$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bb4d213-57ce-30ef-bbf9-92e9ea39e4d9.roa File: 0bb4d213-57ce-30ef-bbf9-92e9ea39e4d9.roa (raw, json) Hash identifier: 0AHVFhCIypiIyzbpWbr2N1l0NEddfiI/vEkgNm6dLj0= Subject key identifier: 41:EB:3C:77:C0:1A:22:E7:4E:9C:18:8E:52:7A:C7:77:54:7D:20:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584992947F71C2A18BE8F5F65680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bb4d213-57ce-30ef-bbf9-92e9ea39e4d9.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 33491 IP address blocks: 76.136.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:7f:71:c2:a1:8b:e8:f5:f6:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=7cab8492-8d16-40ae-9bfb-2ed3e5c84db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:59:43:7f:79:94:e3:7a:6c:9f:6a:0a:dd:d5: 4c:b3:60:e9:1f:4f:e1:43:7d:ea:4f:35:89:4b:e3: fd:d8:0f:c5:c7:3b:d9:f5:57:c7:be:1f:d5:62:d1: 16:c0:a9:5f:7c:1b:6a:9c:72:f4:66:ff:c9:03:ba: d3:b1:e4:3e:9d:70:4f:c9:1b:8e:a1:f5:04:e1:ad: bc:8e:7b:06:76:a3:20:03:b4:a8:b1:20:26:c7:06: 63:5e:6f:b5:5b:6d:ac:3d:e1:6a:03:8d:fc:cc:37: 21:bc:bf:b6:d6:c2:45:28:11:0f:bf:80:0c:4a:ab: 21:bc:dd:fb:5d:13:cf:82:75:08:37:9d:81:d7:81: 6d:7f:49:e9:b7:d9:83:d5:bc:3a:1a:b9:14:28:c5: f8:4b:60:b5:88:30:65:39:8d:a4:4e:9e:1c:5c:a5: f6:1f:6e:b9:ed:36:91:e4:eb:9c:d7:9b:55:12:2c: f9:89:0b:b6:77:9a:76:3f:20:f7:9d:60:0d:58:ff: c5:10:f3:5d:99:34:70:af:94:5f:65:d7:26:b5:e7: be:fb:0b:72:d2:6c:98:b7:44:2a:e4:00:0c:ba:1f: 32:0f:29:f5:d5:7d:2f:8e:6b:6d:b9:45:eb:51:82: c0:63:03:ce:0b:75:e1:bf:98:c7:4b:a7:d4:a4:49: 31:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EB:3C:77:C0:1A:22:E7:4E:9C:18:8E:52:7A:C7:77:54:7D:20:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bb4d213-57ce-30ef-bbf9-92e9ea39e4d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.136.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:81:e9:93:06:25:c0:cb:f1:b7:6a:d6:5a:17:e0:07:d4:a5: b9:a5:8b:99:7c:67:17:66:f7:89:2d:c5:c1:7d:c9:ee:d3:94: 17:0e:96:cb:ae:34:eb:82:be:4a:46:87:46:f2:de:47:fa:f0: d5:30:15:ad:0a:3c:69:fc:7f:9f:63:90:c1:28:4e:11:c2:eb: 92:64:97:8a:bd:d2:32:28:e0:82:3d:24:36:cb:55:d4:e1:43: 87:f2:3e:29:66:27:2c:ed:aa:4a:2d:14:fa:86:ec:c9:4f:e1: 5e:4f:f7:15:18:15:7b:7c:13:b6:0f:18:f5:6e:a7:75:b7:8f: 33:92:5f:87:76:8f:c7:a8:9b:ae:34:5c:7d:38:8b:70:6e:e7: 38:54:f9:06:76:09:6e:a5:5d:d5:dd:cf:da:9a:39:91:90:2d: 84:b1:8c:17:df:12:3f:04:82:33:4d:2f:69:8d:dd:bd:b4:1b: e6:63:f1:fa:44:62:6d:f3:b8:4a:da:b2:56:c8:69:0a:e7:86: d4:03:81:5c:54:c9:29:2f:77:1c:1a:fc:70:e1:1c:e2:dc:02: 04:b6:32:34:bb:55:2f:0d:cc:76:78:71:4d:e6:7a:8e:5f:76: 8f:58:39:84:2a:6a:09:be:d5:3a:0e:bd:f2:6e:63:37:1d:c8: 2e:d9:72:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlH9xwqGL6PX2VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk N2NhYjg0OTItOGQxNi00MGFlLTliZmItMmVkM2U1Yzg0ZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1lDf3mU43psn2oK3dVMs2DpH0/hQ33qTzWJ S+P92A/FxzvZ9VfHvh/VYtEWwKlffBtqnHL0Zv/JA7rTseQ+nXBPyRuOofUE4a28 jnsGdqMgA7SosSAmxwZjXm+1W22sPeFqA438zDchvL+21sJFKBEPv4AMSqshvN37 XRPPgnUIN52B14Ftf0npt9mD1bw6GrkUKMX4S2C1iDBlOY2kTp4cXKX2H2657TaR 5Ouc15tVEiz5iQu2d5p2PyD3nWANWP/FEPNdmTRwr5RfZdcmtee++wty0myYt0Qq 5AAMuh8yDyn11X0vjmttuUXrUYLAYwPOC3Xhv5jHS6fUpEkxQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHrPHfAGiLnTpwYjlJ6x3dUfSChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGJiNGQyMTMtNTdjZS0z MGVmLWJiZjktOTJlOWVhMzllNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTIgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmB6ZMGJcDL8bdq1loX4AfUpbmli5l8Zxdm94ktxcF9ye7TlBcOlsuu NOuCvkpGh0by3kf68NUwFa0KPGn8f59jkMEoThHC65Jkl4q90jIo4II9JDbLVdTh Q4fyPilmJyztqkotFPqG7MlP4V5P9xUYFXt8E7YPGPVup3W3jzOSX4d2j8eom640 XH04i3Bu5zhU+QZ2CW6lXdXdz9qaOZGQLYSxjBffEj8EgjNNL2mN3b20G+Zj8fpE Ym3zuEraslbIaQrnhtQDgVxUySkvdxwa/HDhHOLcAgS2MjS7VS8NzHZ4cU3meo5f do9YOYQqagm+1ToOvfJuYzcdyC7ZcqA= -----END CERTIFICATE-----Generated at Sun Apr 27 12:59:14 2025 by rpki-client