$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e649e32e-424f-328b-bcee-fa316d7c5af1.roa File: e649e32e-424f-328b-bcee-fa316d7c5af1.roa (raw, json) Hash identifier: wmpKpjB+n9r0O6lGhb9WCSl6mphGcoZjDWIrWwxSY7U= Subject key identifier: 21:ED:EB:A4:1C:41:8A:E8:B5:CA:48:BF:AC:26:E2:1A:CD:2D:87:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8437D371E963FE16EBD40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e649e32e-424f-328b-bcee-fa316d7c5af1.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 76.105.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:43:7d:37:1e:96:3f:e1:6e:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=59556b70-2292-44a2-bcfb-72e064ded62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:40:88:cd:63:79:04:fe:73:41:2a:ff:54:0d: 26:ec:58:8d:e7:6a:c5:08:d1:4e:39:65:e5:d1:69: 4f:54:aa:c7:ae:f3:24:90:2b:7a:d6:21:ac:8c:8c: 55:83:c0:db:a3:e2:da:66:42:04:de:fa:cb:a2:60: 7f:67:98:0f:d3:43:ed:75:be:de:dd:4d:06:93:e1: b1:54:03:76:2b:ee:13:6b:84:a9:92:56:e7:19:a7: 7a:5e:fc:ad:7c:60:aa:56:03:24:99:ef:81:ff:a7: 78:15:39:a0:4e:50:3c:de:8c:46:8e:47:76:8c:e4: 7c:42:22:d3:ce:5c:9f:3c:20:3b:be:3f:2b:0b:68: 0d:2d:dd:cd:56:a6:fb:70:83:0f:c2:45:b6:21:6e: 6e:e5:bf:28:26:09:86:5a:ed:55:39:58:d3:69:9b: 8f:be:56:be:74:4d:22:5d:6b:2d:11:a9:89:3c:7c: 0c:9e:a6:b0:26:c3:ef:7a:59:37:2c:1c:2c:0b:3e: 02:fb:3c:53:92:14:3a:27:eb:f4:34:28:a7:c3:87: a2:90:20:4d:d5:49:96:c4:69:70:d3:dd:20:89:cb: 47:86:45:a2:7f:b0:1d:b8:c5:3b:56:7c:6c:a1:7a: b6:d5:db:48:4c:3a:41:f7:8d:1b:47:a5:01:e2:4b: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:ED:EB:A4:1C:41:8A:E8:B5:CA:48:BF:AC:26:E2:1A:CD:2D:87:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e649e32e-424f-328b-bcee-fa316d7c5af1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.105.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:19:ad:7c:b0:7e:6b:74:c5:e4:16:e5:f0:7d:c2:b1:d6:ba: 25:03:52:c2:f6:89:07:57:29:af:91:85:33:59:18:25:3d:4b: 6a:8d:c7:50:01:53:0e:26:f3:9a:5c:14:c5:62:4e:0b:9a:82: c9:a3:f4:e2:3f:8d:14:29:e2:eb:60:93:4b:7a:dd:10:f5:0f: 75:0b:ce:d7:a4:35:a9:cf:22:3c:17:29:c5:1c:8d:41:02:21: fc:6c:a8:01:36:c7:cd:0b:56:fc:3b:4e:c2:e6:1b:84:3b:fc: 8b:5c:a9:47:6d:48:47:04:82:8e:2e:62:7d:08:43:44:ec:8d: 73:90:e8:f1:18:7f:42:1b:14:76:ef:26:39:3e:94:2c:52:1d: d3:94:b4:eb:00:6c:77:4c:8a:33:ee:8f:ec:d2:a4:09:ad:7e: 6f:86:7d:6a:5c:cc:47:9a:c6:87:9a:c8:54:57:99:aa:30:b7: 91:0d:53:61:7d:eb:b3:c8:72:99:bf:55:18:34:16:d6:15:3a: 94:cd:5d:dc:56:1c:5c:ef:a6:7b:a5:45:00:eb:49:11:26:fa: 6a:0c:12:97:40:5d:fe:c6:15:b9:39:4e:d6:8c:29:c2:39:93: c4:e1:1f:8c:5e:c3:50:27:10:f6:02:c9:f1:b6:2c:2f:78:64: e7:59:b8:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+EN9Nx6WP+FuvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NTk1NTZiNzAtMjI5Mi00NGEyLWJjZmItNzJlMDY0ZGVkNjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkECIzWN5BP5zQSr/VA0m7FiN52rFCNFOOWXl 0WlPVKrHrvMkkCt61iGsjIxVg8Dbo+LaZkIE3vrLomB/Z5gP00Ptdb7e3U0Gk+Gx VAN2K+4Ta4SpklbnGad6XvytfGCqVgMkme+B/6d4FTmgTlA83oxGjkd2jOR8QiLT zlyfPCA7vj8rC2gNLd3NVqb7cIMPwkW2IW5u5b8oJgmGWu1VOVjTaZuPvla+dE0i XWstEamJPHwMnqawJsPvelk3LBwsCz4C+zxTkhQ6J+v0NCinw4eikCBN1UmWxGlw 090gictHhkWif7AduMU7VnxsoXq21dtITDpB940bR6UB4kuUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHt66QcQYrotcpIv6wm4hrNLYdMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTY0OWUzMmUtNDI0Zi0z MjhiLWJjZWUtZmEzMTZkN2M1YWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTGmKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwZrXywfmt0xeQW5fB9wrHWuiUDUsL2iQdXKa+RhTNZGCU9S2qNx1AB Uw4m85pcFMViTguagsmj9OI/jRQp4utgk0t63RD1D3ULztekNanPIjwXKcUcjUEC IfxsqAE2x80LVvw7TsLmG4Q7/ItcqUdtSEcEgo4uYn0IQ0TsjXOQ6PEYf0IbFHbv Jjk+lCxSHdOUtOsAbHdMijPuj+zSpAmtfm+GfWpczEeaxoeayFRXmaowt5ENU2F9 67PIcpm/VRg0FtYVOpTNXdxWHFzvpnulRQDrSREm+moMEpdAXf7GFbk5TtaMKcI5 k8ThH4xew1AnEPYCyfG2LC94ZOdZuD4= -----END CERTIFICATE-----Generated at Mon Apr 7 06:18:18 2025 by rpki-client