$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa694ea6-a439-3c23-8e3b-c97bac9cad59.roa File: aa694ea6-a439-3c23-8e3b-c97bac9cad59.roa (raw, json) Hash identifier: BGpHSNu+7OLlUIK+I5Y5IiuRiajAmE9RCK1e12duZrg= Subject key identifier: 1E:01:03:0D:3A:F7:43:FD:4E:88:F0:E9:8D:B1:60:D1:3A:D5:C2:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFBBFD35292648FEF03300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa694ea6-a439-3c23-8e3b-c97bac9cad59.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 76.29.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:bb:fd:35:29:26:48:fe:f0:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=27ddc16e-1a48-47d4-bd24-f0d78a230776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5a:e5:4a:a1:6f:f6:6e:38:a1:ac:96:fd:9d: 29:c0:17:86:c7:e6:38:aa:f6:b2:f9:94:61:b2:fe: af:da:6b:d3:c2:66:32:07:04:6e:17:17:e2:95:61: 23:92:4c:f4:7d:0a:4a:c1:af:25:07:ac:23:20:f8: c6:48:b9:9f:2a:41:9b:53:e9:cd:82:a9:38:14:90: 45:0f:ac:61:ab:e3:37:87:b9:5d:ac:33:ae:67:54: ed:09:0d:15:2b:36:38:a9:11:39:ee:9d:32:0f:79: a7:6c:80:77:b4:cb:6c:00:25:01:17:c5:bc:81:d8: 58:cb:24:1c:7b:39:f3:54:58:dc:73:fa:6d:9f:ff: 77:93:a2:df:58:76:fc:36:82:22:3f:96:1b:11:74: b6:15:6c:5a:7a:fb:72:3f:ed:9f:bd:30:72:a1:3f: 8b:b3:01:e9:92:b3:7a:18:8f:f3:fc:9e:e9:ab:50: 75:98:7e:75:73:b4:f4:7d:6d:7a:52:6a:00:4b:c7: ae:f6:3e:09:27:fd:ff:d6:f5:89:7d:31:d8:7c:c4: ef:ef:3e:5f:63:bf:4f:d5:d4:54:d9:fa:b5:d1:a6: 4e:b2:f1:08:81:b6:26:a3:4f:1c:ee:83:d9:11:7f: ac:45:3d:0d:f9:d1:cd:57:ad:9b:f8:a4:7e:29:4f: 91:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:01:03:0D:3A:F7:43:FD:4E:88:F0:E9:8D:B1:60:D1:3A:D5:C2:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa694ea6-a439-3c23-8e3b-c97bac9cad59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.29.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:f2:53:43:f8:fd:a1:f9:29:f6:6a:59:8d:e8:d6:02:4b:f6: d2:0a:c7:d5:d9:a2:93:84:56:54:3d:fd:46:a7:df:70:ea:96: 43:7c:17:60:51:71:08:be:c5:ff:78:f3:7d:53:09:90:52:5e: d6:3f:7a:64:de:c8:94:8c:c1:eb:9b:19:7e:50:f8:87:ff:7c: 10:25:20:eb:f9:fa:af:d0:16:53:64:19:58:b7:c0:32:ff:38: d6:3c:01:41:6e:b3:2b:e4:91:af:ae:43:b9:db:35:d6:b5:ca: 67:40:da:2c:49:4e:d7:a9:55:db:a8:17:5c:d6:df:ed:da:df: 7a:f8:d6:13:e1:fa:c1:0c:6a:fe:96:0e:e9:41:f5:3a:bd:86: 31:bc:aa:c5:5e:f5:41:ca:dc:05:2a:34:97:3a:9e:50:78:d6: 60:33:ab:1b:8d:34:dd:91:1d:5f:a1:61:7f:1e:b5:9f:63:4a: fe:f8:5e:5e:72:25:a6:33:da:62:10:f2:9f:71:a3:75:79:b0: ce:28:5f:a3:4d:b5:4f:d9:a8:2e:fe:a4:b5:c0:52:52:a2:85: 4e:4d:89:d6:ee:45:fe:c5:b1:57:67:23:b2:2d:9a:5d:4b:d5: bd:a9:c7:85:b6:1a:c7:15:db:67:c2:44:d4:3a:19:93:b0:80: d0:4a:b1:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr7v9NSkmSP7wMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MjdkZGMxNmUtMWE0OC00N2Q0LWJkMjQtZjBkNzhhMjMwNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1rlSqFv9m44oayW/Z0pwBeGx+Y4qvay+ZRh sv6v2mvTwmYyBwRuFxfilWEjkkz0fQpKwa8lB6wjIPjGSLmfKkGbU+nNgqk4FJBF D6xhq+M3h7ldrDOuZ1TtCQ0VKzY4qRE57p0yD3mnbIB3tMtsACUBF8W8gdhYyyQc eznzVFjcc/ptn/93k6LfWHb8NoIiP5YbEXS2FWxaevtyP+2fvTByoT+LswHpkrN6 GI/z/J7pq1B1mH51c7T0fW16UmoAS8eu9j4JJ/3/1vWJfTHYfMTv7z5fY79P1dRU 2fq10aZOsvEIgbYmo08c7oPZEX+sRT0N+dHNV62b+KR+KU+RfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4BAw0690P9Tojw6Y2xYNE61cKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE2OTRlYTYtYTQzOS0z YzIzLThlM2ItYzk3YmFjOWNhZDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTB0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/yU0P4/aH5KfZqWY3o1gJL9tIKx9XZopOEVlQ9/Uan33DqlkN8F2BR cQi+xf94831TCZBSXtY/emTeyJSMweubGX5Q+If/fBAlIOv5+q/QFlNkGVi3wDL/ ONY8AUFusyvkka+uQ7nbNda1ymdA2ixJTtepVduoF1zW3+3a33r41hPh+sEMav6W DulB9Tq9hjG8qsVe9UHK3AUqNJc6nlB41mAzqxuNNN2RHV+hYX8etZ9jSv74Xl5y JaYz2mIQ8p9xo3V5sM4oX6NNtU/ZqC7+pLXAUlKihU5NidbuRf7FsVdnI7Itml1L 1b2px4W2GscV22fCRNQ6GZOwgNBKsTA= -----END CERTIFICATE-----Generated at Mon Apr 7 05:53:04 2025 by rpki-client