$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/ae105d3e-daa5-3d17-ab23-7f8a827d46fc.roa File: ae105d3e-daa5-3d17-ab23-7f8a827d46fc.roa (raw, json) Hash identifier: KCmrvjzRdX7SqscL2snKs+aXJ+tPaQHV9jlmjWm8Q1s= Subject key identifier: AD:D3:12:49:94:DF:46:5C:48:1D:81:8D:D0:7F:24:1E:93:9B:B2:5E Certificate issuer: /CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c Certificate serial: 010D0C9F432858493B53CAAE2EA2C585F2140FC0 Authority key identifier: AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/ae105d3e-daa5-3d17-ab23-7f8a827d46fc.roa Signing time: Tue 18 Mar 2025 18:55:21 +0000 ROA not before: Tue 18 Mar 2025 18:55:21 +0000 ROA not after: Mon 16 Jun 2025 18:55:21 +0000 asID: 23294 IP address blocks: 76.165.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3b:53:ca:ae:2e:a2:c5:85:f2:14:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c Validity Not Before: Mar 18 18:55:21 2025 GMT Not After : Jun 16 18:55:21 2025 GMT Subject: CN=e0b0d7f9-48bf-4ca2-8e7d-6aca2a727fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:97:d3:56:e5:76:a4:c3:c6:1d:d9:f4:1b: fe:80:2b:66:89:39:9e:b1:12:e6:03:14:14:00:ba: 76:5c:88:8a:89:77:61:e7:dd:3e:4c:6c:cc:b5:8a: 5e:91:4a:bc:15:b4:20:a2:0a:9b:f0:de:7a:3f:8a: e1:2b:f5:8f:d7:10:c9:28:b3:23:a8:04:4d:22:b4: 67:2d:3d:44:12:b2:cd:02:72:f5:a6:b6:52:ec:e9: f5:31:2a:28:16:68:40:8e:05:84:77:e3:d3:33:d3: a8:68:89:b7:0c:7d:9f:cc:a5:15:39:bc:2b:69:34: b1:33:02:57:75:48:24:8b:5a:02:12:3f:af:5f:e8: 5b:05:a0:8a:63:7c:93:2c:f8:4e:11:98:4f:b8:54: 2e:81:1d:24:d4:7d:cf:02:21:d9:64:d1:d1:7a:b5: 16:47:b4:b0:13:3a:0c:9d:1f:82:37:84:b2:ba:7c: 5a:98:e8:7a:c1:88:3a:be:6e:d6:41:a6:d1:47:29: 5e:23:62:89:b0:94:af:2e:f2:45:1f:16:dc:27:d3: ef:11:2b:83:c0:c3:fd:96:f4:82:e2:bf:4b:0a:64: ac:4f:53:54:2c:2e:55:f9:af:a1:08:7e:8e:86:77: a6:38:26:8a:39:ab:7f:78:0e:4a:d6:3c:f2:b2:36: 6f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D3:12:49:94:DF:46:5C:48:1D:81:8D:D0:7F:24:1E:93:9B:B2:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/ae105d3e-daa5-3d17-ab23-7f8a827d46fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl X509v3 Authority Key Identifier: keyid:AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer sbgp-ipAddrBlock: critical IPv4: 76.165.