$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d06c3503-aa59-33ed-9caa-124017c0f93b.roa File: d06c3503-aa59-33ed-9caa-124017c0f93b.roa (raw, json) Hash identifier: HHkaVetycBdm1Jm6eVLHkK8P0KexuXqlnneai1PcNeU= Subject key identifier: 1A:5C:9F:87:46:14:41:64:F1:64:7E:38:66:3B:A2:4C:0B:A6:69:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F22C52F2E75120F3A94EC0E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d06c3503-aa59-33ed-9caa-124017c0f93b.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 22258 IP address blocks: 75.66.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:52:f2:e7:51:20:f3:a9:4e:c0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=0ceead3a-276b-4493-8490-b7f55671127c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d7:09:05:39:e8:57:46:4a:48:96:2c:00:10: d0:01:dd:44:3d:a3:82:02:f5:7b:3d:16:cf:50:1f: 38:05:f7:d9:cf:41:69:1e:ab:d7:04:56:ec:18:e9: ef:9c:18:d5:cb:8e:4e:04:3a:9e:d5:0f:db:a7:98: f0:70:fd:71:a8:7b:28:80:fa:18:e7:9b:0c:0f:25: 30:bf:9a:02:22:d4:29:c3:4e:d1:3b:a2:9b:3e:32: 64:b6:80:cb:12:65:08:a9:84:5d:cf:9a:fd:b5:78: b0:71:ce:3e:09:48:d5:40:52:39:d5:a3:25:80:46: b0:8f:e4:b6:df:0e:1c:ba:89:9f:b6:71:a6:ad:ef: 7b:3c:13:0b:bc:54:30:9b:ca:25:be:a6:d9:8f:42: 06:8c:ea:88:af:e9:34:eb:16:cf:ce:f3:f2:29:a3: b7:8a:d3:a5:3b:f7:03:cf:58:5b:70:ca:a1:b3:6b: 1e:c9:54:9f:b5:04:7b:d8:05:57:e9:6d:17:ed:43: 84:a1:a5:30:ed:32:35:04:0c:1c:be:e5:8c:29:91: 7a:2c:5b:4e:af:cf:f9:c1:0a:bd:a1:cf:1b:6c:05: 3b:15:3c:82:b1:e0:d9:81:02:8f:87:d7:0d:ac:6f: b4:f3:6c:0c:71:5d:e1:fb:1e:29:1b:10:b0:6b:ba: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5C:9F:87:46:14:41:64:F1:64:7E:38:66:3B:A2:4C:0B:A6:69:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d06c3503-aa59-33ed-9caa-124017c0f93b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 75.66.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:13:b6:01:83:62:13:8c:f0:45:8a:33:00:64:fe:aa:b9:f5: c7:3a:bf:1a:e5:98:e0:b2:84:0a:c5:ab:47:ef:60:25:f0:2a: 88:63:0d:86:57:55:49:6f:a9:d0:fb:2e:78:25:3a:13:28:1d: 04:4f:08:85:41:d6:3e:16:07:b7:22:29:73:d2:0d:db:c4:5e: 58:5a:c5:3c:1d:ec:88:23:16:98:3c:a2:ba:2d:1e:f0:7a:c0: 6b:07:90:2f:f9:02:e5:e7:4d:64:9c:11:1a:77:02:79:1f:31: c8:2e:c3:52:e2:8e:5d:0a:97:43:0a:80:72:2c:bd:b5:1b:e4: 76:d6:05:88:a5:f4:e4:f2:82:db:c0:cb:4c:f0:d0:1b:c1:b5: d7:5f:67:19:a1:11:28:ec:a7:6a:8b:67:6f:f0:36:ba:cb:3d: 4a:2a:fb:67:ca:aa:b3:9f:ce:02:dd:19:6b:dd:c8:77:a7:30: 3f:95:d7:6f:0d:24:2a:dc:a5:44:3a:a1:8b:b6:c2:17:df:df: 65:98:0a:cd:22:5d:f9:57:0f:ee:08:1e:25:9d:5c:82:96:ff: 48:c4:55:40:fe:5c:fe:94:90:45:cc:92:ee:52:f4:df:a2:b8: 80:e0:9a:7b:6d:cb:40:34:e6:7b:15:e8:01:e3:48:4d:07:8d: 4d:50:1a:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLFLy51Eg86lOwOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk MGNlZWFkM2EtMjc2Yi00NDkzLTg0OTAtYjdmNTU2NzExMjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotcJBTnoV0ZKSJYsABDQAd1EPaOCAvV7PRbP UB84BffZz0FpHqvXBFbsGOnvnBjVy45OBDqe1Q/bp5jwcP1xqHsogPoY55sMDyUw v5oCItQpw07RO6KbPjJktoDLEmUIqYRdz5r9tXiwcc4+CUjVQFI51aMlgEawj+S2 3w4cuomftnGmre97PBMLvFQwm8olvqbZj0IGjOqIr+k06xbPzvPyKaO3itOlO/cD z1hbcMqhs2seyVSftQR72AVX6W0X7UOEoaUw7TI1BAwcvuWMKZF6LFtOr8/5wQq9 oc8bbAU7FTyCseDZgQKPh9cNrG+082wMcV3h+x4pGxCwa7oaMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpcn4dGFEFk8WR+OGY7okwLpmkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDA2YzM1MDMtYWE1OS0z M2VkLTljYWEtMTI0MDE3YzBmOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS0IgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQTtgGDYhOM8EWKMwBk/qq59cc6vxrlmOCyhArFq0fvYCXwKohjDYZX VUlvqdD7LnglOhMoHQRPCIVB1j4WB7ciKXPSDdvEXlhaxTwd7IgjFpg8orotHvB6 wGsHkC/5AuXnTWScERp3AnkfMcguw1Lijl0Kl0MKgHIsvbUb5HbWBYil9OTygtvA y0zw0BvBtddfZxmhESjsp2qLZ2/wNrrLPUoq+2fKqrOfzgLdGWvdyHenMD+V128N JCrcpUQ6oYu2whff32WYCs0iXflXD+4IHiWdXIKW/0jEVUD+XP6UkEXMku5S9N+i uIDgmntty0A05nsV6AHjSE0HjU1QGoc= -----END CERTIFICATE-----Generated at Mon Apr 7 06:14:49 2025 by rpki-client