$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef671e3e-be32-38b7-a1d0-af0ad6ca064b.roa File: ef671e3e-be32-38b7-a1d0-af0ad6ca064b.roa (raw, json) Hash identifier: KWQAi48iqUNEyWjbbCRETiwM73d48i8UR8kbbKmXrxk= Subject key identifier: 8C:F2:2E:6F:40:93:CC:C2:27:0C:E4:50:04:B4:9C:F8:57:CF:64:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1BD920FA0875EC29A2540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef671e3e-be32-38b7-a1d0-af0ad6ca064b.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 76.132.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:bd:92:0f:a0:87:5e:c2:9a:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=af44aba9-b2f7-409d-9dad-6c06f07b5ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d8:83:1b:6d:df:66:cf:e4:19:52:ad:d0:e6: 15:c7:33:8f:05:40:0f:94:fb:fd:19:80:21:1c:0a: 40:72:6b:4c:6f:40:fb:4c:58:10:36:30:fe:d3:12: e7:a1:d2:ee:b7:ff:5a:f6:80:aa:0b:34:30:bf:13: a5:25:fd:73:37:29:df:28:25:73:82:31:a0:41:70: e0:5b:99:16:f5:22:5f:a3:57:9c:d0:52:d3:4b:fe: ed:b0:9b:fd:07:c7:b8:1f:ea:80:79:1c:fa:28:ac: 2e:ce:1e:ab:95:fe:b1:b7:a7:65:24:62:d2:1d:82: 99:d4:bd:6d:a2:cf:39:f6:c4:cb:45:cc:c5:4a:e9: 28:cd:26:6b:64:77:18:9a:4c:55:68:14:aa:4d:6e: 27:f1:34:04:8f:ba:d8:d7:79:89:35:e7:fe:09:14: f2:07:9d:f5:10:12:f8:f7:f1:fc:33:03:fa:bc:68: 77:36:6f:30:96:7d:5d:a5:2a:3d:db:02:d8:bf:b1: f9:e0:32:60:27:fe:2c:98:96:49:50:54:2c:3b:57: 3f:74:d2:34:01:c0:39:95:53:0c:2d:74:c1:f2:1c: 17:76:6c:3d:1f:df:23:3a:6f:1a:d7:a7:76:92:4f: d0:a6:7b:65:59:1b:c4:8a:5f:03:4f:03:b9:cd:01: 17:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F2:2E:6F:40:93:CC:C2:27:0C:E4:50:04:B4:9C:F8:57:CF:64:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef671e3e-be32-38b7-a1d0-af0ad6ca064b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.132.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:0a:3a:d5:bf:31:ab:2e:27:d0:c7:8d:bc:b0:b5:b0:4a:2f: d8:f3:d6:e7:26:42:e7:b2:b7:03:23:67:78:31:14:c1:14:f0: e9:c0:49:e7:f4:ae:01:09:5b:34:35:0c:06:32:6c:2d:2f:55: 24:55:9e:f5:5c:0c:08:e8:f7:86:4c:fe:99:5b:6b:5f:71:8d: 48:6a:12:15:50:d7:5a:b5:34:07:54:79:12:08:2f:c6:55:6e: 51:12:81:0a:5d:a0:27:94:2b:94:ad:b4:9d:a1:00:a4:ee:04: ac:45:ac:3c:bd:39:fc:34:86:ca:4e:7f:c0:19:a3:7e:7b:91: 25:5e:55:e0:dd:d5:5d:ed:1d:38:64:92:c7:4b:5f:36:fc:75: 9f:a3:9c:9f:00:f1:b3:89:a7:80:96:b5:38:2f:80:27:7f:aa: d4:a6:c0:a9:3f:f5:2f:ae:df:38:07:46:56:34:0f:ca:1d:ba: e8:cf:47:71:83:52:1f:5e:45:34:c6:49:ef:01:01:9e:aa:74: 62:4b:53:36:3e:6c:79:6e:2c:2c:d1:22:99:78:9f:2d:f4:d1: 9f:f0:b0:70:fa:4e:08:a7:3c:5a:ea:d5:34:b7:36:b9:60:f9: a6:f6:c7:c1:61:ca:c5:92:41:6c:52:ba:4e:24:67:ef:ea:a4: 73:83:a1:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssb2SD6CHXsKaJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YWY0NGFiYTktYjJmNy00MDlkLTlkYWQtNmMwNmYwN2I1ZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9iDG23fZs/kGVKt0OYVxzOPBUAPlPv9GYAh HApAcmtMb0D7TFgQNjD+0xLnodLut/9a9oCqCzQwvxOlJf1zNynfKCVzgjGgQXDg W5kW9SJfo1ec0FLTS/7tsJv9B8e4H+qAeRz6KKwuzh6rlf6xt6dlJGLSHYKZ1L1t os859sTLRczFSukozSZrZHcYmkxVaBSqTW4n8TQEj7rY13mJNef+CRTyB531EBL4 9/H8MwP6vGh3Nm8wln1dpSo92wLYv7H54DJgJ/4smJZJUFQsO1c/dNI0AcA5lVMM LXTB8hwXdmw9H98jOm8a16d2kk/QpntlWRvEil8DTwO5zQEX1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzyLm9Ak8zCJwzkUAS0nPhXz2SAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWY2NzFlM2UtYmUzMi0z OGI3LWExZDAtYWYwYWQ2Y2EwNjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTISCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8KOtW/MasuJ9DHjbywtbBKL9jz1ucmQueytwMjZ3gxFMEU8OnASef0 rgEJWzQ1DAYybC0vVSRVnvVcDAjo94ZM/plba19xjUhqEhVQ11q1NAdUeRIIL8ZV blESgQpdoCeUK5SttJ2hAKTuBKxFrDy9Ofw0hspOf8AZo357kSVeVeDd1V3tHThk ksdLXzb8dZ+jnJ8A8bOJp4CWtTgvgCd/qtSmwKk/9S+u3zgHRlY0D8oduujPR3GD Uh9eRTTGSe8BAZ6qdGJLUzY+bHluLCzRIpl4ny300Z/wsHD6TginPFrq1TS3Nrlg +ab2x8FhysWSQWxSuk4kZ+/qpHODoUc= -----END CERTIFICATE-----Generated at Mon Apr 7 06:00:53 2025 by rpki-client