$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dece18aa-e5b4-3396-a1b1-d8d8783d6843.roa File: dece18aa-e5b4-3396-a1b1-d8d8783d6843.roa (raw, json) Hash identifier: lkPY+X0xFjMSWrLWAnQN2ggcgYyAP++1DPfSmglak5w= Subject key identifier: E4:9D:35:87:ED:2F:C9:9B:D4:2C:5F:EA:CA:76:DA:B3:B7:88:71:AD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB01E95733083F0B8318780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dece18aa-e5b4-3396-a1b1-d8d8783d6843.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 76.133.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:1e:95:73:30:83:f0:b8:31:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=2fb812e7-16db-4c99-bb56-91c7d44c7ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0c:36:14:1d:e0:ed:ba:69:9b:67:93:ae:29: 0c:e8:b8:19:4c:fc:7c:5f:7c:a7:82:dc:23:a9:46: 34:39:f2:e3:cf:a5:55:fb:96:e9:99:1e:7a:da:46: 17:fa:d2:f3:b9:c4:1f:6a:0b:9e:91:85:7b:64:5b: 23:38:dd:a7:11:9f:ee:43:ec:41:39:0a:72:51:36: 4d:fd:7f:a7:1b:9f:29:7e:f0:9b:a8:d5:b2:d0:a8: e2:6b:71:8e:65:74:f6:2b:be:05:d4:77:9d:90:06: cf:e7:6c:76:aa:97:6c:18:61:a3:29:ad:b8:54:f0: 9d:a2:71:48:13:9f:c4:08:4d:fe:ae:c5:97:61:63: 07:bf:ae:f1:3a:e0:46:fb:e6:24:e8:a5:bb:58:c8: 15:a9:32:09:1c:6e:75:86:7d:0d:46:42:c9:1a:d7: 47:8f:ce:0e:de:60:23:00:7e:a3:bb:45:62:08:95: 16:52:60:01:8b:0c:30:32:8a:2c:96:c4:f9:7f:8d: a2:11:c5:42:6c:93:18:61:a1:f6:5c:e4:c5:1e:09: b7:bc:40:58:fb:47:cd:09:f4:01:e7:a0:2c:a8:78: 2b:28:9d:98:81:ba:a9:b7:f3:8b:95:20:67:77:f6: 14:74:be:d2:ce:80:62:7c:c5:4c:f5:4d:75:ce:a4: 3f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9D:35:87:ED:2F:C9:9B:D4:2C:5F:EA:CA:76:DA:B3:B7:88:71:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dece18aa-e5b4-3396-a1b1-d8d8783d6843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.133.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:aa:8e:47:54:8b:33:62:68:56:74:9c:7d:02:ad:54:e6:98: fc:04:a4:47:f3:59:47:f7:26:32:b5:30:cc:25:61:31:23:fe: 6b:b5:94:21:c2:80:ee:a8:c3:48:48:2e:90:d7:43:39:de:f1: 1e:01:cb:dc:96:e1:64:e8:c2:72:72:97:2d:9d:7d:f6:4f:0c: 6d:bc:14:32:99:78:b0:c2:a8:9a:53:fe:7b:ec:a4:e7:51:58: ff:f9:ae:c3:8e:e1:80:f7:35:da:5c:c1:5a:1c:1a:a2:08:ad: 73:db:0d:93:d4:36:fd:c5:a7:b4:6f:29:87:0b:d3:71:48:d4: 87:cb:c2:84:4d:b9:7d:13:21:af:b5:0f:8c:47:89:44:17:f4: 5e:44:e9:0d:fa:29:23:45:b7:bf:ff:fa:e5:bb:6c:b6:a3:d2: 45:c6:6f:8b:16:a7:40:81:b5:eb:1f:8e:fa:bf:08:f7:c7:f7: eb:8f:f8:6c:15:41:92:9a:7a:15:1f:aa:eb:65:48:bb:b7:a2: b1:69:b5:9e:ca:ce:36:db:32:cb:8a:db:08:47:81:2b:47:e7: 63:f0:42:c8:c0:b4:d7:45:c1:59:c1:4e:7c:80:0d:18:a6:b9: 86:51:34:92:23:31:3e:39:2e:4f:f3:c0:36:74:3c:b5:06:a5: 60:fb:6b:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssB6VczCD8Lgxh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MmZiODEyZTctMTZkYi00Yzk5LWJiNTYtOTFjN2Q0NGM3YWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQw2FB3g7bppm2eTrikM6LgZTPx8X3yngtwj qUY0OfLjz6VV+5bpmR562kYX+tLzucQfaguekYV7ZFsjON2nEZ/uQ+xBOQpyUTZN /X+nG58pfvCbqNWy0Kjia3GOZXT2K74F1HedkAbP52x2qpdsGGGjKa24VPCdonFI E5/ECE3+rsWXYWMHv67xOuBG++Yk6KW7WMgVqTIJHG51hn0NRkLJGtdHj84O3mAj AH6ju0ViCJUWUmABiwwwMooslsT5f42iEcVCbJMYYaH2XOTFHgm3vEBY+0fNCfQB 56AsqHgrKJ2Ygbqpt/OLlSBnd/YUdL7SzoBifMVM9U11zqQ/8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSdNYftL8mb1Cxf6sp22rO3iHGtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGVjZTE4YWEtZTViNC0z Mzk2LWExYjEtZDhkODc4M2Q2ODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIWOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANGqjkdUizNiaFZ0nH0CrVTmmPwEpEfzWUf3JjK1MMwlYTEj/mu1lCHC gO6ow0hILpDXQzne8R4By9yW4WTownJyly2dffZPDG28FDKZeLDCqJpT/nvspOdR WP/5rsOO4YD3NdpcwVocGqIIrXPbDZPUNv3Fp7RvKYcL03FI1IfLwoRNuX0TIa+1 D4xHiUQX9F5E6Q36KSNFt7//+uW7bLaj0kXGb4sWp0CBtesfjvq/CPfH9+uP+GwV QZKaehUfqutlSLu3orFptZ7KzjbbMsuK2whHgStH52PwQsjAtNdFwVnBTnyADRim uYZRNJIjMT45Lk/zwDZ0PLUGpWD7a8E= -----END CERTIFICATE-----Generated at Mon Apr 7 06:30:17 2025 by rpki-client