$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd9b8e5f-cf04-39d1-a93f-d4e5100dc940.roa File: fd9b8e5f-cf04-39d1-a93f-d4e5100dc940.roa (raw, json) Hash identifier: pAWvDYQ7LUDdvqCbDtc7HtN1LOBf3gAdtC973ExIe3s= Subject key identifier: C4:47:F5:21:BA:B7:EA:42:77:06:DD:A2:89:28:12:B8:D3:E0:2F:C4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F22C1A78928057BBE5F38480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd9b8e5f-cf04-39d1-a93f-d4e5100dc940.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 22258 IP address blocks: 76.138.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:1a:78:92:80:57:bb:e5:f3:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=7dfb9731-74a7-4c53-bf53-885afde502dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b5:f3:f1:d5:32:71:3f:20:fb:7e:7a:4f:2f: e1:44:d5:b9:ea:b9:0c:a2:2c:7f:b7:86:9c:92:bb: 03:56:83:00:7e:17:6c:06:5b:66:18:83:e6:ac:6d: 20:90:a3:ce:1d:1b:a3:ed:bc:0d:b8:04:03:7c:57: b1:3b:39:ff:00:84:76:f8:69:e4:c3:bd:61:88:4e: c4:ad:93:c0:e0:d2:04:4a:ec:f7:33:a1:7c:ba:b6: 1a:82:e1:47:bf:13:7b:78:b9:f9:61:8d:12:70:b5: 08:78:74:c1:04:65:b1:42:45:ce:9b:65:0b:a4:82: 7a:8f:f6:f8:81:7b:ac:d3:2a:a0:06:1a:7a:06:04: 60:ed:1f:5e:be:c0:81:c3:b3:3c:0d:e9:25:7a:7b: 72:84:dd:8f:a3:af:75:9b:b1:93:6d:94:f3:04:6c: 82:a0:10:e1:24:cb:f5:4f:d9:29:69:b3:36:fe:0f: e0:89:87:ea:8f:74:ee:de:36:26:62:1d:37:4e:96: c9:b9:37:d9:db:ea:3c:f7:9d:c1:7c:6c:66:80:07: 96:45:c1:12:12:1e:23:05:6f:29:04:33:60:a6:ae: 14:fe:a5:f2:c5:ca:54:5d:d5:1d:b4:ab:7b:02:91: d9:03:c5:09:af:eb:e6:d2:04:50:58:11:8d:40:aa: 93:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:47:F5:21:BA:B7:EA:42:77:06:DD:A2:89:28:12:B8:D3:E0:2F:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd9b8e5f-cf04-39d1-a93f-d4e5100dc940.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.138.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:85:97:13:33:e6:f8:88:99:4d:35:bc:51:8e:34:d1:d7:46: 13:76:32:6e:83:2b:9a:12:99:ea:04:dd:ff:29:75:13:e9:97: 08:d5:d6:80:b2:71:7e:34:ee:ed:4b:95:1c:6f:f0:9f:6b:d3: ee:5a:dd:cf:6d:59:de:44:45:93:ad:40:de:be:61:37:d0:1d: a2:50:01:c8:44:3b:55:c8:36:83:c1:b4:71:64:c3:89:66:4e: 59:ca:fc:f1:2c:64:6a:49:b1:cb:b5:e2:35:95:bc:35:5c:83: a7:4f:2b:4c:8a:2d:fe:d7:4a:1d:1b:ca:38:7f:7e:d1:9a:27: 66:e4:40:f6:2d:b1:97:2a:04:5c:f2:70:12:38:a1:99:86:3f: 23:f5:4e:cb:8b:f4:34:ec:c0:87:1c:8e:ba:f5:68:9d:f3:c8: 3a:fd:a3:e1:a2:28:2e:e4:c2:6f:db:d7:38:c8:15:d4:34:8c: 72:4d:14:c0:fd:a8:13:ee:6f:8c:09:6a:e8:6e:4e:13:1c:fc: b1:94:ca:82:5c:e6:ba:4e:bc:12:73:cc:6e:98:f8:8e:22:8f: 94:6e:cd:a4:c4:77:5b:67:7a:26:81:c8:8f:58:b8:7d:01:85: d8:b1:33:39:11:2d:d8:a3:8d:c4:e7:56:a1:dd:57:27:43:56: 3c:d8:d5:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLBp4koBXu+XzhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk N2RmYjk3MzEtNzRhNy00YzUzLWJmNTMtODg1YWZkZTUwMmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprXz8dUycT8g+356Ty/hRNW56rkMoix/t4ac krsDVoMAfhdsBltmGIPmrG0gkKPOHRuj7bwNuAQDfFexOzn/AIR2+Gnkw71hiE7E rZPA4NIESuz3M6F8urYaguFHvxN7eLn5YY0ScLUIeHTBBGWxQkXOm2ULpIJ6j/b4 gXus0yqgBhp6BgRg7R9evsCBw7M8DeklentyhN2Po691m7GTbZTzBGyCoBDhJMv1 T9kpabM2/g/giYfqj3Tu3jYmYh03TpbJuTfZ2+o8953BfGxmgAeWRcESEh4jBW8p BDNgpq4U/qXyxcpUXdUdtKt7ApHZA8UJr+vm0gRQWBGNQKqTuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRH9SG6t+pCdwbdookoErjT4C/EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmQ5YjhlNWYtY2YwNC0z OWQxLWE5M2YtZDRlNTEwMGRjOTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIoIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANKFlxMz5viImU01vFGONNHXRhN2Mm6DK5oSmeoE3f8pdRPplwjV1oCy cX407u1LlRxv8J9r0+5a3c9tWd5ERZOtQN6+YTfQHaJQAchEO1XINoPBtHFkw4lm TlnK/PEsZGpJscu14jWVvDVcg6dPK0yKLf7XSh0byjh/ftGaJ2bkQPYtsZcqBFzy cBI4oZmGPyP1TsuL9DTswIccjrr1aJ3zyDr9o+GiKC7kwm/b1zjIFdQ0jHJNFMD9 qBPub4wJauhuThMc/LGUyoJc5rpOvBJzzG6Y+I4ij5RuzaTEd1tneiaByI9YuH0B hdixMzkRLdijjcTnVqHdVydDVjzY1bA= -----END CERTIFICATE-----Generated at Mon Apr 7 05:46:54 2025 by rpki-client