$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9da52a2-82b0-39a6-b73d-8f54820b58f2.roa File: c9da52a2-82b0-39a6-b73d-8f54820b58f2.roa (raw, json) Hash identifier: Nb4NvkVXhX5lVuCbrjHeonD2FyJr/B/d9nmszMeTwr8= Subject key identifier: CB:6A:7E:84:A0:D2:CE:80:04:A2:37:D3:8F:EF:91:D4:B6:93:F0:AE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6B9A03BA50A8FB0ED19D40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9da52a2-82b0-39a6-b73d-8f54820b58f2.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 76.129.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:9a:03:ba:50:a8:fb:0e:d1:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=0cdb9581-8c07-4cd5-8b4b-58f083d14dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c0:36:b4:c8:22:b2:5d:7b:10:11:d1:1e:2a: 19:88:4f:b9:c6:a2:d1:c6:ec:87:c9:9f:69:0f:b1: 44:b3:95:04:f9:57:bf:3f:b7:fa:ba:01:ca:4d:b2: ea:1a:46:e3:7c:55:2c:5a:16:b5:f3:bd:d4:9a:04: 8b:bc:b8:cc:e1:4f:8b:b5:a0:58:e8:f4:56:59:10: c7:f9:58:bc:44:e9:a4:cb:b5:34:10:1a:56:2e:f7: 91:f1:eb:8b:3f:d7:a0:aa:f5:d4:42:1a:a3:10:7f: cd:68:1c:c2:81:39:91:41:85:74:1e:5c:10:8c:fd: 30:e9:28:d7:27:8a:25:f0:94:c8:b0:7d:9c:84:83: 26:b8:7c:d5:60:1e:d3:23:89:c2:10:02:00:0e:26: e1:6e:a6:80:8e:16:0f:72:d0:10:be:37:6f:a1:3e: 34:df:b2:71:8c:b4:59:0b:15:43:d6:27:5a:fb:30: 77:a0:fa:1d:93:89:6c:b7:7b:be:13:22:db:e3:50: 76:2e:82:49:ec:d4:6e:47:05:5a:c1:7a:67:c4:f0: 7a:56:0b:d7:15:b8:8f:f8:33:53:7a:18:d7:a4:bd: a3:e7:19:8e:ca:54:38:97:ab:b5:c0:a3:8d:19:a3: 2e:8b:d6:12:f2:2e:bf:54:13:76:aa:d3:58:e1:35: 65:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6A:7E:84:A0:D2:CE:80:04:A2:37:D3:8F:EF:91:D4:B6:93:F0:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9da52a2-82b0-39a6-b73d-8f54820b58f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.129.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f0:13:c5:db:b2:bb:a1:99:40:b0:c4:e5:a1:14:30:a2:61: 28:99:20:50:7c:2c:1f:fd:e3:e5:ff:47:cd:7f:03:fa:a3:00: 3e:79:37:ee:eb:7f:b5:8a:23:35:bf:33:a9:22:de:12:cb:48: 7c:2a:0a:55:88:7d:56:74:bd:f3:e3:f1:1b:7f:26:53:e5:b2: 4f:dd:0c:5c:86:f4:a4:ea:20:fc:33:da:95:7a:59:55:21:5b: 2d:fb:32:77:44:9b:88:9b:e5:52:c9:d3:98:7c:a8:b8:ed:ff: cb:bd:41:fc:5f:5d:8c:e2:aa:93:48:4f:a8:9e:75:93:16:79: 6e:1a:d2:17:f5:17:45:e6:bd:50:34:ab:1e:05:68:2d:9b:12: d3:07:a1:79:9d:fe:0b:9a:d4:f3:a4:6c:32:44:bd:55:e6:cf: d9:50:25:15:d4:bc:ff:b6:50:af:2a:4d:c1:86:e5:a6:5c:89: 21:bd:2c:84:06:87:95:81:b2:f3:a8:ac:3a:6e:50:c7:9f:93: 2a:37:2d:65:d0:f0:af:93:65:64:0c:db:a8:b1:14:75:01:d4: 9a:38:3a:1e:8d:14:a4:65:45:04:3d:92:76:d3:d3:b7:80:4c: 72:c9:99:dd:f4:38:4c:1f:cd:a6:bf:7e:48:b2:dd:98:be:65: 28:6b:42:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea5oDulCo+w7RnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MGNkYjk1ODEtOGMwNy00Y2Q1LThiNGItNThmMDgzZDE0ZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcA2tMgisl17EBHRHioZiE+5xqLRxuyHyZ9p D7FEs5UE+Ve/P7f6ugHKTbLqGkbjfFUsWha1873UmgSLvLjM4U+LtaBY6PRWWRDH +Vi8ROmky7U0EBpWLveR8euLP9egqvXUQhqjEH/NaBzCgTmRQYV0HlwQjP0w6SjX J4ol8JTIsH2chIMmuHzVYB7TI4nCEAIADibhbqaAjhYPctAQvjdvoT4037JxjLRZ CxVD1ida+zB3oPodk4lst3u+EyLb41B2LoJJ7NRuRwVawXpnxPB6VgvXFbiP+DNT ehjXpL2j5xmOylQ4l6u1wKONGaMui9YS8i6/VBN2qtNY4TVlVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtqfoSg0s6ABKI304/vkdS2k/CuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzlkYTUyYTItODJiMC0z OWE2LWI3M2QtOGY1NDgyMGI1OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIGiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/wE8XbsruhmUCwxOWhFDCiYSiZIFB8LB/94+X/R81/A/qjAD55N+7r f7WKIzW/M6ki3hLLSHwqClWIfVZ0vfPj8Rt/JlPlsk/dDFyG9KTqIPwz2pV6WVUh Wy37MndEm4ib5VLJ05h8qLjt/8u9QfxfXYziqpNIT6iedZMWeW4a0hf1F0XmvVA0 qx4FaC2bEtMHoXmd/gua1POkbDJEvVXmz9lQJRXUvP+2UK8qTcGG5aZciSG9LIQG h5WBsvOorDpuUMefkyo3LWXQ8K+TZWQM26ixFHUB1Jo4Oh6NFKRlRQQ9knbT07eA THLJmd30OEwfzaa/fkiy3Zi+ZShrQhM= -----END CERTIFICATE-----Generated at Mon Apr 7 06:01:59 2025 by rpki-client