$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41a09c6-4c03-3685-a8a0-213adac37033.roa File: a41a09c6-4c03-3685-a8a0-213adac37033.roa (raw, json) Hash identifier: qYZtMkiGgOtKiN3ywfYHzEmStsuEaSjbAQCLn8Qvn74= Subject key identifier: A0:DB:BA:54:5F:E6:46:02:A9:EC:6D:79:80:58:9D:7C:8C:C3:4C:E7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB018115E9269D28A1C11E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41a09c6-4c03-3685-a8a0-213adac37033.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 76.102.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:18:11:5e:92:69:d2:8a:1c:11:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a28e21b0-870e-4315-a093-d1fbf8b11781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:77:19:47:6f:5f:75:71:f2:d3:94:08:8c:56: b4:80:19:45:2c:12:92:ef:18:11:b2:68:f8:6b:19: 02:74:96:db:7c:f7:73:38:b3:f7:f3:a6:d0:77:7c: b9:82:89:66:23:62:43:02:07:2c:e5:8c:7d:f3:0c: 51:5e:ea:e7:c9:97:14:0c:97:e5:ed:9d:8b:2e:66: 7f:33:56:f1:d7:b3:25:6e:aa:41:35:65:bb:44:9e: c8:02:d3:71:06:c8:34:f0:f1:e8:ba:bf:4e:08:9d: d1:39:27:98:98:cc:aa:0f:37:9e:ed:52:c2:8f:38: 5c:6e:ba:29:ea:03:ec:ca:eb:3e:47:ce:b9:86:4b: 18:45:e6:ee:b4:5e:81:84:ee:22:f0:68:26:31:b2: 7c:6e:8f:1c:f3:f5:39:75:bb:64:5b:07:05:fc:0e: 09:38:b8:55:a2:24:cb:be:c6:38:ef:8d:20:84:97: f9:0a:3d:5a:4a:5e:57:68:ea:59:0d:8e:41:40:6e: 18:5e:58:78:fa:2c:1e:ee:3e:30:a4:38:3f:b5:cb: 07:d1:1a:94:b9:5b:69:cb:81:01:5b:f1:0c:00:e0: fb:02:22:98:62:b3:55:ed:54:70:e0:50:8f:c3:ca: 26:25:15:da:43:eb:a7:aa:74:19:a3:b8:96:07:62: d2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DB:BA:54:5F:E6:46:02:A9:EC:6D:79:80:58:9D:7C:8C:C3:4C:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41a09c6-4c03-3685-a8a0-213adac37033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.102.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:30:d3:23:42:06:d1:fd:ee:a0:94:ed:8c:6b:99:16:be:ed: 57:82:16:11:f0:00:59:93:3a:74:44:2c:55:00:97:2d:e8:10: 6f:84:54:be:99:3d:d7:80:8a:20:8e:6a:64:85:3b:ed:9d:a1: 6c:0a:50:0c:d9:9b:e0:75:c7:48:24:95:48:0b:ef:99:5e:4b: 4a:30:00:4c:28:b2:b7:2f:23:07:52:89:63:ce:95:eb:bb:d3: 6e:42:7f:fa:85:81:f4:d4:55:91:c6:ac:f3:64:05:8f:b7:d3: 8b:c6:d5:54:0c:df:59:5f:f8:0d:0b:ee:84:6b:6f:b9:f8:93: 00:05:69:df:00:1f:e2:71:ff:8f:73:73:7c:8d:d4:ca:a5:8a: f7:ce:95:68:78:64:79:4d:99:b3:d3:14:fd:6e:57:bf:1d:ff: 2b:90:1a:90:4f:2c:80:aa:a8:ce:fb:74:ae:89:5b:c8:50:9e: ab:0d:9d:11:c7:36:f7:31:86:e6:0a:14:cc:9a:7b:b9:58:59: 3e:87:77:ca:6f:56:b1:6c:b7:15:3f:36:4a:5a:49:41:e1:8d: 67:b8:a0:e9:80:ec:32:56:0d:37:4f:b9:db:62:e0:d5:34:50: 6a:c0:f6:62:2a:46:c2:2d:03:ea:39:3b:19:d8:66:ea:68:f8: 87:93:f8:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssBgRXpJp0oocEeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTI4ZTIxYjAtODcwZS00MzE1LWEwOTMtZDFmYmY4YjExNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43cZR29fdXHy05QIjFa0gBlFLBKS7xgRsmj4 axkCdJbbfPdzOLP386bQd3y5golmI2JDAgcs5Yx98wxRXurnyZcUDJfl7Z2LLmZ/ M1bx17MlbqpBNWW7RJ7IAtNxBsg08PHour9OCJ3ROSeYmMyqDzee7VLCjzhcbrop 6gPsyus+R865hksYRebutF6BhO4i8GgmMbJ8bo8c8/U5dbtkWwcF/A4JOLhVoiTL vsY4740ghJf5Cj1aSl5XaOpZDY5BQG4YXlh4+iwe7j4wpDg/tcsH0RqUuVtpy4EB W/EMAOD7AiKYYrNV7VRw4FCPw8omJRXaQ+unqnQZo7iWB2LSZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDbulRf5kYCqexteYBYnXyMw0znMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQxYTA5YzYtNGMwMy0z Njg1LWE4YTAtMjEzYWRhYzM3MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTGbsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQw0yNCBtH97qCU7YxrmRa+7VeCFhHwAFmTOnRELFUAly3oEG+EVL6Z PdeAiiCOamSFO+2doWwKUAzZm+B1x0gklUgL75leS0owAEwosrcvIwdSiWPOleu7 025Cf/qFgfTUVZHGrPNkBY+304vG1VQM31lf+A0L7oRrb7n4kwAFad8AH+Jx/49z c3yN1MqlivfOlWh4ZHlNmbPTFP1uV78d/yuQGpBPLICqqM77dK6JW8hQnqsNnRHH NvcxhuYKFMyae7lYWT6Hd8pvVrFstxU/NkpaSUHhjWe4oOmA7DJWDTdPudti4NU0 UGrA9mIqRsItA+o5OxnYZupo+IeT+Is= -----END CERTIFICATE-----Generated at Mon Apr 7 09:34:20 2025 by rpki-client