$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbab1ac3-2c32-31e5-ace0-4f1b5fd9cc56.roa File: cbab1ac3-2c32-31e5-ace0-4f1b5fd9cc56.roa (raw, json) Hash identifier: dS7Lk53gqEGyAAjpLyhBeg3Ed6DuLgFdV6y2XT7dV5Q= Subject key identifier: 35:21:D9:53:15:6D:02:7C:F4:EB:B5:1E:F6:8F:F4:A6:57:21:AB:6B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAEB4577011710E6C1FC300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbab1ac3-2c32-31e5-ace0-4f1b5fd9cc56.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33660 IP address blocks: 76.129.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:b4:57:70:11:71:0e:6c:1f:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=0686bf93-efb2-4a63-ac28-fb3bf2e6b97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:a0:a6:6f:9f:79:5a:63:e1:4e:34:f0:cd: 41:5e:32:05:04:43:03:16:c4:6b:70:61:22:a6:a4: 38:92:97:69:25:23:78:e4:da:95:53:73:c1:99:bd: 34:00:9a:cf:d1:46:09:32:30:78:58:5c:88:4d:8b: 54:66:17:cd:1e:16:15:fc:ef:ab:fa:6c:68:c6:1f: 52:16:6b:b2:25:c8:be:52:a2:25:8e:4d:be:0d:89: 65:e4:19:a5:0c:cb:88:1d:50:22:77:cd:3c:ea:82: 4d:dc:43:1e:24:70:40:ac:48:e2:ff:e8:53:fa:8d: 1b:db:b4:6e:32:21:48:bd:39:4b:3a:c9:42:47:a4: 9d:65:35:8f:32:9e:68:c5:5b:cf:f6:b0:d5:c2:bb: eb:5e:9b:93:a1:67:ef:d0:cb:cf:4d:5b:ef:ba:e0: 69:34:c8:72:d7:18:43:ec:6a:65:ed:2c:38:0f:8d: fd:4d:73:bd:33:b9:f1:f3:db:c4:43:cc:c5:6e:c6: e1:0b:3f:da:14:d8:93:33:77:68:e4:d9:27:6e:db: 91:2c:96:7c:6f:8b:f4:12:86:e9:df:05:22:6a:26: 11:a5:00:28:95:70:a5:d7:1a:35:ca:ad:66:ae:76: 43:15:be:15:90:64:b8:bb:3c:3f:f3:5e:3f:a6:b0: 83:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:21:D9:53:15:6D:02:7C:F4:EB:B5:1E:F6:8F:F4:A6:57:21:AB:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbab1ac3-2c32-31e5-ace0-4f1b5fd9cc56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.129.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:04:d0:6f:4c:1b:fa:40:08:26:02:9a:67:14:cf:35:69:12: 97:d0:9d:61:18:97:73:24:59:f2:68:40:33:70:65:8e:35:09: da:22:12:d5:d0:db:12:f1:2e:aa:e9:8f:0b:3d:33:39:08:29: f2:a5:88:64:74:e2:5e:3f:99:de:ae:9a:bf:2d:dc:c5:f2:70: c0:85:94:fa:1c:f0:21:7c:fe:57:62:66:26:bd:15:55:4c:6c: 44:bc:9e:02:84:cd:ba:7d:eb:6a:0a:cc:af:fd:09:8a:ee:08: 35:88:09:66:8a:69:3b:63:0e:82:cc:e1:07:70:63:0d:61:3c: a5:37:9f:02:c6:2b:8e:31:ca:2d:ea:7b:6e:06:1d:a8:f9:ee: 7a:63:db:9c:b7:f8:e6:8a:47:98:c1:eb:be:51:ee:a6:e1:27: 91:c2:d5:03:fc:42:a1:da:e4:a8:8b:84:00:48:83:41:82:c9: 82:eb:b6:1e:4d:e2:dc:67:3f:52:c6:6d:b8:09:7a:6e:44:37: 12:6c:40:38:3e:e3:ee:c0:ba:7b:c0:79:50:38:80:79:26:8e: a9:3f:69:a0:8c:bb:07:7b:93:02:96:ca:5c:f2:d4:f6:70:5d: ec:9a:e6:3d:41:1a:4a:c8:16:b8:06:04:c1:8e:cc:ef:6d:63: 69:e0:11:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrrRXcBFxDmwfwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MDY4NmJmOTMtZWZiMi00YTYzLWFjMjgtZmIzYmYyZTZiOTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6+gpm+feVpj4U408M1BXjIFBEMDFsRrcGEi pqQ4kpdpJSN45NqVU3PBmb00AJrP0UYJMjB4WFyITYtUZhfNHhYV/O+r+mxoxh9S FmuyJci+UqIljk2+DYll5BmlDMuIHVAid8086oJN3EMeJHBArEji/+hT+o0b27Ru MiFIvTlLOslCR6SdZTWPMp5oxVvP9rDVwrvrXpuToWfv0MvPTVvvuuBpNMhy1xhD 7Gpl7Sw4D439TXO9M7nx89vEQ8zFbsbhCz/aFNiTM3do5NknbtuRLJZ8b4v0Eobp 3wUiaiYRpQAolXCl1xo1yq1mrnZDFb4VkGS4uzw/814/prCDswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUh2VMVbQJ89Ou1HvaP9KZXIatrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2JhYjFhYzMtMmMzMi0z MWU1LWFjZTAtNGYxYjVmZDljYzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkE0G9MG/pACCYCmmcUzzVpEpfQnWEYl3MkWfJoQDNwZY41CdoiEtXQ 2xLxLqrpjws9MzkIKfKliGR04l4/md6umr8t3MXycMCFlPoc8CF8/ldiZia9FVVM bES8ngKEzbp962oKzK/9CYruCDWICWaKaTtjDoLM4QdwYw1hPKU3nwLGK44xyi3q e24GHaj57npj25y3+OaKR5jB675R7qbhJ5HC1QP8QqHa5KiLhABIg0GCyYLrth5N 4txnP1LGbbgJem5ENxJsQDg+4+7AunvAeVA4gHkmjqk/aaCMuwd7kwKWylzy1PZw Xeya5j1BGkrIFrgGBMGOzO9tY2ngEXY= -----END CERTIFICATE-----Generated at Mon Apr 7 05:59:14 2025 by rpki-client