$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa File: a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa (raw, json) Hash identifier: ckjjHnYiWmf8nTDNktxw7A7KDMRN7ZMkpc8mESAySWo= Subject key identifier: 42:33:BE:E3:F2:34:0F:4C:ED:ED:80:92:D6:C0:A5:3D:C0:4B:03:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFBB893193B858A1F7FF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 76.16.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:bb:89:31:93:b8:58:a1:f7:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=d8c964da-5976-4082-ab4e-405c49844e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e6:3c:e3:c0:05:b7:55:45:8b:fb:b4:e3:a1: 55:ce:53:29:eb:de:51:ef:18:87:08:c2:2b:af:6d: 74:37:02:a4:a8:c7:d8:6d:8e:31:fb:31:a8:1b:62: 55:e7:ba:34:57:4c:58:ae:bd:97:1b:c3:ef:d9:dd: 5a:c7:17:fe:e1:76:e3:df:a6:93:2c:09:4a:37:39: 71:10:a1:c8:90:1d:75:e7:bd:40:63:15:7d:a5:71: 9b:2c:d0:3b:16:e6:d6:da:59:81:20:18:ab:53:9d: c0:5c:f4:2a:41:ba:f9:75:53:4b:de:74:dd:26:f8: 0f:bf:bf:6c:b0:4d:bb:2d:d6:8e:ab:54:78:4d:6a: 5e:4b:f3:7c:98:ec:c1:3b:16:70:04:8d:e6:0d:90: 28:f1:01:ee:ef:ed:77:99:e4:68:dc:b4:00:64:c7: 91:d6:4f:cc:bc:24:c3:57:4e:46:ca:3b:ad:dc:28: 3c:ab:2c:95:1e:2c:fc:01:c8:45:06:71:08:45:e1: 9a:87:a1:8a:04:ec:15:b2:d5:70:5d:ce:70:13:83: e4:2f:fc:cc:27:80:4b:52:0f:96:1f:30:96:cd:50: e8:c0:27:cb:fc:58:c3:db:13:f0:64:e5:2e:37:d6: 82:ab:71:9e:4f:84:04:87:1d:e5:87:96:15:fc:56: 0d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:33:BE:E3:F2:34:0F:4C:ED:ED:80:92:D6:C0:A5:3D:C0:4B:03:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3b06e68-f188-3b67-a40e-5dbe8d65053d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.16.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:e3:92:56:d3:09:a5:28:54:bd:97:ea:6b:23:d1:8f:26:2f: 0f:4f:91:b8:8c:33:27:cc:b0:ca:55:1f:27:fa:80:c8:8b:f4: f6:02:a8:bd:5d:8d:b7:ba:45:76:02:56:f6:08:10:f3:04:48: 08:8d:b3:20:85:1e:7a:58:84:a6:8a:1d:9e:2e:0b:43:73:2d: 47:fe:d0:9b:af:d3:75:87:7e:d6:f8:52:78:d8:2b:9f:a8:8c: d4:89:7a:16:13:5b:c9:b0:b9:d8:d1:90:49:16:d1:00:f6:e9: ab:a5:c4:c3:65:8d:9b:b7:43:cb:24:90:50:ff:89:1d:c6:32: bd:49:45:fb:48:cd:d0:e3:72:a0:18:81:8f:4d:a7:0b:24:95: e5:bd:58:fb:f5:06:49:a7:4a:0f:6e:b0:28:4e:9e:04:54:38: 91:c1:b8:65:16:4b:f1:37:9d:05:21:68:db:bb:a5:c8:b6:4f: 71:fd:bc:a8:28:cb:23:d8:0d:22:97:46:84:c5:9b:36:26:25: 17:9b:12:9d:f6:33:2e:9a:56:fc:af:13:4a:3e:f9:08:e6:68: 5c:58:cb:bc:cf:8a:d8:52:d9:09:f6:fa:c3:92:9b:c3:b3:1e: 3e:5d:9f:30:3d:14:f5:60:03:38:e3:45:c5:af:b6:f6:af:57: 5f:86:e4:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr7uJMZO4WKH3/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDhjOTY0ZGEtNTk3Ni00MDgyLWFiNGUtNDA1YzQ5ODQ0ZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+Y848AFt1VFi/u046FVzlMp695R7xiHCMIr r210NwKkqMfYbY4x+zGoG2JV57o0V0xYrr2XG8Pv2d1axxf+4Xbj36aTLAlKNzlx EKHIkB11571AYxV9pXGbLNA7FubW2lmBIBirU53AXPQqQbr5dVNL3nTdJvgPv79s sE27LdaOq1R4TWpeS/N8mOzBOxZwBI3mDZAo8QHu7+13meRo3LQAZMeR1k/MvCTD V05Gyjut3Cg8qyyVHiz8AchFBnEIReGah6GKBOwVstVwXc5wE4PkL/zMJ4BLUg+W HzCWzVDowCfL/FjD2xPwZOUuN9aCq3GeT4QEhx3lh5YV/FYNvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIzvuPyNA9M7e2AktbApT3ASwO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTNiMDZlNjgtZjE4OC0z YjY3LWE0MGUtNWRiZThkNjUwNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvjklbTCaUoVL2X6msj0Y8mLw9PkbiMMyfMsMpVHyf6gMiL9PYCqL1d jbe6RXYCVvYIEPMESAiNsyCFHnpYhKaKHZ4uC0NzLUf+0Juv03WHftb4UnjYK5+o jNSJehYTW8mwudjRkEkW0QD26aulxMNljZu3Q8skkFD/iR3GMr1JRftIzdDjcqAY gY9NpwskleW9WPv1BkmnSg9usChOngRUOJHBuGUWS/E3nQUhaNu7pci2T3H9vKgo yyPYDSKXRoTFmzYmJRebEp32My6aVvyvE0o++QjmaFxYy7zPithS2Qn2+sOSm8Oz Hj5dnzA9FPVgAzjjRcWvtvavV1+G5H0= -----END CERTIFICATE-----Generated at Mon Apr 7 05:51:15 2025 by rpki-client