$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b137f01f-105a-36ab-b8d0-bf52b1f97871.roa File: b137f01f-105a-36ab-b8d0-bf52b1f97871.roa (raw, json) Hash identifier: gv95UIru1QfcqST3ULyb7mF8qMn3JKyhsDmRrtVsMl0= Subject key identifier: 8A:3C:39:83:CB:C9:CB:63:8D:31:70:10:83:69:D3:DC:0E:0E:DA:3D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB01F73B5782CB27296F280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b137f01f-105a-36ab-b8d0-bf52b1f97871.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 76.133.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:1f:73:b5:78:2c:b2:72:96:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=22700d3f-31d5-4404-a4a3-5bd2c9e838f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5d:a2:29:51:91:af:17:22:4c:5d:ce:d0:aa: 64:12:c2:d0:dd:1a:50:d9:a2:fa:1c:01:96:02:03: 78:d7:e6:fe:3e:75:8d:c5:67:2d:6e:b2:97:6a:89: 0b:16:5e:50:9d:5c:26:48:22:a8:a7:93:20:09:0d: 98:8f:0f:75:47:cf:6d:37:68:b8:20:a8:e1:f6:2d: e6:af:1f:27:55:64:cc:92:d7:14:51:5c:35:64:f4: 20:04:65:42:4e:2f:f6:9a:3a:69:24:19:fa:9d:f8: 4f:9e:78:30:eb:d6:f2:bc:07:54:ae:22:b3:97:91: 6f:56:f1:d9:6f:28:48:c8:67:3d:22:94:4d:48:fc: 5e:8c:4e:96:60:97:70:54:61:45:59:4f:53:02:1f: ba:90:f4:00:78:f8:23:ee:f1:e9:b6:11:d1:cc:11: aa:f1:ed:d6:23:a4:aa:56:1d:3c:63:0e:62:76:f7: 43:e2:f5:45:44:47:40:43:6f:3b:97:ec:17:24:0a: 03:10:81:64:7f:82:b9:d8:1d:3f:2b:1c:51:60:e7: be:7a:ec:ab:35:9a:b1:f9:f8:94:c8:b2:89:db:9b: c8:6e:5a:94:47:18:02:79:ef:6f:69:99:eb:e5:d4: 19:4c:6a:4a:2b:0e:27:13:04:08:e7:5d:cd:77:92: ad:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3C:39:83:CB:C9:CB:63:8D:31:70:10:83:69:D3:DC:0E:0E:DA:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b137f01f-105a-36ab-b8d0-bf52b1f97871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:c6:71:45:37:74:59:14:b4:ec:96:99:9e:da:83:5e:6e:58: b1:82:f4:be:da:83:fa:37:68:76:f6:c1:27:89:1d:cb:5e:65: 42:bd:14:b4:e8:e0:14:46:57:16:b7:27:02:5e:77:52:55:5d: 38:b6:2f:5b:27:23:32:75:24:f5:3c:a6:98:f5:7b:bc:2e:82: a1:dc:0c:8e:4f:aa:45:17:9f:2c:4d:15:a3:94:9a:c9:ed:08: 94:ac:e2:ac:e7:ba:6e:b7:95:20:96:61:b1:4a:69:63:e6:cd: 91:2a:35:55:06:7a:8e:9f:4a:44:66:9d:a2:c1:d8:27:89:43: ab:01:8f:c8:64:fa:9c:fc:29:b5:a2:12:96:7c:7c:58:af:bd: 15:b6:ed:10:5f:9d:4c:4c:86:c6:a1:71:e6:70:01:18:d3:1f: e3:e2:a9:d2:fc:e1:0d:f5:1f:b7:1a:3a:29:75:fe:d0:20:26: 26:59:25:98:cc:76:71:c0:6c:03:16:33:4a:ae:7f:e9:e4:95: 43:6b:16:bd:d2:64:c6:8c:08:07:97:cb:7a:09:b4:61:ae:9b: e7:86:a2:74:b5:54:18:cf:c3:5d:26:fc:7c:60:20:c1:7d:ed: 24:cf:a3:8d:37:96:a0:18:f4:e6:b3:73:6f:28:ec:5c:81:0e: 69:76:d6:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssB9ztXgssnKW8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MjI3MDBkM2YtMzFkNS00NDA0LWE0YTMtNWJkMmM5ZTgzOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl2iKVGRrxciTF3O0KpkEsLQ3RpQ2aL6HAGW AgN41+b+PnWNxWctbrKXaokLFl5QnVwmSCKop5MgCQ2Yjw91R89tN2i4IKjh9i3m rx8nVWTMktcUUVw1ZPQgBGVCTi/2mjppJBn6nfhPnngw69byvAdUriKzl5FvVvHZ byhIyGc9IpRNSPxejE6WYJdwVGFFWU9TAh+6kPQAePgj7vHpthHRzBGq8e3WI6Sq Vh08Yw5idvdD4vVFREdAQ287l+wXJAoDEIFkf4K52B0/KxxRYOe+euyrNZqx+fiU yLKJ25vIblqURxgCee9vaZnr5dQZTGpKKw4nEwQI513Nd5KtGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo8OYPLyctjjTFwEINp09wODto9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjEzN2YwMWYtMTA1YS0z NmFiLWI4ZDAtYmY1MmIxZjk3ODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLGcUU3dFkUtOyWmZ7ag15uWLGC9L7ag/o3aHb2wSeJHcteZUK9FLTo 4BRGVxa3JwJed1JVXTi2L1snIzJ1JPU8ppj1e7wugqHcDI5PqkUXnyxNFaOUmsnt CJSs4qznum63lSCWYbFKaWPmzZEqNVUGeo6fSkRmnaLB2CeJQ6sBj8hk+pz8KbWi EpZ8fFivvRW27RBfnUxMhsahceZwARjTH+PiqdL84Q31H7caOil1/tAgJiZZJZjM dnHAbAMWM0quf+nklUNrFr3SZMaMCAeXy3oJtGGum+eGonS1VBjPw10m/HxgIMF9 7STPo403lqAY9Oazc28o7FyBDml21mg= -----END CERTIFICATE-----Generated at Mon Apr 7 09:43:18 2025 by rpki-client