$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93af0566-5683-3a4a-80b1-2d52893d2183.roa File: 93af0566-5683-3a4a-80b1-2d52893d2183.roa (raw, json) Hash identifier: Izck1iPVLjcmMU0ewM9J0kDRUDQGiGCTgPh3nQfOlg4= Subject key identifier: 8A:46:6C:56:06:EB:B9:7C:C3:8A:48:93:16:3D:81:EA:59:3E:30:14 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFBC43A6BF2869486FF2D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93af0566-5683-3a4a-80b1-2d52893d2183.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 76.29.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:bc:43:a6:bf:28:69:48:6f:f2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=aafa2f92-2c32-42f5-9fad-378d3fce3f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:67:f4:fa:91:e9:3d:f0:e4:6c:b9:b5:c1:29: 68:07:73:98:6f:5c:c6:5c:91:87:c8:12:b6:95:22: bf:83:a3:07:25:6a:ad:91:94:ef:5a:4d:91:7d:5b: cd:9c:c5:da:01:33:0e:9f:86:cf:78:70:cb:29:c3: ad:77:8f:54:26:76:4c:55:05:b5:19:2c:07:22:42: 56:53:00:d3:04:1b:56:b3:e9:20:fb:a8:93:dc:ee: 1a:dd:02:ce:cc:b3:2c:80:4f:2e:7e:0a:17:5c:14: 32:97:69:fb:c1:4f:2c:70:26:83:dc:1e:cc:05:53: ec:2d:30:ab:ed:7b:54:e2:e2:12:82:2d:be:27:0d: 9a:21:39:ac:6a:e6:e1:8a:4e:8e:3d:15:99:08:6f: 32:e5:0a:9e:b4:83:7c:41:50:78:7c:bc:62:0c:fa: 48:47:96:39:b1:80:44:1b:70:c0:7e:d5:31:cf:13: e7:3d:68:54:5e:23:09:6d:8d:5f:9a:64:ee:fe:c1: d7:b6:35:e7:ac:92:fe:37:96:12:43:e9:c7:1b:7d: bf:52:ab:d7:88:b3:5b:88:5c:b0:82:4f:4f:fb:b2: 63:52:47:55:2b:ad:1b:84:5c:de:25:1c:44:8d:7a: f0:00:c9:6f:d1:43:f8:eb:13:40:30:f1:20:21:cb: 4f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:46:6C:56:06:EB:B9:7C:C3:8A:48:93:16:3D:81:EA:59:3E:30:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93af0566-5683-3a4a-80b1-2d52893d2183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.29.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:8c:b8:b5:a0:fd:9e:4c:ef:a1:b3:95:4f:70:22:19:3e:92: 81:9b:94:d7:8f:37:25:94:ba:45:8c:4d:79:6e:de:db:a6:66: a2:5b:1d:46:38:c6:d8:06:7d:d1:da:fd:fa:62:cb:2d:4f:f0: 06:9c:f7:ff:7e:43:77:77:d7:02:a1:42:e8:ca:f5:8f:53:a6: 83:8e:14:23:c7:db:bd:0e:14:e7:fb:e3:79:82:82:c8:85:bd: 75:f2:12:24:80:74:8e:27:55:d4:be:04:96:c8:1d:82:8e:95: 69:3a:83:b1:22:00:49:bc:ee:61:de:82:2c:63:54:29:87:d3: ed:7a:cf:9c:92:36:57:ff:5c:37:a1:22:37:25:c3:34:56:f3: 09:68:8d:20:97:5e:7c:c0:b1:02:71:17:9c:19:fc:ad:e9:1a: c2:ff:79:f3:83:73:61:96:b8:5c:e5:b8:29:2f:96:5d:90:d5: a4:b6:46:be:b9:ca:d1:7d:78:99:df:df:ef:de:8d:14:b2:f7: 7b:d4:bb:fc:51:80:c6:3f:1b:b5:ec:22:be:f9:e1:0b:69:3b: dd:4d:d0:31:99:de:e0:6c:0b:75:a6:04:ea:a4:f5:4f:be:66: b7:9f:eb:14:cc:f0:bf:79:d5:cd:43:05:23:d2:e6:fd:03:e4: 58:07:88:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr7xDpr8oaUhv8tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YWFmYTJmOTItMmMzMi00MmY1LTlmYWQtMzc4ZDNmY2UzZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gf0+pHpPfDkbLm1wSloB3OYb1zGXJGHyBK2 lSK/g6MHJWqtkZTvWk2RfVvNnMXaATMOn4bPeHDLKcOtd49UJnZMVQW1GSwHIkJW UwDTBBtWs+kg+6iT3O4a3QLOzLMsgE8ufgoXXBQyl2n7wU8scCaD3B7MBVPsLTCr 7XtU4uISgi2+Jw2aITmsaubhik6OPRWZCG8y5QqetIN8QVB4fLxiDPpIR5Y5sYBE G3DAftUxzxPnPWhUXiMJbY1fmmTu/sHXtjXnrJL+N5YSQ+nHG32/UqvXiLNbiFyw gk9P+7JjUkdVK60bhFzeJRxEjXrwAMlv0UP46xNAMPEgIctP6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpGbFYG67l8w4pIkxY9gepZPjAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTNhZjA1NjYtNTY4My0z YTRhLTgwYjEtMmQ1Mjg5M2QyMTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTB14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMOMuLWg/Z5M76GzlU9wIhk+koGblNePNyWUukWMTXlu3tumZqJbHUY4 xtgGfdHa/fpiyy1P8Aac9/9+Q3d31wKhQujK9Y9TpoOOFCPH270OFOf743mCgsiF vXXyEiSAdI4nVdS+BJbIHYKOlWk6g7EiAEm87mHegixjVCmH0+16z5ySNlf/XDeh IjclwzRW8wlojSCXXnzAsQJxF5wZ/K3pGsL/efODc2GWuFzluCkvll2Q1aS2Rr65 ytF9eJnf3+/ejRSy93vUu/xRgMY/G7XsIr754QtpO91N0DGZ3uBsC3WmBOqk9U++ Zref6xTM8L951c1DBSPS5v0D5FgHiFg= -----END CERTIFICATE-----Generated at Mon Apr 7 09:53:57 2025 by rpki-client