$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b76532d-ab7d-37e1-b178-acce18176b43.roa File: 8b76532d-ab7d-37e1-b178-acce18176b43.roa (raw, json) Hash identifier: 0Ue3guqR/WOwBMzfVtI18j7I7/QDjLjNGokstynMFIw= Subject key identifier: 66:B7:D9:54:CB:C9:29:5D:E7:32:61:CE:1B:C9:5A:83:BF:AF:DF:00 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8642D123D8FF2CE2B7380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b76532d-ab7d-37e1-b178-acce18176b43.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 66.30.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:64:2d:12:3d:8f:f2:ce:2b:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=8a191682-85a1-406d-bbc4-939aa7a46bba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:de:62:c2:21:42:6b:29:ae:35:79:25:f8: c0:66:08:c5:2a:ed:eb:b5:48:4b:64:ad:e0:60:65: b9:aa:0b:22:27:81:11:c3:47:c2:56:93:2a:e4:ae: a5:0f:24:80:1b:2d:9f:a3:8e:4d:58:06:dc:7e:3d: 4b:cf:d9:48:b0:92:cd:0e:2a:58:9c:f0:b5:3e:a9: c0:9a:c0:6a:86:f3:db:e0:90:05:a6:30:b8:30:72: 2b:5e:78:fc:46:11:68:bd:cb:00:b2:25:07:13:3b: 74:82:ce:b2:c8:26:47:06:02:30:f1:b0:d8:03:1f: 48:23:7c:89:b2:f4:77:3b:31:23:7c:c9:85:d0:61: b7:79:5b:ec:56:20:0b:66:20:02:f6:22:7a:b9:f3: e4:b6:4f:a2:32:e5:d5:49:23:5c:d2:a3:7f:1d:73: da:1d:61:ea:91:ec:94:48:ba:fc:bc:77:b7:aa:ec: 50:ee:0e:7b:37:c4:a8:32:ac:8d:9b:a5:7b:de:ab: ad:c5:0f:d5:d8:4b:60:0a:d1:00:dd:00:68:7d:dd: 67:49:c5:3e:37:32:df:48:17:16:5f:6f:08:0f:84: da:66:db:6b:42:4c:3d:f8:1b:51:f1:88:59:b4:b9: ba:5e:5d:0d:2b:9b:e4:b0:64:86:73:62:2d:20:26: d9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B7:D9:54:CB:C9:29:5D:E7:32:61:CE:1B:C9:5A:83:BF:AF:DF:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b76532d-ab7d-37e1-b178-acce18176b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 66.30.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:74:aa:1d:96:f8:7f:88:77:d6:c1:00:d4:5f:54:4b:38:d7: 8b:f6:e1:e0:d1:cf:d3:f8:89:2c:be:d5:cf:b0:61:54:ec:15: 09:90:ac:7c:25:25:70:11:06:08:fa:31:06:3e:29:44:82:98: c9:80:7e:e6:a0:97:97:93:a2:ef:29:78:69:15:dc:60:f7:b7: 44:67:06:f1:07:f7:d3:4a:46:e7:3f:20:65:3d:e5:52:d3:04: 8b:45:e2:e8:96:f3:03:70:46:57:a8:c6:14:30:d9:3b:5b:ff: 51:58:e1:e3:12:73:6e:82:d0:40:16:7e:00:a4:86:a4:32:40: 66:8f:52:b1:6b:82:71:ac:57:89:74:ea:b9:d6:97:74:c2:98: a9:7d:63:9f:08:92:de:c9:bc:5d:02:d1:0d:78:4e:21:0e:bb: 2f:34:21:35:f8:75:1f:0e:9a:4b:fa:e2:d4:be:26:f0:81:bb: 44:52:44:aa:a0:ef:79:99:d9:5b:5f:81:a3:ee:0f:48:32:42: 2e:52:81:38:bb:da:97:c9:9e:97:9d:6f:f8:9a:2c:40:26:3a: e3:0d:01:b8:d5:9d:13:86:39:31:8d:07:93:97:bd:0d:33:c5: e7:dd:90:34:41:7a:4f:20:ac:e4:35:0f:e5:b9:8c:23:c9:93: 90:d8:0f:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+GQtEj2P8s4rc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OGExOTE2ODItODVhMS00MDZkLWJiYzQtOTM5YWE3YTQ2YmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkveYsIhQmsprjV5JfjAZgjFKu3rtUhLZK3g YGW5qgsiJ4ERw0fCVpMq5K6lDySAGy2fo45NWAbcfj1Lz9lIsJLNDipYnPC1PqnA msBqhvPb4JAFpjC4MHIrXnj8RhFovcsAsiUHEzt0gs6yyCZHBgIw8bDYAx9II3yJ svR3OzEjfMmF0GG3eVvsViALZiAC9iJ6ufPktk+iMuXVSSNc0qN/HXPaHWHqkeyU SLr8vHe3quxQ7g57N8SoMqyNm6V73qutxQ/V2EtgCtEA3QBofd1nScU+NzLfSBcW X28ID4TaZttrQkw9+BtR8YhZtLm6Xl0NK5vksGSGc2ItICbZRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGa32VTLySld5zJhzhvJWoO/r98AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGI3NjUzMmQtYWI3ZC0z N2UxLWIxNzgtYWNjZTE4MTc2YjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQh6wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKV0qh2W+H+Id9bBANRfVEs414v24eDRz9P4iSy+1c+wYVTsFQmQrHwl JXARBgj6MQY+KUSCmMmAfuagl5eTou8peGkV3GD3t0RnBvEH99NKRuc/IGU95VLT BItF4uiW8wNwRleoxhQw2Ttb/1FY4eMSc26C0EAWfgCkhqQyQGaPUrFrgnGsV4l0 6rnWl3TCmKl9Y58Ikt7JvF0C0Q14TiEOuy80ITX4dR8Omkv64tS+JvCBu0RSRKqg 73mZ2VtfgaPuD0gyQi5SgTi72pfJnpedb/iaLEAmOuMNAbjVnROGOTGNB5OXvQ0z xefdkDRBek8grOQ1D+W5jCPJk5DYD6A= -----END CERTIFICATE-----Generated at Sun Apr 6 13:48:54 2025 by rpki-client