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6c:43:65:c7:f4:76:3e:73:f2:a2:c3:f2:66:82:4b:e7:d0: 51:88:63:48:b0:13:56:f0:96:8f:ba:e0:fd:29:65:ba:f1:af: 3d:f2:d5:20:bc:27:a4:74:33:01:4f:f9:82:34:d7:6e:81:96: ed:b1:f9:67:df:a9:e3:23:ea:ca:7a:5d:29:ae:8c:31:35:d9: 11:fa:c3:55:ca:5c:8c:4a:a1:34:7d:a2:c0:9f:ba:58:31:4c: a8:08:f9:60:bd:e1:1f:cc:4d:2b:46:19:18:c6:14:88:ac:2c: e7:22:13:2d:de:e5:f0:dc:dc:0c:05:a1:b2:b5:bc:da:a3:cb: 1d:e8:49:12:c0:5d:8d:ed:b9:54:7f:98:46:2d:d7:b5:f6:1b: 15:f4:64:b3:aa:46:b5:8a:8f:c7:6f:25:7b:b9:ba:ef:bf:c1: ed:53:d7:f9:d6:ff:55:9d:cb:bd:ab:0d:c5:a5:10:9f:ae:b6: c3:ee:a0:80:36:34:87:ee:c0:b1:82:4d:cf:16:db:70:62:76: a0:c0:c9:2f:fa:2d:25:d5:75:bc:8a:13:55:92:ff:43:a5:b4: 97:fe:e7:47:38:75:08:ec:46:18:67:82:b0:15:6a:5d:a4:38: c4:ee:3b:0a:33:54:e3:47:f0:d2:57:ff:0e:20:ec:4d:f3:14: ca:c1:d5:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk7U8quLqLFhfIUD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFiNTMwNjctNDQ5My00N2FiLWJjZjItN2ZhOWFkNDY1 NzljMB4XDTI1MDMxODE4NTUyMVoXDTI1MDYxNjE4NTUyMVowLzEtMCsGA1UEAxMk ZTBiMGQ3ZjktNDhiZi00Y2EyLThlN2QtNmFjYTJhNzI3ZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuKX01bldqTDxh3Z9Bv+gCtmiTmesRLmAxQU ALp2XIiKiXdh590+TGzMtYpekUq8FbQgogqb8N56P4rhK/WP1xDJKLMjqARNIrRn LT1EErLNAnL1prZS7On1MSooFmhAjgWEd+PTM9OoaIm3DH2fzKUVObwraTSxMwJX dUgki1oCEj+vX+hbBaCKY3yTLPhOEZhPuFQugR0k1H3PAiHZZNHRerUWR7SwEzoM nR+CN4SyunxamOh6wYg6vm7WQabRRyleI2KJsJSvLvJFHxbcJ9PvESuDwMP9lvSC 4r9LCmSsT1NULC5V+a+hCH6OhnemOCaKOat/eA5K1jzysjZvsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3TEkmU30ZcSB2BjdB/JB6Tm7JeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YWI1 MzA2Ny00NDkzLTQ3YWItYmNmMi03ZmE5YWQ0NjU3OWMvYWUxMDVkM2UtZGFhNS0z ZDE3LWFiMjMtN2Y4YTgyN2Q0NmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGFiNTMwNjctNDQ5My00N2FiLWJj ZjItN2ZhOWFkNDY1NzljLzRhYjUzMDY3LTQ0OTMtNDdhYi1iY2YyLTdmYTlhZDQ2 NTc5Yy5jcmwwHwYDVR0jBBgwFoAUrv1uP9auMbIMbnvGOKUvOihTS8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YWI1MzA2Ny00NDkzLTQ3YWItYmNmMi03ZmE5 YWQ0NjU3OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTKUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdsQ2XH9HY+c/Kiw/Jmgkvn0FGIY0iwE1bwlo+64P0pZbrxrz3y1SC8 J6R0MwFP+YI0126Blu2x+WffqeMj6sp6XSmujDE12RH6w1XKXIxKoTR9osCfulgx TKgI+WC94R/MTStGGRjGFIisLOciEy3e5fDc3AwFobK1vNqjyx3oSRLAXY3tuVR/ mEYt17X2GxX0ZLOqRrWKj8dvJXu5uu+/we1T1/nW/1Wdy72rDcWlEJ+utsPuoIA2 NIfuwLGCTc8W23BidqDAyS/6LSXVdbyKE1WS/0OltJf+50c4dQjsRhhngrAVal2k OMTuOwozVONH8NJX/w4g7E3zFMrB1XA= -----END CERTIFICATE-----Generated at Wed Apr 16 16:49:49 2025 by rpki-client