$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc997c3a-98a9-3fa6-b708-d4376662efb9.roa File: dc997c3a-98a9-3fa6-b708-d4376662efb9.roa (raw, json) Hash identifier: wmm8hgiV9SFoxmGqDZQL5wHqEDboRE5AXfQe+0oesU4= Subject key identifier: 96:5D:21:E0:EC:CB:FF:25:0D:1E:30:75:0D:75:4C:D5:08:0C:0D:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB14E8D52365ACEE9042500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc997c3a-98a9-3fa6-b708-d4376662efb9.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 76.16.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:4e:8d:52:36:5a:ce:e9:04:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=597f4060-e30d-415a-aaf2-e5f4ce32dede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:db:6e:42:ff:4d:35:18:b7:a2:31:55:62:08: 50:04:c4:20:84:ce:2b:8e:00:47:2b:1d:5b:c4:a3: d0:d0:03:68:ce:d1:cd:a0:f6:fb:03:db:ad:e7:9e: 89:18:6c:35:20:66:c3:f5:d9:e3:98:75:fd:cc:5d: 5f:b3:9f:18:a9:e6:b3:bb:08:a9:fc:4f:c7:83:95: 8e:f9:cf:b0:7b:b1:0a:c2:c5:cb:a2:d8:20:cf:a1: d0:37:4e:ce:bc:68:8a:76:32:ba:9c:31:d0:ad:e8: 73:0f:b7:46:bd:11:0f:d2:f6:1f:bb:7f:c7:ad:69: 4d:3a:f7:de:06:46:0c:69:d4:84:47:da:16:01:8c: 5d:ba:26:c7:4e:8a:88:c8:85:41:51:2a:64:79:99: 62:0c:b7:f1:61:96:75:f3:b1:a7:8b:07:27:85:2f: 85:ee:25:52:1f:2b:b0:ac:24:27:53:de:c6:47:84: bd:ad:e8:41:b0:19:14:71:26:6e:cb:80:1b:00:8b: 3b:a6:92:17:68:5a:64:e7:66:08:65:e4:0b:a3:7b: da:af:9c:7a:9e:df:c8:e0:1e:7a:17:89:47:7a:61: a0:5b:33:57:41:3e:c7:fe:09:a3:7b:b0:b4:93:cc: 27:64:c5:83:3f:13:67:90:b5:3b:04:f0:18:1a:7a: c6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:5D:21:E0:EC:CB:FF:25:0D:1E:30:75:0D:75:4C:D5:08:0C:0D:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc997c3a-98a9-3fa6-b708-d4376662efb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.16.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:26:c1:06:0b:b9:c6:52:22:fe:28:23:58:0b:7a:67:95:1e: 5b:68:79:76:0b:a8:ab:27:af:77:6a:67:79:c5:0b:97:2f:97: 41:00:db:64:57:c1:d8:e4:5e:97:fb:0c:96:58:fb:47:b9:85: 7a:8f:34:0e:97:24:b3:3f:c2:f5:96:33:94:89:8c:a8:7e:c7: f9:d8:8f:63:07:58:f1:cc:8b:b0:89:c1:4d:6c:1b:7f:bf:62: 6f:27:e2:3e:ad:b4:cb:dc:5e:a6:23:ee:76:cf:bc:ca:ce:52: 43:9d:3c:f4:e3:4f:37:e9:e4:07:8d:7b:6a:0b:d7:dd:42:42: 57:20:13:3e:d9:0d:7d:28:c4:72:71:e6:16:15:ba:96:d5:df: 10:c7:d0:95:7d:f3:67:4a:0f:92:8d:b5:90:d7:e0:42:a7:a4: 71:28:93:ad:71:36:fd:e3:42:25:a5:aa:e2:01:d3:aa:33:05: 96:65:e8:1b:76:8c:76:85:36:4e:b6:a2:44:37:17:f5:95:b9: e2:b2:57:cc:fd:dd:70:f6:a8:13:97:15:8f:61:03:24:7c:d0: d7:cd:ff:78:ce:a6:2f:14:a1:2e:e6:1f:ed:b9:4f:46:6c:f4: 2d:2d:d4:a7:19:ee:e0:5f:d4:cc:69:eb:d2:5c:06:97:8e:c1: 65:e5:7a:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssU6NUjZazukEJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NTk3ZjQwNjAtZTMwZC00MTVhLWFhZjItZTVmNGNlMzJkZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArttuQv9NNRi3ojFVYghQBMQghM4rjgBHKx1b xKPQ0ANoztHNoPb7A9ut556JGGw1IGbD9dnjmHX9zF1fs58Yqeazuwip/E/Hg5WO +c+we7EKwsXLotggz6HQN07OvGiKdjK6nDHQrehzD7dGvREP0vYfu3/HrWlNOvfe BkYMadSER9oWAYxduibHToqIyIVBUSpkeZliDLfxYZZ187GniwcnhS+F7iVSHyuw rCQnU97GR4S9rehBsBkUcSZuy4AbAIs7ppIXaFpk52YIZeQLo3var5x6nt/I4B56 F4lHemGgWzNXQT7H/gmje7C0k8wnZMWDPxNnkLU7BPAYGnrGqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZdIeDsy/8lDR4wdQ11TNUIDA0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGM5OTdjM2EtOThhOS0z ZmE2LWI3MDgtZDQzNzY2NjJlZmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYmwQYLucZSIv4oI1gLemeVHltoeXYLqKsnr3dqZ3nFC5cvl0EA22RX wdjkXpf7DJZY+0e5hXqPNA6XJLM/wvWWM5SJjKh+x/nYj2MHWPHMi7CJwU1sG3+/ Ym8n4j6ttMvcXqYj7nbPvMrOUkOdPPTjTzfp5AeNe2oL191CQlcgEz7ZDX0oxHJx 5hYVupbV3xDH0JV982dKD5KNtZDX4EKnpHEok61xNv3jQiWlquIB06ozBZZl6Bt2 jHaFNk62okQ3F/WVueKyV8z93XD2qBOXFY9hAyR80NfN/3jOpi8UoS7mH+25T0Zs 9C0t1KcZ7uBf1Mxp69JcBpeOwWXlet4= -----END CERTIFICATE-----Generated at Mon Apr 7 09:37:29 2025 by rpki-client