$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/4f9328ea-492f-3885-a2be-20a77b7c2626.roa File: 4f9328ea-492f-3885-a2be-20a77b7c2626.roa (raw, json) Hash identifier: S6YZGeHz4KLMbxmqBvv9wkcBc4iKquGp0nbW297dpxw= Subject key identifier: 7A:CF:EF:05:52:6C:48:0F:6A:BB:2B:90:98:F8:4E:F2:73:59:9D:1A Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F432858496A199CF7A3D585B3E1EDF3C0 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/4f9328ea-492f-3885-a2be-20a77b7c2626.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 23465 IP address blocks: 76.77.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:9c:f7:a3:d5:85:b3:e1:ed:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=43e1b087-a1b8-4aa2-b0a0-6fabaa5444f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:99:2c:d3:06:42:80:e5:a0:87:73:7a:c9:b2: 4e:47:eb:19:9a:00:61:70:a4:00:61:b2:36:b5:d9: d7:7d:01:4c:e3:16:cc:e5:40:6e:11:c9:79:f2:6f: e2:e3:63:0f:b4:7b:f3:62:7a:d9:3b:21:21:b8:47: 71:51:f9:0f:08:1a:bf:23:62:97:1b:41:de:53:02: 7f:04:f9:81:48:97:e0:8e:90:d0:b5:40:ab:73:0a: 32:3b:33:de:1f:08:c5:9a:8a:90:fa:84:36:d1:f5: 5f:6b:fa:d0:d0:16:44:f1:68:9f:cc:89:ef:d2:b9: 8a:18:b9:c2:1f:f3:03:7c:b9:bb:44:6b:84:5d:fb: 87:f9:f5:22:d4:bc:5b:8a:36:6f:8d:5d:41:40:2a: 21:e9:ad:56:b8:b4:71:c2:ed:4c:fb:33:70:f8:66: d3:14:6c:c3:f9:00:ae:e1:e6:76:99:29:e7:6a:c1: 7d:85:16:b1:8c:c4:c2:ed:24:99:ed:36:23:2c:6a: cf:3c:27:e8:00:1c:5b:4c:6b:fe:cf:18:e9:ac:41: 2a:9f:e6:f0:df:5c:fe:29:81:15:73:a3:2f:f9:23: f5:40:43:0f:90:8a:85:46:72:c9:85:17:52:1a:e8: 44:3f:b0:b8:f3:0a:26:cc:52:0e:77:da:56:a7:37: 64:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CF:EF:05:52:6C:48:0F:6A:BB:2B:90:98:F8:4E:F2:73:59:9D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/4f9328ea-492f-3885-a2be-20a77b7c2626.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 76.77.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:19:53:4a:45:58:d0:7d:64:91:9d:40:ea:b0:e3:ea:6d:ef: 31:0b:7f:16:18:4a:46:52:59:12:00:ab:79:ad:99:f1:41:8f: 68:fe:8d:29:5e:e1:e3:c9:a9:3b:d3:e4:89:97:95:07:d7:9a: a0:02:57:64:15:7b:74:2b:8d:69:b7:51:7c:17:5a:2b:57:8f: 3f:fa:d3:12:56:54:5e:75:9d:8a:52:75:ec:0d:16:85:f0:e7: 2e:a9:bc:4d:78:a7:a1:97:49:c4:3f:e7:4e:72:9e:7a:02:39: 2e:43:e1:ed:48:4b:69:61:fc:6d:93:88:24:1b:fb:30:66:b4: d3:e3:47:82:f5:fc:91:ed:e2:f0:73:0c:78:c3:37:06:19:ce: 76:5d:ec:3b:89:63:b0:3b:8e:5c:0e:89:c5:bf:8e:bf:0c:8a: 1a:85:77:73:d8:1a:f3:35:37:e4:fe:a1:aa:f2:61:02:7e:04: 76:b5:ba:50:ee:26:6a:15:0d:33:e4:5c:50:a9:f9:e9:11:53: 20:95:a1:9f:fc:2f:6f:e5:66:60:fb:85:16:62:9a:b3:a5:39: 2b:e9:db:7e:da:d7:5e:8e:c9:1e:11:d3:ce:92:df:0f:0b:dd: 5e:5c:32:a3:0f:86:c1:1b:03:34:cb:c5:a4:44:d9:21:94:22: 11:10:67:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZz3o9WFs+Ht88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk NDNlMWIwODctYTFiOC00YWEyLWIwYTAtNmZhYmFhNTQ0NGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJks0wZCgOWgh3N6ybJOR+sZmgBhcKQAYbI2 tdnXfQFM4xbM5UBuEcl58m/i42MPtHvzYnrZOyEhuEdxUfkPCBq/I2KXG0HeUwJ/ BPmBSJfgjpDQtUCrcwoyOzPeHwjFmoqQ+oQ20fVfa/rQ0BZE8WifzInv0rmKGLnC H/MDfLm7RGuEXfuH+fUi1LxbijZvjV1BQCoh6a1WuLRxwu1M+zNw+GbTFGzD+QCu 4eZ2mSnnasF9hRaxjMTC7SSZ7TYjLGrPPCfoABxbTGv+zxjprEEqn+bw31z+KYEV c6Mv+SP1QEMPkIqFRnLJhRdSGuhEP7C48womzFIOd9pWpzdkLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrP7wVSbEgParsrkJj4TvJzWZ0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvNGY5MzI4ZWEtNDkyZi0z ODg1LWEyYmUtMjBhNzdiN2MyNjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETE3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQZU0pFWNB9ZJGdQOqw4+pt7zELfxYYSkZSWRIAq3mtmfFBj2j+jSle 4ePJqTvT5ImXlQfXmqACV2QVe3QrjWm3UXwXWitXjz/60xJWVF51nYpSdewNFoXw 5y6pvE14p6GXScQ/505ynnoCOS5D4e1IS2lh/G2TiCQb+zBmtNPjR4L1/JHt4vBz DHjDNwYZznZd7DuJY7A7jlwOicW/jr8MihqFd3PYGvM1N+T+oaryYQJ+BHa1ulDu JmoVDTPkXFCp+ekRUyCVoZ/8L2/lZmD7hRZimrOlOSvp237a116OyR4R086S3w8L 3V5cMqMPhsEbAzTLxaRE2SGUIhEQZzU= -----END CERTIFICATE-----Generated at Wed Apr 30 20:35:44 2025 by rpki-client