$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e772f1e-196b-3350-85ec-68555f180245.roa File: 7e772f1e-196b-3350-85ec-68555f180245.roa (raw, json) Hash identifier: maTRwPDb5vgqXJiWz1EihsS7qfi6ig66nZR6W/K8Fxw= Subject key identifier: 68:45:0B:24:65:D0:20:68:53:E5:2F:89:23:F2:8B:AB:C4:52:9D:D8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C6078F148115885AB0200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e772f1e-196b-3350-85ec-68555f180245.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 76.17.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:60:78:f1:48:11:58:85:ab:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=ff25a3ca-9807-4396-8532-d290efac5e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5d:c1:c5:23:2e:fa:98:16:b8:8a:43:f4:74: c1:83:2d:b6:d7:b5:81:54:90:17:a4:74:09:02:a0: ca:c5:39:b3:91:e0:ad:36:68:fb:d2:16:72:5a:76: 1d:f3:c0:1b:a7:7b:da:29:b5:41:20:cb:b1:5e:bb: 2a:9f:58:4b:a8:07:15:99:f6:0b:65:2e:1e:0f:fc: 4d:b9:5f:b3:ed:e7:c4:36:90:e4:1c:00:b1:68:3b: 9f:50:47:84:60:91:49:18:49:a9:d7:26:fd:2e:a1: 84:e9:82:a0:e8:6e:26:d7:98:ad:da:1e:87:90:7b: 60:0f:80:b5:24:63:44:93:e7:d9:f4:83:9d:d3:a6: 7f:bf:92:8f:b9:41:ad:cd:22:ce:3e:b7:1e:96:15: 30:75:cc:9f:12:94:cc:94:3a:4f:db:c1:b4:c5:f4: 9d:0c:a0:56:0c:79:c2:c9:0a:f8:2e:83:ec:fc:f3: ee:45:44:47:5c:bc:83:09:a2:2f:46:70:a9:43:d7: e6:02:a3:46:e7:bc:eb:3d:89:5d:07:67:4f:cd:77: 75:89:78:cb:37:17:5f:f9:df:ec:e6:4b:96:1a:53: 39:8e:82:c4:c4:a4:5a:97:5b:9b:b5:fd:7d:f7:8f: 89:57:b1:06:f6:19:5e:ee:3d:15:8c:ea:b4:88:e6: 6f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:45:0B:24:65:D0:20:68:53:E5:2F:89:23:F2:8B:AB:C4:52:9D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e772f1e-196b-3350-85ec-68555f180245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.17.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:b8:ec:78:e4:63:66:46:4a:de:ef:b1:37:75:0f:d4:b0:ed: 8d:30:e5:46:57:06:bc:34:61:b8:50:2e:5e:57:a6:d9:99:6f: da:33:d7:4c:c9:ea:1d:e3:a9:5f:4a:68:07:9a:20:ec:0c:d3: 00:22:e3:cd:77:8d:7b:c1:2f:57:fd:ec:e8:71:ab:a4:6f:d7: d3:f7:1e:0a:45:ee:ee:49:e1:1d:cc:53:b9:12:d0:47:9e:ed: bc:0f:3b:65:85:4d:8f:67:a6:b7:60:c0:f4:67:07:9c:59:43: 9d:60:33:0c:14:2c:b6:a6:ab:e9:3d:46:20:c1:51:9b:61:92: 5a:b2:25:26:a7:0e:45:15:36:20:07:cc:0e:0a:53:db:57:61: db:c4:b9:bc:74:f4:46:aa:ce:c8:08:9a:d9:b8:33:9c:01:69: 98:c3:ea:21:3f:dd:ed:5a:c8:e5:a4:6d:20:7f:23:c3:41:a0: be:48:12:50:55:9d:af:08:f7:dd:b8:80:3e:65:79:31:98:52: b0:f8:65:49:78:7d:26:b4:68:5d:ad:e5:ad:9e:dd:6a:f2:2a: 01:c2:9e:80:e6:38:84:3b:1a:e3:37:ce:0f:b8:cc:39:7e:2b: 32:37:80:d7:25:bc:77:ab:72:50:ce:8f:a7:65:70:b4:06:e5: 03:23:0d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebGB48UgRWIWrAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZmYyNWEzY2EtOTgwNy00Mzk2LTg1MzItZDI5MGVmYWM1ZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF3BxSMu+pgWuIpD9HTBgy2217WBVJAXpHQJ AqDKxTmzkeCtNmj70hZyWnYd88Abp3vaKbVBIMuxXrsqn1hLqAcVmfYLZS4eD/xN uV+z7efENpDkHACxaDufUEeEYJFJGEmp1yb9LqGE6YKg6G4m15it2h6HkHtgD4C1 JGNEk+fZ9IOd06Z/v5KPuUGtzSLOPrcelhUwdcyfEpTMlDpP28G0xfSdDKBWDHnC yQr4LoPs/PPuRURHXLyDCaIvRnCpQ9fmAqNG57zrPYldB2dPzXd1iXjLNxdf+d/s 5kuWGlM5joLExKRal1ubtf1994+JV7EG9hle7j0VjOq0iOZvgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhFCyRl0CBoU+UviSPyi6vEUp3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2U3NzJmMWUtMTk2Yi0z MzUwLTg1ZWMtNjg1NTVmMTgwMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHq47HjkY2ZGSt7vsTd1D9Sw7Y0w5UZXBrw0YbhQLl5XptmZb9oz10zJ 6h3jqV9KaAeaIOwM0wAi4813jXvBL1f97Ohxq6Rv19P3HgpF7u5J4R3MU7kS0Eee 7bwPO2WFTY9nprdgwPRnB5xZQ51gMwwULLamq+k9RiDBUZthklqyJSanDkUVNiAH zA4KU9tXYdvEubx09EaqzsgImtm4M5wBaZjD6iE/3e1ayOWkbSB/I8NBoL5IElBV na8I9924gD5leTGYUrD4ZUl4fSa0aF2t5a2e3WryKgHCnoDmOIQ7GuM3zg+4zDl+ KzI3gNclvHerclDOj6dlcLQG5QMjDeI= -----END CERTIFICATE-----Generated at Mon Apr 7 10:00:53 2025 by rpki-client