$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe97e0a-5c6d-3f67-b735-8ba14939c0db.roa File: afe97e0a-5c6d-3f67-b735-8ba14939c0db.roa (raw, json) Hash identifier: jkBdxLt8S4G+K0X1dQqH/IhBFnJZCzQcGaTqrIyGxjA= Subject key identifier: 90:AF:0F:D0:93:D0:D6:E3:5B:E1:EF:A0:CD:F3:8E:69:F3:8C:CB:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DD0281D691A93443F7480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe97e0a-5c6d-3f67-b735-8ba14939c0db.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 76.156.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:d0:28:1d:69:1a:93:44:3f:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f867e7ad-9627-4ea8-b575-1fa0463a2646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:92:43:ee:ec:13:d1:2d:f8:8e:e2:35:d4: ac:81:83:9c:81:9d:cb:61:16:63:52:24:17:bb:14: e7:fc:fb:bd:c1:e1:52:0e:0a:ef:30:3c:23:45:08: 05:8f:95:0b:9a:64:2c:0f:b1:53:67:ff:94:09:ad: 59:64:a4:22:5c:86:46:64:bc:11:94:c9:35:5b:97: be:56:82:2d:2d:2f:52:7c:73:89:1d:b4:eb:ae:c0: ec:5a:63:50:56:fd:a9:af:24:43:25:c8:cf:ac:d3: 56:bd:18:70:2b:54:41:34:28:6a:14:5f:89:22:26: 14:19:67:00:58:d7:97:8a:12:8b:b7:6e:e3:cb:e8: b0:12:ff:37:41:69:a3:e6:cd:85:df:62:2a:c0:93: e8:4e:41:3b:fb:1e:4d:96:85:d4:c6:77:07:b7:3f: 8b:2d:c4:7b:d0:fd:4a:bf:af:e9:63:08:96:bc:f8: 34:1c:39:f3:04:0a:b5:5e:13:ef:c2:10:b0:23:29: 3c:64:bf:03:ea:bf:dc:fc:a7:9c:32:bd:1f:97:80: bf:9d:2e:79:03:db:96:0f:3c:f6:ce:14:f4:01:19: da:e2:a7:54:81:e4:4e:8f:9d:66:32:34:7a:92:09: 7b:b8:3c:08:f6:f4:21:8e:8d:6e:1b:24:07:e2:21: 93:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AF:0F:D0:93:D0:D6:E3:5B:E1:EF:A0:CD:F3:8E:69:F3:8C:CB:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe97e0a-5c6d-3f67-b735-8ba14939c0db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.156.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:00:21:eb:47:81:35:91:f0:b4:3a:6b:be:9f:bb:49:4d:3a: 28:8e:1c:4f:28:07:f5:87:cd:2a:72:1e:36:fe:e5:a5:52:bf: ab:01:0c:20:fb:22:23:a6:f7:24:ba:8b:2b:5f:98:6d:dc:02: 15:2c:c6:b7:f7:64:35:85:74:a1:d5:c1:3c:bb:93:15:2d:62: d1:d3:c9:cd:46:8d:77:99:05:17:c0:b4:65:25:a0:c8:ac:f8: f6:7f:72:27:f7:73:d4:41:8c:e8:0e:7b:87:5a:bd:51:21:29: d4:50:ee:14:f4:25:21:78:2f:35:cc:fa:cb:e6:ee:9c:56:a9: ca:f4:1e:07:5e:89:2a:19:4b:6e:7c:21:98:65:b6:34:05:de: 0f:07:06:a6:67:a1:20:49:7d:d9:76:5c:85:7c:1f:1e:68:61: 1f:66:88:d9:21:71:5b:00:3c:ed:34:38:94:26:02:ee:56:cf: 8b:7a:ad:1b:2f:6c:17:ab:e0:7b:6c:6f:be:90:0e:b0:62:f0: 27:30:ab:7c:71:cb:90:2b:63:25:fd:07:cb:6f:65:39:8d:4e: 97:74:32:41:72:b1:e9:81:4b:b5:1d:d1:3d:2d:c7:12:12:6b: 7a:ac:fb:cb:61:e7:20:25:c5:d4:0f:38:d0:54:e0:55:a8:6c: 5b:9d:72:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebdAoHWkak0Q/dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Zjg2N2U3YWQtOTYyNy00ZWE4LWI1NzUtMWZhMDQ2M2EyNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYaSQ+7sE9Et+I7iNdSsgYOcgZ3LYRZjUiQX uxTn/Pu9weFSDgrvMDwjRQgFj5ULmmQsD7FTZ/+UCa1ZZKQiXIZGZLwRlMk1W5e+ VoItLS9SfHOJHbTrrsDsWmNQVv2pryRDJcjPrNNWvRhwK1RBNChqFF+JIiYUGWcA WNeXihKLt27jy+iwEv83QWmj5s2F32IqwJPoTkE7+x5NloXUxncHtz+LLcR70P1K v6/pYwiWvPg0HDnzBAq1XhPvwhCwIyk8ZL8D6r/c/KecMr0fl4C/nS55A9uWDzz2 zhT0ARna4qdUgeROj51mMjR6kgl7uDwI9vQhjo1uGyQH4iGTrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCvD9CT0NbjW+HvoM3zjmnzjMubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZlOTdlMGEtNWM2ZC0z ZjY3LWI3MzUtOGJhMTQ5MzljMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0AIetHgTWR8LQ6a76fu0lNOiiOHE8oB/WHzSpyHjb+5aVSv6sBDCD7 IiOm9yS6iytfmG3cAhUsxrf3ZDWFdKHVwTy7kxUtYtHTyc1GjXeZBRfAtGUloMis +PZ/cif3c9RBjOgOe4davVEhKdRQ7hT0JSF4LzXM+svm7pxWqcr0HgdeiSoZS258 IZhltjQF3g8HBqZnoSBJfdl2XIV8Hx5oYR9miNkhcVsAPO00OJQmAu5Wz4t6rRsv bBer4Htsb76QDrBi8Ccwq3xxy5ArYyX9B8tvZTmNTpd0MkFysemBS7Ud0T0txxIS a3qs+8th5yAlxdQPONBU4FWobFudcqI= -----END CERTIFICATE-----Generated at Mon Apr 7 09:38:54 2025 by rpki-client