$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2968d2a-5f48-3fb4-8c7a-f324aff16c1c.roa File: e2968d2a-5f48-3fb4-8c7a-f324aff16c1c.roa (raw, json) Hash identifier: 2eqx6NbNI/p67/wOb7p1hAU1rNtFV0tTggWf9SQzXOo= Subject key identifier: B9:24:7D:FE:C9:0C:C3:EB:81:6C:3F:F0:DA:B2:49:00:44:5E:70:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43108042EB827419DE04670 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2968d2a-5f48-3fb4-8c7a-f324aff16c1c.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 76.142.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:08:04:2e:b8:27:41:9d:e0:46:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=9dd1e1c0-6fe7-4098-984a-a64b199f3992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:42:63:e7:2c:38:3e:28:ac:ea:27:e9:5f: d2:f0:dd:f0:92:ed:1c:0d:b1:d6:37:e8:b4:22:ab: 64:55:e8:8d:de:86:25:f3:dd:18:ae:99:cf:24:5e: b5:eb:58:fc:44:74:eb:45:ce:47:41:c9:73:a7:49: 2a:d4:84:9d:8c:6f:7f:52:b3:ae:ed:f1:92:2b:a8: 5e:53:c9:a1:e5:ff:0c:c3:9c:5d:fb:49:1e:9a:eb: fe:2d:8c:31:ba:3d:59:81:29:da:3e:c0:51:f6:a2: 76:a7:60:16:f2:d1:ac:19:3f:23:e7:1d:5d:1f:ca: 88:7d:f2:51:30:c7:91:52:dc:cd:b3:17:bd:7e:5d: 72:5c:c3:81:e3:7b:3d:e4:c2:36:83:17:f0:0d:28: 50:14:00:e6:9b:85:8b:50:e7:3a:93:2b:a3:05:de: 74:66:4b:83:9b:b0:4a:a3:1b:39:d0:99:56:c9:f5: c3:ec:41:ef:8b:d3:ac:24:7e:64:d8:37:50:8e:f9: dd:bc:da:91:8c:9a:a5:cf:4d:ea:1d:0f:e0:29:b4: a6:2b:a8:11:d7:f0:ab:3f:06:7f:ed:7a:06:07:87: be:26:4b:7b:59:1c:1b:36:7f:03:dc:00:f7:14:7b: f9:ba:c6:20:f9:89:46:6d:d3:a2:d5:d1:69:64:f3: ca:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:24:7D:FE:C9:0C:C3:EB:81:6C:3F:F0:DA:B2:49:00:44:5E:70:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2968d2a-5f48-3fb4-8c7a-f324aff16c1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.142.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3b:28:6f:ac:65:2b:42:f0:8a:0e:54:0a:89:4e:77:b4:b0: 65:58:0f:47:76:15:79:13:28:4c:f0:05:31:63:94:80:20:23: ae:78:c6:35:9c:c1:c2:bb:03:9f:84:11:d1:cf:fa:64:92:a9: c1:4c:33:2c:d4:4e:12:81:c8:53:81:c8:6c:4a:dc:03:bf:2c: b9:df:a4:d3:26:33:09:8b:37:54:f1:55:75:fc:18:5e:e7:ab: a3:7e:79:1a:a1:85:76:3b:67:6e:f6:1b:df:d1:67:ab:3d:e8: b5:4a:ab:a4:74:e6:67:c4:33:65:5e:a7:ca:32:1d:c2:97:fb: 27:1b:9e:1e:67:1e:b1:ab:3f:62:8d:f7:88:02:0a:80:b4:00: 5f:71:e6:2e:9d:70:c4:fc:1e:9a:77:51:f0:cc:c7:62:7a:a6: a4:b0:f4:e0:d6:f5:24:98:30:f8:79:66:67:b5:4b:f4:2a:cd: 68:6d:81:b1:54:eb:3d:a2:3f:76:cb:ce:de:b6:41:19:ec:e9: 5e:a1:76:17:e9:b3:0e:38:7d:57:d4:ce:7b:c7:b5:3b:3f:db: bb:f1:13:5d:0b:58:5c:49:b9:73:fb:c4:26:06:c4:89:c7:ec: 01:8d:06:60:9b:24:11:d7:38:89:bf:76:e3:56:b3:54:3d:8b: 92:c9:bd:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMQgELrgnQZ3gRnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OWRkMWUxYzAtNmZlNy00MDk4LTk4NGEtYTY0YjE5OWYzOTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0dCY+csOD4orOon6V/S8N3wku0cDbHWN+i0 IqtkVeiN3oYl890YrpnPJF6161j8RHTrRc5HQclzp0kq1ISdjG9/UrOu7fGSK6he U8mh5f8Mw5xd+0kemuv+LYwxuj1ZgSnaPsBR9qJ2p2AW8tGsGT8j5x1dH8qIffJR MMeRUtzNsxe9fl1yXMOB43s95MI2gxfwDShQFADmm4WLUOc6kyujBd50ZkuDm7BK oxs50JlWyfXD7EHvi9OsJH5k2DdQjvndvNqRjJqlz03qHQ/gKbSmK6gR1/CrPwZ/ 7XoGB4e+Jkt7WRwbNn8D3AD3FHv5usYg+YlGbdOi1dFpZPPKvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkkff7JDMPrgWw/8NqySQBEXnBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTI5NjhkMmEtNWY0OC0z ZmI0LThjN2EtZjMyNGFmZjE2YzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC87KG+sZStC8IoOVAqJTne0sGVYD0d2FXkTKEzwBTFjlIAgI654xjWc wcK7A5+EEdHP+mSSqcFMMyzUThKByFOByGxK3AO/LLnfpNMmMwmLN1TxVXX8GF7n q6N+eRqhhXY7Z272G9/RZ6s96LVKq6R05mfEM2Vep8oyHcKX+ycbnh5nHrGrP2KN 94gCCoC0AF9x5i6dcMT8Hpp3UfDMx2J6pqSw9ODW9SSYMPh5Zme1S/QqzWhtgbFU 6z2iP3bLzt62QRns6V6hdhfpsw44fVfUznvHtTs/27vxE10LWFxJuXP7xCYGxInH 7AGNBmCbJBHXOIm/duNWs1Q9i5LJvUA= -----END CERTIFICATE-----Generated at Tue Jun 3 04:59:40 2025 by rpki-client