$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfaf1167-a5cf-3971-b7f9-45a148daa068.roa File: cfaf1167-a5cf-3971-b7f9-45a148daa068.roa (raw, json) Hash identifier: 5HxVDz8JLVMHO53nl50aqDVErYtKyvknDetJEwwZRV0= Subject key identifier: 81:A3:98:7E:41:50:0B:8C:7A:1C:66:AD:1A:D1:2D:38:05:53:CE:E8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8C3CCBA888950907C1990 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfaf1167-a5cf-3971-b7f9-45a148daa068.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7015 IP address blocks: 76.24.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:c3:cc:ba:88:89:50:90:7c:19:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=4b6130e1-2ea3-43e1-8bd4-eb8cca7c8ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:69:95:37:de:58:f8:ea:85:86:03:28:c5:d4: 54:4f:f1:82:ca:f2:c3:6c:97:72:39:d9:43:9c:e9: 1b:b2:2f:ef:fc:9f:06:3f:74:6c:de:bc:fe:b0:36: 1b:eb:bc:21:70:63:97:31:c0:7c:79:1e:95:55:bc: d7:73:f5:0b:18:90:4f:e0:a9:43:48:68:3e:7b:a9: 21:d7:2a:14:dd:82:65:c6:47:af:73:6c:4f:9e:0b: 62:c0:08:70:9a:ea:2e:b0:8c:63:ad:c8:46:ee:79: 8e:c3:66:d7:c9:3a:e6:2d:af:eb:30:6f:1f:c0:e7: 41:a1:4f:7e:46:10:83:de:68:ff:07:ec:4e:83:f7: 92:a9:5b:28:39:93:ac:90:60:a6:87:ed:17:c7:f8: ce:76:2d:bf:e9:15:91:09:39:9d:e5:c4:c6:be:19: a3:f1:cb:5f:6e:fc:f0:82:3a:74:b3:ff:f0:23:47: 3a:93:73:bc:10:fc:be:be:4d:a6:cb:a1:ee:8f:b2: 5c:ed:0b:07:be:8e:eb:30:e5:a0:f8:09:5c:8f:4a: 36:14:2e:4c:1f:0c:8f:2a:f7:c0:1b:5e:45:e0:2a: 3c:83:97:41:7a:1f:79:1a:1d:65:18:5e:12:43:e3: d1:e6:96:aa:b8:55:e9:80:ec:d9:f5:e3:e2:70:34: b3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A3:98:7E:41:50:0B:8C:7A:1C:66:AD:1A:D1:2D:38:05:53:CE:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfaf1167-a5cf-3971-b7f9-45a148daa068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.24.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:e5:7f:b7:9c:b2:00:80:40:cb:77:97:38:95:b3:76:7b:f1: 99:44:64:7a:2b:04:8f:35:45:f8:35:e4:8b:9a:b9:29:3b:e5: 97:6e:8e:62:f5:0e:fc:01:ba:5a:2d:d3:f5:25:29:84:d3:44: 11:3b:85:22:2d:0b:eb:23:3f:0e:c4:84:c7:89:3d:0b:a2:6b: ca:9c:d1:ed:e6:1a:f6:d9:a1:6b:1e:70:7b:a4:73:d1:04:63: 45:6e:ae:2f:65:14:72:98:5c:7c:e9:1e:e8:f4:de:5d:8d:ca: 98:8e:3f:67:de:45:6a:c1:ae:5a:2b:c9:35:12:b7:7b:a2:53: a1:98:f6:3c:49:ef:5f:60:81:c5:3a:8c:bd:c3:40:de:b9:b7: 50:e4:e0:de:27:67:41:db:0e:05:d0:4f:99:f7:bd:5d:9a:ba: 5d:e7:22:21:05:4b:2b:1d:d9:b7:e8:61:6e:d1:e6:7f:ed:33: f3:5d:d8:39:58:5c:b0:08:79:82:5d:2e:9c:4c:62:77:0c:57: 85:02:97:f1:1e:53:17:f2:61:2e:c3:69:60:c6:85:d9:df:ae: d4:18:29:cf:1e:04:c7:fc:34:fa:7f:f5:56:ee:47:de:4d:25: 92:f6:13:b1:fc:31:65:49:f1:2c:24:e6:f3:53:3b:b7:e4:cb: 69:55:82:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+MPMuoiJUJB8GZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NGI2MTMwZTEtMmVhMy00M2UxLThiZDQtZWI4Y2NhN2M4ZWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWmVN95Y+OqFhgMoxdRUT/GCyvLDbJdyOdlD nOkbsi/v/J8GP3Rs3rz+sDYb67whcGOXMcB8eR6VVbzXc/ULGJBP4KlDSGg+e6kh 1yoU3YJlxkevc2xPngtiwAhwmuousIxjrchG7nmOw2bXyTrmLa/rMG8fwOdBoU9+ RhCD3mj/B+xOg/eSqVsoOZOskGCmh+0Xx/jOdi2/6RWRCTmd5cTGvhmj8ctfbvzw gjp0s//wI0c6k3O8EPy+vk2my6Huj7Jc7QsHvo7rMOWg+Alcj0o2FC5MHwyPKvfA G15F4Co8g5dBeh95Gh1lGF4SQ+PR5paquFXpgOzZ9ePicDSz0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGjmH5BUAuMehxmrRrRLTgFU87oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZhZjExNjctYTVjZi0z OTcxLWI3ZjktNDVhMTQ4ZGFhMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrlf7ecsgCAQMt3lziVs3Z78ZlEZHorBI81Rfg15IuauSk75ZdujmL1 DvwBulot0/UlKYTTRBE7hSItC+sjPw7EhMeJPQuia8qc0e3mGvbZoWsecHukc9EE Y0Vuri9lFHKYXHzpHuj03l2NypiOP2feRWrBrloryTUSt3uiU6GY9jxJ719ggcU6 jL3DQN65t1Dk4N4nZ0HbDgXQT5n3vV2aul3nIiEFSysd2bfoYW7R5n/tM/Nd2DlY XLAIeYJdLpxMYncMV4UCl/EeUxfyYS7DaWDGhdnfrtQYKc8eBMf8NPp/9VbuR95N JZL2E7H8MWVJ8Swk5vNTO7fky2lVgis= -----END CERTIFICATE-----Generated at Sun Apr 6 11:59:28 2025 by rpki-client