$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5840d0a-1dbe-3874-8b26-76f77985f825.roa File: b5840d0a-1dbe-3874-8b26-76f77985f825.roa (raw, json) Hash identifier: 9NtMmQWgEs5bPwA59QUHSEihkmR0tiSP04oQI7C1YSw= Subject key identifier: C7:02:0A:13:7E:41:C8:3B:37:67:F0:A3:2E:A1:D0:C2:09:3E:EE:C6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D045F8FFE1BE8D8BBA080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5840d0a-1dbe-3874-8b26-76f77985f825.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 76.123.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:04:5f:8f:fe:1b:e8:d8:bb:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=af8d5999-599f-4d2f-91e6-560244f94d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:94:4c:e2:4f:cf:a4:53:6a:31:24:02:0e:b7: 9b:be:56:90:b9:0c:0e:06:5d:e4:31:84:e4:50:03: bb:96:e4:ba:b7:1d:24:71:91:a0:2b:3f:40:fb:30: 4b:09:4e:61:41:5e:ec:7d:11:7f:ba:d3:af:21:f3: 80:bb:27:31:68:cd:6f:83:fc:8b:06:f1:e2:ed:01: 40:1c:83:00:bd:26:57:5a:62:27:e2:d2:3d:3f:57: f9:d1:79:fe:d3:b9:97:f8:cd:3a:85:60:0e:59:f9: ca:26:fc:97:a6:e2:48:3c:9a:b7:ef:f5:f2:a0:25: a7:4e:4c:17:ae:9b:62:cc:39:14:26:fb:62:43:0e: d5:32:35:4c:f7:28:bd:21:95:05:27:ed:02:df:1e: b2:6c:e0:d2:02:2e:a3:d9:6d:b7:62:ce:9c:f3:c9: 91:b2:ea:32:75:a4:a9:e9:29:03:9f:81:ec:69:bb: a9:8b:85:ab:ec:d5:69:77:c2:6c:bd:90:de:57:96: 69:5e:9a:15:4f:c8:3d:90:a2:a3:d1:fe:5b:b2:e7: a5:ef:9f:22:c8:2a:2e:89:4e:8e:cc:16:73:b3:c2: db:3b:33:85:a2:84:a7:47:95:42:fa:fe:47:8e:4c: fa:ac:9e:48:f6:c5:56:50:e3:ea:e9:c8:3f:97:33: 1c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:02:0A:13:7E:41:C8:3B:37:67:F0:A3:2E:A1:D0:C2:09:3E:EE:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5840d0a-1dbe-3874-8b26-76f77985f825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.123.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:35:b9:f3:1f:bb:c1:e2:5f:18:12:8f:1d:93:27:1f:7f:06: 83:62:69:9a:87:af:0d:75:99:dd:e6:f9:7f:53:48:77:aa:f1: df:ed:5f:f0:36:a1:70:55:84:70:ea:34:69:75:b7:61:6c:62: 5d:ba:06:03:16:da:40:fa:7a:55:45:58:f0:f7:b6:73:f6:46: 77:c6:82:e3:d9:41:ff:f8:31:00:ad:69:70:8e:a2:44:53:2c: a8:c3:bb:35:c0:12:e7:3b:56:19:d7:1d:10:b0:6c:90:c2:64: b7:46:4e:c2:e1:51:03:09:41:b3:b1:53:c8:39:b2:1b:c6:69: 85:70:cb:09:40:0a:38:4d:5c:bd:7a:ca:96:f4:75:0b:fa:dc: de:c2:c9:15:54:7a:36:92:e1:b3:88:9f:eb:6c:ca:7f:c1:43: 02:e4:1f:82:6f:f7:94:5b:b2:74:aa:22:65:39:a0:84:8d:51: be:a3:c7:86:23:b2:08:c3:e4:fd:02:00:37:75:22:e8:80:b4: b7:9e:d6:53:df:39:bb:4d:6d:64:af:d2:1a:18:89:66:37:1d: 19:1e:28:ef:bf:60:06:00:98:f7:87:b6:24:88:e9:73:a4:da: d8:18:37:93:28:1f:6d:24:3f:91:74:44:5f:b7:8b:cd:d3:13: bd:68:fb:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebQRfj/4b6Ni7oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YWY4ZDU5OTktNTk5Zi00ZDJmLTkxZTYtNTYwMjQ0Zjk0ZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJRM4k/PpFNqMSQCDrebvlaQuQwOBl3kMYTk UAO7luS6tx0kcZGgKz9A+zBLCU5hQV7sfRF/utOvIfOAuycxaM1vg/yLBvHi7QFA HIMAvSZXWmIn4tI9P1f50Xn+07mX+M06hWAOWfnKJvyXpuJIPJq37/XyoCWnTkwX rptizDkUJvtiQw7VMjVM9yi9IZUFJ+0C3x6ybODSAi6j2W23Ys6c88mRsuoydaSp 6SkDn4Hsabupi4Wr7NVpd8JsvZDeV5ZpXpoVT8g9kKKj0f5bsuel758iyCouiU6O zBZzs8LbOzOFooSnR5VC+v5Hjkz6rJ5I9sVWUOPq6cg/lzMc+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcCChN+Qcg7N2fwoy6h0MIJPu7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjU4NDBkMGEtMWRiZS0z ODc0LThiMjYtNzZmNzc5ODVmODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANs1ufMfu8HiXxgSjx2TJx9/BoNiaZqHrw11md3m+X9TSHeq8d/tX/A2 oXBVhHDqNGl1t2FsYl26BgMW2kD6elVFWPD3tnP2RnfGguPZQf/4MQCtaXCOokRT LKjDuzXAEuc7VhnXHRCwbJDCZLdGTsLhUQMJQbOxU8g5shvGaYVwywlACjhNXL16 ypb0dQv63N7CyRVUejaS4bOIn+tsyn/BQwLkH4Jv95RbsnSqImU5oISNUb6jx4Yj sgjD5P0CADd1IuiAtLee1lPfObtNbWSv0hoYiWY3HRkeKO+/YAYAmPeHtiSI6XOk 2tgYN5MoH20kP5F0RF+3i83TE71o+ys= -----END CERTIFICATE-----Generated at Mon Apr 7 06:18:13 2025 by rpki-client