$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baff5741-b3a1-3861-b70d-2c2c301e8873.roa File: baff5741-b3a1-3861-b70d-2c2c301e8873.roa (raw, json) Hash identifier: qMfH86VSN0VDFAOSzLCOKsBkUc2hFIyGdIOwUsNDWQY= Subject key identifier: 18:AE:02:16:3D:CB:67:2D:AA:22:95:EF:87:9C:5A:A7:BA:DA:B3:45 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8C1E3C7F0DAF122BF6000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baff5741-b3a1-3861-b70d-2c2c301e8873.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 76.19.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:c1:e3:c7:f0:da:f1:22:bf:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=59e695f7-199a-453e-b9b1-b11afa887748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:22:b7:d2:e5:12:2a:12:05:1c:7b:d6:d1: 2f:60:f8:3c:b5:aa:f3:e6:92:e2:12:fd:83:c2:d9: 0c:b5:9c:70:12:28:c9:ca:37:0d:c5:04:8c:90:e4: f6:4c:44:7e:fb:aa:24:fe:de:81:7b:fe:a4:c0:55: 64:fe:20:55:4d:1b:98:43:ad:c8:3b:b0:4d:ac:d0: b2:fb:64:44:fc:21:31:a4:ac:5d:49:94:0a:76:a3: 5f:3f:ba:64:2e:43:7d:36:ef:c2:9d:f7:a7:97:11: 87:5c:90:de:2a:a3:06:91:4d:af:f6:54:65:ef:27: 32:df:cb:05:67:18:a6:8b:9b:4b:f0:01:c9:a9:19: 90:49:14:d4:1d:67:e2:0f:0b:87:a0:78:22:c4:ac: 08:b2:11:e2:08:89:46:11:74:eb:b9:fa:a4:f2:72: da:59:da:7e:f3:6f:50:64:9d:79:9d:16:33:3c:9e: 7a:eb:6e:da:aa:21:0b:70:46:ed:a2:88:e8:ef:a5: 40:49:cc:fa:31:1d:33:c7:5a:b3:61:0b:49:c6:cc: ea:97:06:2e:11:06:c2:4a:01:15:d4:53:ff:f1:59: f2:83:5f:b7:b9:2a:56:67:55:07:9a:03:ee:d3:fa: 0e:36:66:f1:2a:63:02:cd:d0:39:9a:12:94:83:b8: 08:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AE:02:16:3D:CB:67:2D:AA:22:95:EF:87:9C:5A:A7:BA:DA:B3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baff5741-b3a1-3861-b70d-2c2c301e8873.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.19.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:0e:b4:da:e2:05:21:51:54:a4:16:41:09:e8:0a:e8:82:24: 6e:eb:48:af:ca:49:34:95:2e:f9:4b:74:c5:50:87:fc:fa:d0: da:f3:a4:9b:69:8b:c5:09:79:fb:e7:bb:39:a6:e0:94:0a:b1: d8:65:23:ae:5b:f3:ae:b2:3e:ff:64:fe:19:fd:e1:ef:78:4e: cc:bf:f3:37:e9:8e:20:f5:23:c3:08:41:65:4d:c0:05:02:54: 69:f5:4a:d9:29:60:3c:83:82:c7:48:81:ab:27:a1:0b:f8:32: cb:42:b4:4a:0d:d0:c1:0b:78:a4:c7:8e:af:4f:5b:34:46:59: 8c:f4:cc:de:ac:91:49:99:a8:62:b1:ab:92:58:3d:77:14:a4: fa:bf:49:44:ab:bc:ef:2a:cb:28:c6:a9:73:1e:5c:10:93:44: 7b:22:b9:ae:4f:8f:2b:6a:8a:9f:0d:48:51:31:41:d2:53:c5: de:5d:8c:47:85:ef:cc:6c:b1:7e:1b:01:67:d8:b1:22:cd:2e: 96:90:9b:eb:f3:56:1c:55:17:20:13:2a:8a:53:31:c3:3b:cc: 67:c1:f6:53:4a:cc:d6:bb:00:ab:14:c8:43:b5:8c:4e:e1:6d: cc:01:19:f3:2e:b5:de:df:ae:ad:a1:2a:9b:49:aa:59:21:b2: 69:38:85:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+MHjx/Da8SK/YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NTllNjk1ZjctMTk5YS00NTNlLWI5YjEtYjExYWZhODg3NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIkit9LlEioSBRx71tEvYPg8tarz5pLiEv2D wtkMtZxwEijJyjcNxQSMkOT2TER++6ok/t6Be/6kwFVk/iBVTRuYQ63IO7BNrNCy +2RE/CExpKxdSZQKdqNfP7pkLkN9Nu/CnfenlxGHXJDeKqMGkU2v9lRl7ycy38sF Zximi5tL8AHJqRmQSRTUHWfiDwuHoHgixKwIshHiCIlGEXTrufqk8nLaWdp+829Q ZJ15nRYzPJ56627aqiELcEbtoojo76VAScz6MR0zx1qzYQtJxszqlwYuEQbCSgEV 1FP/8Vnyg1+3uSpWZ1UHmgPu0/oONmbxKmMCzdA5mhKUg7gI3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiuAhY9y2ctqiKV74ecWqe62rNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFmZjU3NDEtYjNhMS0z ODYxLWI3MGQtMmMyYzMwMWU4ODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBNEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMOtNriBSFRVKQWQQnoCuiCJG7rSK/KSTSVLvlLdMVQh/z60NrzpJtp i8UJefvnuzmm4JQKsdhlI65b866yPv9k/hn94e94Tsy/8zfpjiD1I8MIQWVNwAUC VGn1StkpYDyDgsdIgasnoQv4MstCtEoN0MELeKTHjq9PWzRGWYz0zN6skUmZqGKx q5JYPXcUpPq/SUSrvO8qyyjGqXMeXBCTRHsiua5Pjytqip8NSFExQdJTxd5djEeF 78xssX4bAWfYsSLNLpaQm+vzVhxVFyATKopTMcM7zGfB9lNKzNa7AKsUyEO1jE7h bcwBGfMutd7frq2hKptJqlkhsmk4hYg= -----END CERTIFICATE-----Generated at Sun Apr 6 12:08:16 2025 by rpki-client