwGkjQ/x+8TFHqriXN/+N+h0oAuOHO9KWdVquuy9zigpUWU8VueRqi8/EG4tb5K HBFl4RsDmcJHbyaDeZ11iT7AwU0ylpoDX2MAQb99uEPCLoRnNohqTVbZexc66/no vqaYVFMLzE9kMKKoMaq+cQhAau/4eAoU3mtr8glN8UJh9rn1+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4EzdTnIJBn3rfSHt1JhqC+4jSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2NiNzA2YjAtN2U5ZS0z M2QzLTljNzItNWE2NTJhNzBlZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIhaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ897ojoYlLT+aN9zp5IdiuHVwouMyS2ph+W05EPCkPNb9i1SgtRBdMA loUUrj5RnfAbszeKQ6rssJdBbEyXqbzn9VGeN1yKTq7YS0IsBtIckEtpl5Xeu2ck QxuW/WXoNHnP9N9WhPpnuE7l+T23UGPp6bYtj1jU5xWlUDdJXv9s8Y2c/2bZkN3e WwPFXYZBYxdjR7+Gwrtc5XZGLTLreZKSsOtkV0b52hgoiw7JMkyKqtJQTf1JV2Zo IQHbg+Dj/aV3hw4qL0Y0Re/r/l4jXnF51JUQfwnixEz6I/Zig4DWf1fYmqzGaSai iNISKolkqrMRz9AUASRYW8Qz3SVWMNQ= -----END CERTIFICATE-----Generated at Mon Apr 7 06:16:17 2025 by rpki-client