$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab79808-e1e5-3ef4-967f-86e6708ff8b2.roa File: aab79808-e1e5-3ef4-967f-86e6708ff8b2.roa (raw, json) Hash identifier: eOri9GpQdqn5Z4Nd5m8bckejHNHE+J9Lp2aRkbv6+kw= Subject key identifier: 35:75:B9:EA:7D:8B:EE:69:F2:39:9D:52:B1:59:41:B2:A8:C4:CA:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB14AE37867D5BFB2C81B70 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab79808-e1e5-3ef4-967f-86e6708ff8b2.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 76.150.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:4a:e3:78:67:d5:bf:b2:c8:1b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=9ceecc8d-abb8-4a93-a3d1-7b569fdce4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:70:6e:76:0b:96:48:df:80:f3:18:3c:9b:f2: 86:47:d3:35:32:54:82:0f:ad:f4:5b:63:ec:8f:ef: 90:8d:b0:24:f5:fe:0a:f5:e2:c1:ee:87:89:30:25: 6c:11:f2:1c:d8:56:24:f0:43:ac:15:ae:d1:0b:d3: 5b:25:d1:aa:ad:67:e4:19:61:80:f9:7f:ff:03:d6: 34:e4:db:5e:d3:c4:61:d9:dd:08:79:ab:fb:3f:23: 95:0f:9c:9b:c3:1a:b5:cd:db:c2:32:04:14:5e:55: 65:01:12:57:8f:81:e6:c0:30:d6:9a:fb:88:24:6a: 04:4e:1e:f3:65:f3:e9:22:9a:4a:3e:bc:e1:97:37: 5c:a3:b3:03:e0:1f:2f:07:7b:d0:97:be:58:12:c1: ec:63:27:30:c3:03:94:1d:19:c9:68:47:40:82:6e: 07:32:54:03:1c:5b:df:72:a5:72:4e:c7:af:64:fe: 98:8a:dc:7a:b7:a6:35:60:b0:98:59:bc:c2:07:e0: 35:4b:72:56:c8:c9:50:e9:42:45:d0:82:e2:81:9a: da:20:77:17:2c:b8:23:1e:97:75:9c:57:5a:30:cc: 48:d8:0d:b3:bd:69:45:53:de:18:e6:e2:8e:33:8c: 0e:30:33:cd:d0:f3:7e:17:aa:9b:31:e0:da:ac:29: da:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:75:B9:EA:7D:8B:EE:69:F2:39:9D:52:B1:59:41:B2:A8:C4:CA:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab79808-e1e5-3ef4-967f-86e6708ff8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.150.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:aa:f2:a9:df:2b:69:e7:83:b4:c6:14:7f:32:95:8d:bb:11: 06:96:07:ce:fa:e4:0d:84:fd:5c:a8:f2:3c:c0:f2:70:b0:d5: ea:dd:2c:4b:b7:61:cd:97:79:38:8a:7a:cb:21:c7:02:b2:c2: 5d:c5:1d:63:b7:97:a0:bf:a3:52:6a:06:7f:00:71:f3:bd:95: d6:94:c9:44:2c:c0:f0:8f:e4:f4:e4:ef:ae:fe:29:58:99:2d: a0:4b:46:99:8d:1b:b5:73:68:72:39:6b:16:3e:86:55:b5:93: 67:65:01:7e:c5:58:81:c4:c3:19:42:39:92:db:57:7f:c2:98: 04:6c:d3:aa:bc:ca:f7:62:8c:31:aa:82:85:63:8a:80:b8:97: 24:08:a3:81:65:38:5d:4f:4b:02:75:c1:03:85:84:a7:46:5f: 3d:d0:ea:04:82:da:f5:71:0d:17:f7:d3:13:a0:6d:ee:16:23: a9:cc:43:af:8c:47:26:9c:70:3f:35:56:6e:da:10:7d:01:f9: 6a:d6:e5:a2:bb:b4:f9:f1:94:75:43:08:b0:79:af:8b:19:f5: 96:bc:78:a5:2e:d0:13:3c:2a:7a:db:fe:12:f6:ec:3d:77:13: 86:6d:87:6f:ef:04:63:0b:9f:29:0f:d7:5f:e2:cb:d9:75:d1: df:fe:7c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssUrjeGfVv7LIG3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OWNlZWNjOGQtYWJiOC00YTkzLWEzZDEtN2I1NjlmZGNlNGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHBudguWSN+A8xg8m/KGR9M1MlSCD630W2Ps j++QjbAk9f4K9eLB7oeJMCVsEfIc2FYk8EOsFa7RC9NbJdGqrWfkGWGA+X//A9Y0 5Nte08Rh2d0Ieav7PyOVD5ybwxq1zdvCMgQUXlVlARJXj4HmwDDWmvuIJGoETh7z ZfPpIppKPrzhlzdco7MD4B8vB3vQl75YEsHsYycwwwOUHRnJaEdAgm4HMlQDHFvf cqVyTsevZP6Yitx6t6Y1YLCYWbzCB+A1S3JWyMlQ6UJF0ILigZraIHcXLLgjHpd1 nFdaMMxI2A2zvWlFU94Y5uKOM4wOMDPN0PN+F6qbMeDarCnaUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDV1uep9i+5p8jmdUrFZQbKoxMpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFiNzk4MDgtZTFlNS0z ZWY0LTk2N2YtODZlNjcwOGZmOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJa8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGq8qnfK2nng7TGFH8ylY27EQaWB8765A2E/Vyo8jzA8nCw1erdLEu3 Yc2XeTiKesshxwKywl3FHWO3l6C/o1JqBn8AcfO9ldaUyUQswPCP5PTk767+KViZ LaBLRpmNG7VzaHI5axY+hlW1k2dlAX7FWIHEwxlCOZLbV3/CmARs06q8yvdijDGq goVjioC4lyQIo4FlOF1PSwJ1wQOFhKdGXz3Q6gSC2vVxDRf30xOgbe4WI6nMQ6+M RyaccD81Vm7aEH0B+WrW5aK7tPnxlHVDCLB5r4sZ9Za8eKUu0BM8Knrb/hL27D13 E4Zth2/vBGMLnykP11/iy9l10d/+fEY= -----END CERTIFICATE-----Generated at Mon Apr 7 06:28:57 2025 by rpki-client