$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f95d1c3-2cbc-3fda-b1b5-dab544bea0f7.roa File: 9f95d1c3-2cbc-3fda-b1b5-dab544bea0f7.roa (raw, json) Hash identifier: eFd1DP6cAP8JnMnfirtPEBzff2EOV0O1QhlnuzY2b2I= Subject key identifier: BF:A1:0D:F9:E3:89:74:B0:E1:43:02:4D:5B:ED:05:0C:C8:CA:D5:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB01C6A54F55BB61A66AE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f95d1c3-2cbc-3fda-b1b5-dab544bea0f7.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 76.132.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:1c:6a:54:f5:5b:b6:1a:66:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=47a6a7af-a812-4461-aa83-9f28bfc3a681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5d:2c:28:e5:86:10:47:3c:9f:e0:0b:67:d9: 2f:a5:fd:54:b7:82:6a:1a:d1:9d:20:f8:59:b3:fd: fa:87:77:4f:03:26:56:09:91:ed:82:8c:29:5b:ea: 85:68:6a:2e:df:46:d8:55:a9:74:c4:4b:30:50:d2: 93:82:bd:27:5d:8e:ba:bd:72:96:e5:bd:a2:2b:eb: 61:28:1b:05:0f:17:fd:4c:bf:62:71:28:44:04:a0: cc:7f:1b:24:dd:b3:98:bb:34:6d:2f:4e:37:ae:7f: a0:a6:06:5b:1c:55:ee:e7:66:05:61:bd:01:de:33: 3d:34:2c:cb:82:44:49:93:76:1b:f6:68:5d:62:d0: 2b:b1:c6:49:79:9b:b8:6a:bd:17:db:a8:23:85:4d: 71:a3:08:8f:58:08:d3:82:d0:d2:d4:aa:fc:d2:d9: f4:59:a1:1f:4e:8a:e4:6f:54:79:d8:19:be:e2:51: e5:92:13:9e:26:48:6a:dd:87:c8:92:33:9a:09:04: 78:07:21:1a:a8:3a:1d:b4:6b:23:13:00:5c:8c:9d: c6:07:d0:46:00:a3:ca:84:a8:0c:c4:74:e8:72:17: 85:4a:a1:a9:73:1a:df:23:f1:2f:2c:bc:e8:7c:90: 55:f0:3d:f8:bd:7c:c0:65:b7:32:66:f6:45:3b:99: c9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A1:0D:F9:E3:89:74:B0:E1:43:02:4D:5B:ED:05:0C:C8:CA:D5:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f95d1c3-2cbc-3fda-b1b5-dab544bea0f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.132.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d9:ee:b1:0c:60:7b:67:d6:90:4c:a3:e1:cb:48:69:2b:dd: f5:59:36:4e:38:12:82:59:cf:f6:2e:c7:1b:77:e1:01:3f:b6: 65:1a:53:95:d3:2e:05:56:3e:7a:39:05:d9:24:1f:84:4e:53: 39:37:3d:ed:12:49:19:40:a8:f6:bd:1b:c9:69:d0:c2:05:37: 04:02:16:14:41:58:e0:ae:0e:b0:98:ea:e8:ff:bf:47:b6:89: ef:bf:62:a5:c4:12:08:62:8c:e6:08:ee:84:24:5f:2c:04:c0: 67:19:ee:76:cb:be:12:db:15:56:4a:f1:d0:38:06:c7:94:f2: 69:11:f0:b5:af:38:4e:44:5d:64:fc:33:32:f5:0a:26:66:99: 4c:fb:7c:67:00:b7:13:a2:bf:09:6b:32:45:b0:7f:0d:05:c6: 0e:e0:76:6b:12:c5:74:fc:1e:c6:13:4a:66:2e:d4:7c:24:99: 27:ff:8c:b6:3d:d2:b3:7c:37:2e:53:28:07:0f:2e:b5:40:f5: c6:e3:8e:57:8a:8e:77:64:28:a0:7e:60:e9:03:fc:72:39:fd: 49:c1:78:9a:f6:e7:2e:ca:60:f9:8e:73:49:86:d7:bc:a6:9a: 0c:51:60:95:61:c9:ce:50:7e:b7:1c:1b:56:23:b3:3f:02:3b: aa:73:50:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssBxqVPVbthpmrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NDdhNmE3YWYtYTgxMi00NDYxLWFhODMtOWYyOGJmYzNhNjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl0sKOWGEEc8n+ALZ9kvpf1Ut4JqGtGdIPhZ s/36h3dPAyZWCZHtgowpW+qFaGou30bYVal0xEswUNKTgr0nXY66vXKW5b2iK+th KBsFDxf9TL9icShEBKDMfxsk3bOYuzRtL043rn+gpgZbHFXu52YFYb0B3jM9NCzL gkRJk3Yb9mhdYtArscZJeZu4ar0X26gjhU1xowiPWAjTgtDS1Kr80tn0WaEfTork b1R52Bm+4lHlkhOeJkhq3YfIkjOaCQR4ByEaqDodtGsjEwBcjJ3GB9BGAKPKhKgM xHTocheFSqGpcxrfI/EvLLzofJBV8D34vXzAZbcyZvZFO5nJOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+hDfnjiXSw4UMCTVvtBQzIytXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWY5NWQxYzMtMmNiYy0z ZmRhLWIxYjUtZGFiNTQ0YmVhMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTISkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3Z7rEMYHtn1pBMo+HLSGkr3fVZNk44EoJZz/Yuxxt34QE/tmUaU5XT LgVWPno5BdkkH4ROUzk3Pe0SSRlAqPa9G8lp0MIFNwQCFhRBWOCuDrCY6uj/v0e2 ie+/YqXEEghijOYI7oQkXywEwGcZ7nbLvhLbFVZK8dA4BseU8mkR8LWvOE5EXWT8 MzL1CiZmmUz7fGcAtxOivwlrMkWwfw0Fxg7gdmsSxXT8HsYTSmYu1HwkmSf/jLY9 0rN8Ny5TKAcPLrVA9cbjjleKjndkKKB+YOkD/HI5/UnBeJr25y7KYPmOc0mG17ym mgxRYJVhyc5QfrccG1Yjsz8CO6pzUBs= -----END CERTIFICATE-----Generated at Mon Apr 7 06:10:01 2025 by rpki-client