$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdd0b923-ff0f-339c-84ff-d9c4e633e806.roa File: cdd0b923-ff0f-339c-84ff-d9c4e633e806.roa (raw, json) Hash identifier: qw5tlO9M/D1Yowtfdw0clLQ/iBRIGc6/ujZ50wxn0ng= Subject key identifier: 79:A1:56:4D:43:66:1C:0E:00:F0:D1:54:EF:C8:6F:94:16:16:B8:4A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F22C19EB0A4599B452AFBCE0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdd0b923-ff0f-339c-84ff-d9c4e633e806.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 22258 IP address blocks: 76.138.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:19:eb:0a:45:99:b4:52:af:bc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=5e216182-84f5-484f-b6e9-4f214f7e5ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:d4:3e:0f:e4:0e:0b:51:54:30:83:2d:67: 87:da:dc:b9:83:f2:d6:54:31:bf:a5:c6:04:c4:11: 3f:35:49:12:c1:d3:9f:f8:98:63:95:87:9a:c6:be: ab:8a:38:11:c7:4b:0b:70:18:10:e7:6f:f1:40:de: 8a:0b:3c:09:fc:ce:b7:91:9a:aa:a3:c9:59:67:7c: 60:a2:0a:ac:30:13:db:7d:3d:1f:ca:b9:c1:f1:e4: 0a:91:d1:38:e4:71:22:ac:bf:9e:26:6e:a2:bc:ba: 56:fa:c0:e6:c6:04:a5:a1:da:06:4d:9f:47:8e:ea: b8:04:f9:c7:13:62:27:32:3b:b1:00:ec:83:c6:6f: 8e:d6:25:bb:9c:5e:41:0e:5f:ef:4f:3b:f8:3d:91: 3c:f7:14:44:65:16:20:4c:37:1a:ef:9a:f5:08:61: 94:fb:ed:d4:76:ad:d9:b6:fc:f0:17:fb:00:e9:7b: 84:7e:ba:f6:34:03:64:86:9e:24:4a:de:ba:95:6c: 17:d4:aa:f9:44:08:03:d8:60:58:a8:80:1c:36:85: 0c:c8:34:c7:41:c0:85:b7:75:07:fc:52:0c:87:76: 5d:ef:09:50:cd:07:8c:53:66:8c:c4:cf:3f:4c:e1: 1b:12:91:c1:6b:0a:64:47:11:49:27:2b:2d:3e:94: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A1:56:4D:43:66:1C:0E:00:F0:D1:54:EF:C8:6F:94:16:16:B8:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdd0b923-ff0f-339c-84ff-d9c4e633e806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.138.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c6:db:91:eb:ee:6d:45:e6:e6:d4:ea:89:8b:48:c9:13:96: fb:a7:97:b5:37:12:58:c9:7e:b3:7b:40:5f:e3:6b:ea:f6:da: 4d:34:c9:2c:c0:16:54:b2:9f:58:53:c0:13:87:93:bb:b9:0a: ac:49:80:64:e2:8c:9b:22:93:c5:3d:44:7e:ff:50:ce:6f:bc: e1:27:be:0d:84:ae:f9:2a:e9:67:2e:5b:27:5f:64:2b:2b:59: fe:58:90:b0:be:a0:20:62:52:b0:6c:d7:b5:40:98:ff:01:87: e3:a8:0d:48:54:52:ec:33:01:7f:de:9e:c3:cd:1c:b1:06:1a: a0:ad:4a:e4:05:f5:18:a2:60:15:68:e1:c1:54:8d:59:23:42: 1b:3c:1b:79:1b:4a:99:0c:70:3b:c8:5b:07:06:03:9d:3d:3b: e2:5d:91:75:53:b1:a1:55:d0:b4:2d:77:a2:b6:8e:9d:62:ab: 30:ea:9d:01:60:1a:f0:81:e5:cc:20:cf:ce:f8:59:85:29:e6: dc:10:c6:73:6c:63:05:d4:1a:cc:a6:9d:26:3b:ec:b6:e8:5a: c6:7f:69:6f:c3:83:7e:dd:65:68:79:0a:b5:0c:00:b2:6d:5b: 55:ef:90:1c:9d:5a:79:25:72:59:8f:cf:5b:63:d3:6d:64:83: 04:45:bd:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLBnrCkWZtFKvvOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NWUyMTYxODItODRmNS00ODRmLWI2ZTktNGYyMTRmN2U1YWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdzUPg/kDgtRVDCDLWeH2ty5g/LWVDG/pcYE xBE/NUkSwdOf+JhjlYeaxr6rijgRx0sLcBgQ52/xQN6KCzwJ/M63kZqqo8lZZ3xg ogqsMBPbfT0fyrnB8eQKkdE45HEirL+eJm6ivLpW+sDmxgSlodoGTZ9Hjuq4BPnH E2InMjuxAOyDxm+O1iW7nF5BDl/vTzv4PZE89xREZRYgTDca75r1CGGU++3Udq3Z tvzwF/sA6XuEfrr2NANkhp4kSt66lWwX1Kr5RAgD2GBYqIAcNoUMyDTHQcCFt3UH /FIMh3Zd7wlQzQeMU2aMxM8/TOEbEpHBawpkRxFJJystPpSQhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmhVk1DZhwOAPDRVO/Ib5QWFrhKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2RkMGI5MjMtZmYwZi0z MzljLTg0ZmYtZDljNGU2MzNlODA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIo2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfG25Hr7m1F5ubU6omLSMkTlvunl7U3EljJfrN7QF/ja+r22k00ySzA FlSyn1hTwBOHk7u5CqxJgGTijJsik8U9RH7/UM5vvOEnvg2Ervkq6WcuWydfZCsr Wf5YkLC+oCBiUrBs17VAmP8Bh+OoDUhUUuwzAX/ensPNHLEGGqCtSuQF9RiiYBVo 4cFUjVkjQhs8G3kbSpkMcDvIWwcGA509O+JdkXVTsaFV0LQtd6K2jp1iqzDqnQFg GvCB5cwgz874WYUp5twQxnNsYwXUGsymnSY77LboWsZ/aW/Dg37dZWh5CrUMALJt W1XvkBydWnklclmPz1tj021kgwRFvfk= -----END CERTIFICATE-----Generated at Mon Apr 7 06:03:23 2025 by rpki-client