$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0786a5-011f-3065-bb5a-42ab4f2180dd.roa File: 8b0786a5-011f-3065-bb5a-42ab4f2180dd.roa (raw, json) Hash identifier: 4mCCUEYOjWQEgcYXavRjfxTRN+y6S1MQTP+qAyNjlaI= Subject key identifier: 0D:87:43:AA:19:8E:56:62:2B:93:3E:4C:FF:F8:20:B9:FF:C3:FA:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1B1C4F2FDF6B5A1C21B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0786a5-011f-3065-bb5a-42ab4f2180dd.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 76.102.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:b1:c4:f2:fd:f6:b5:a1:c2:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=32756ab3-54dd-4c5d-a061-1e6f43aa59f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0e:d3:4e:cd:18:7d:d3:92:4e:25:2a:54:c6: 95:cf:c7:c3:eb:61:29:78:22:31:ef:fe:62:29:6a: 19:0c:f7:4e:c6:99:2d:f9:ca:a2:e0:a1:ef:e8:24: 3f:81:e6:5a:f0:3b:58:f4:41:d8:01:0d:80:0d:5d: 4e:00:35:ea:4f:a8:e6:36:fc:0f:81:13:cb:81:d5: 44:53:b2:83:5c:7c:a2:20:19:c6:7d:cc:30:e8:f4: c7:38:35:76:8f:30:85:59:a4:2d:db:3f:57:13:52: 78:f9:08:5e:7b:af:e2:cb:7c:33:03:cd:a9:37:6c: 2e:27:9f:d5:67:22:8c:ef:7b:52:d9:a0:07:be:b6: 04:36:dc:80:95:5f:ca:c3:64:e7:31:5e:3d:9a:35: b2:a9:f8:1e:80:90:22:0d:d2:62:ef:8d:a1:5f:77: 5a:e7:7f:44:e9:bd:29:d3:14:6e:71:8f:f2:d1:58: 2b:27:79:31:33:9b:12:42:fc:f8:7b:a1:69:66:e2: ef:91:9b:e3:90:e6:14:27:df:36:21:ef:b8:70:79: 72:6a:c9:3b:e5:34:cc:72:f8:25:4f:db:29:fd:27: d0:e0:55:bd:65:5d:12:7a:ce:76:62:39:85:35:a5: d0:50:ec:1e:44:f5:65:98:9b:ac:05:25:4a:cc:c8: 78:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:87:43:AA:19:8E:56:62:2B:93:3E:4C:FF:F8:20:B9:FF:C3:FA:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b0786a5-011f-3065-bb5a-42ab4f2180dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.102.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:1d:7a:24:d4:8d:c2:43:43:d4:e3:79:d2:bb:1c:a6:93:af: 19:79:39:28:d9:77:37:67:26:a6:bc:40:02:87:f3:8e:e0:82: bb:0a:08:87:cf:0e:74:95:7d:3a:26:40:fb:90:8f:3e:d0:66: 81:4a:ee:73:84:c2:9d:42:dc:0c:86:ac:16:6d:26:36:ba:7c: fb:cc:be:55:1d:4b:99:0c:6d:7b:ca:de:1e:38:bf:89:21:6e: 21:41:98:f2:4d:2e:83:c7:e9:f2:78:9d:f3:de:3f:80:eb:a0: 2f:33:60:dc:00:1d:72:87:57:b0:b1:f8:20:62:05:9e:43:05: 20:d8:43:87:3e:37:62:1e:01:7c:18:b3:49:4e:59:bf:f1:26: 26:8a:54:43:25:07:bd:c9:e6:ff:73:ce:2e:7b:da:0e:2f:69: 72:6c:69:0d:f8:64:0c:a3:86:73:3c:6a:8d:0d:d7:33:cf:1c: e2:e1:e2:f5:30:96:3a:42:24:e0:2c:f2:a1:df:df:d1:5b:23: cf:4a:eb:39:4d:9d:9c:18:a6:06:8e:aa:57:1d:9c:1c:a5:22: 70:86:78:f7:5b:6e:8c:8f:05:ab:aa:b8:34:3b:9b:03:a6:c4: 54:7a:76:fa:05:0a:74:dc:42:67:98:b8:e2:29:83:b6:72:49: d3:e4:82:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssbHE8v32taHCGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MzI3NTZhYjMtNTRkZC00YzVkLWEwNjEtMWU2ZjQzYWE1OWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA7TTs0YfdOSTiUqVMaVz8fD62EpeCIx7/5i KWoZDPdOxpkt+cqi4KHv6CQ/geZa8DtY9EHYAQ2ADV1OADXqT6jmNvwPgRPLgdVE U7KDXHyiIBnGfcww6PTHODV2jzCFWaQt2z9XE1J4+Qhee6/iy3wzA82pN2wuJ5/V ZyKM73tS2aAHvrYENtyAlV/Kw2TnMV49mjWyqfgegJAiDdJi742hX3da539E6b0p 0xRucY/y0VgrJ3kxM5sSQvz4e6FpZuLvkZvjkOYUJ982Ie+4cHlyask75TTMcvgl T9sp/SfQ4FW9ZV0Ses52YjmFNaXQUOweRPVlmJusBSVKzMh48QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2HQ6oZjlZiK5M+TP/4ILn/w/pJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGIwNzg2YTUtMDExZi0z MDY1LWJiNWEtNDJhYjRmMjE4MGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTGYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwdeiTUjcJDQ9TjedK7HKaTrxl5OSjZdzdnJqa8QAKH847ggrsKCIfP DnSVfTomQPuQjz7QZoFK7nOEwp1C3AyGrBZtJja6fPvMvlUdS5kMbXvK3h44v4kh biFBmPJNLoPH6fJ4nfPeP4DroC8zYNwAHXKHV7Cx+CBiBZ5DBSDYQ4c+N2IeAXwY s0lOWb/xJiaKVEMlB73J5v9zzi572g4vaXJsaQ34ZAyjhnM8ao0N1zPPHOLh4vUw ljpCJOAs8qHf39FbI89K6zlNnZwYpgaOqlcdnBylInCGePdbboyPBauquDQ7mwOm xFR6dvoFCnTcQmeYuOIpg7ZySdPkgjA= -----END CERTIFICATE-----Generated at Mon Apr 7 09:54:55 2025 by rpki-client