$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a657da94-061f-3a45-aed6-c0064ec9c534.roa File: a657da94-061f-3a45-aed6-c0064ec9c534.roa (raw, json) Hash identifier: jbf5M/jHKKe65OlT7o9ikW0eI8HBbMxufzuM6CAHa6M= Subject key identifier: C2:CD:51:31:24:FE:0B:04:4B:B2:B8:4B:D5:FC:6A:48:88:28:26:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8004BC8CC3FC6FD8414E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a657da94-061f-3a45-aed6-c0064ec9c534.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 76.143.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:00:4b:c8:cc:3f:c6:fd:84:14:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=18e1fff4-1103-48e5-b4ad-1b5e282b2708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:70:e2:23:07:2c:be:b3:7f:c7:c2:19:6a:7a: bb:22:6e:9d:a6:1a:a0:7d:45:0e:9b:68:8c:07:01: 0e:2f:91:33:6e:fa:2c:30:1e:9f:7c:74:8d:e4:7c: c1:6b:d8:b1:f0:b7:8e:16:4b:66:be:09:c2:6a:f5: 06:96:09:32:12:c6:ac:0b:2e:f1:47:8e:03:73:1f: 7c:bd:3d:aa:ad:a2:2f:1c:2c:56:73:d5:e7:ff:f5: cd:e7:6d:72:1c:ad:18:2b:d1:30:b1:cc:a4:01:2e: 69:c5:43:57:3c:5f:13:16:c4:60:e0:45:97:23:f8: 48:f7:fe:29:b4:58:e2:97:c2:04:f0:7d:5a:ef:7b: bd:1c:63:ba:dd:83:6d:71:ae:41:0a:28:df:e5:0f: 9e:81:c4:e8:55:e5:0f:45:f2:04:f7:fe:13:57:21: ca:5f:fe:b3:03:79:be:a5:7f:d4:4d:a0:6e:45:8f: af:e0:d0:57:28:05:09:ad:8e:f1:4a:bb:72:eb:69: d1:07:31:ad:bb:88:b2:49:a6:50:1a:17:4a:16:f1: 44:b8:10:0d:c1:70:bd:24:0b:26:c7:c4:5d:5e:92: 09:28:47:18:82:75:a0:71:b9:8f:cc:6f:47:63:fb: 3b:2c:f6:8e:f1:a6:e1:df:5d:24:78:a3:d2:44:2f: 5a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CD:51:31:24:FE:0B:04:4B:B2:B8:4B:D5:FC:6A:48:88:28:26:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a657da94-061f-3a45-aed6-c0064ec9c534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.143.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:ff:7f:5b:3a:cc:86:dc:35:de:08:fc:5d:43:46:6a:57:60: 7d:57:52:53:09:42:35:88:70:e1:83:5d:20:f5:ce:a0:c1:cc: 3b:ff:22:11:96:02:5e:bf:fc:f7:90:77:5e:af:1c:01:c8:f7: c9:ea:6a:fb:51:dd:a5:d8:aa:9d:ab:46:46:7c:e9:ac:44:38: c8:1f:2d:28:1e:17:a8:ed:3e:65:0a:5c:da:61:35:5c:c2:24: 20:5a:35:f2:0c:95:30:e9:d9:44:2f:2f:48:ae:e6:3e:d2:cf: 89:9e:55:de:c9:49:9a:3b:b2:3b:ea:4c:c4:58:4f:22:be:46: 51:73:04:f8:90:9e:ae:ac:89:bb:97:d6:05:d6:68:fc:99:85: e5:1b:8e:fb:a8:23:a6:11:a8:6b:d3:bc:59:88:00:81:be:ed: 91:33:60:26:78:74:1d:0f:cc:c3:56:d5:0b:bb:16:cb:09:87: 0d:5d:38:da:44:59:6d:c9:b2:4a:39:f5:d2:1e:a5:41:d2:fc: ae:71:6d:83:85:34:ab:d6:ed:47:da:96:a0:46:b8:82:46:ec: cb:55:0b:30:41:35:80:ef:15:ae:df:0b:b8:74:b9:bd:ad:4a: 70:2d:25:20:61:e2:40:31:75:88:ef:85:0c:a0:5e:97:df:f2: 94:ae:29:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+ABLyMw/xv2EFOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MThlMWZmZjQtMTEwMy00OGU1LWI0YWQtMWI1ZTI4MmIyNzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHDiIwcsvrN/x8IZanq7Im6dphqgfUUOm2iM BwEOL5EzbvosMB6ffHSN5HzBa9ix8LeOFktmvgnCavUGlgkyEsasCy7xR44Dcx98 vT2qraIvHCxWc9Xn//XN521yHK0YK9EwscykAS5pxUNXPF8TFsRg4EWXI/hI9/4p tFjil8IE8H1a73u9HGO63YNtca5BCijf5Q+egcToVeUPRfIE9/4TVyHKX/6zA3m+ pX/UTaBuRY+v4NBXKAUJrY7xSrty62nRBzGtu4iySaZQGhdKFvFEuBANwXC9JAsm x8RdXpIJKEcYgnWgcbmPzG9HY/s7LPaO8abh310keKPSRC9akwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLNUTEk/gsES7K4S9X8akiIKCahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTY1N2RhOTQtMDYxZi0z YTQ1LWFlZDYtYzAwNjRlYzljNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTI8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMz/f1s6zIbcNd4I/F1DRmpXYH1XUlMJQjWIcOGDXSD1zqDBzDv/IhGW Al6//PeQd16vHAHI98nqavtR3aXYqp2rRkZ86axEOMgfLSgeF6jtPmUKXNphNVzC JCBaNfIMlTDp2UQvL0iu5j7Sz4meVd7JSZo7sjvqTMRYTyK+RlFzBPiQnq6sibuX 1gXWaPyZheUbjvuoI6YRqGvTvFmIAIG+7ZEzYCZ4dB0PzMNW1Qu7FssJhw1dONpE WW3Jsko59dIepUHS/K5xbYOFNKvW7UfalqBGuIJG7MtVCzBBNYDvFa7fC7h0ub2t SnAtJSBh4kAxdYjvhQygXpff8pSuKac= -----END CERTIFICATE-----Generated at Mon Apr 7 05:59:05 2025 by rpki-client