$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ece14e1-6965-3b7d-9adf-c2d829092a65.roa File: 1ece14e1-6965-3b7d-9adf-c2d829092a65.roa (raw, json) Hash identifier: JOeedR3PjHOEo8Vwet6qkNN1/oBqOsRTfUclsclKg9E= Subject key identifier: C9:68:C9:AD:4B:A5:B3:58:5E:91:AE:32:F5:D4:CB:ED:7D:B6:1F:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF20D4EC6D7FF6C90F1E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ece14e1-6965-3b7d-9adf-c2d829092a65.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 76.124.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:20:d4:ec:6d:7f:f6:c9:0f:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=e41840f6-447c-454a-bbe7-626dead911b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2a:cb:8f:8e:79:b2:b3:77:96:69:62:f6:7f: ee:db:97:3e:cc:f9:b6:9a:e1:22:22:b0:72:05:27: b0:71:65:f1:c8:3c:9e:f3:46:b1:03:5d:8d:11:d2: 9d:a1:c1:0e:aa:2b:4d:73:28:c8:c6:7b:97:27:77: 4c:6c:a2:0b:d3:2c:65:be:20:1f:5a:98:50:34:4f: c1:27:b3:f5:fc:42:a2:18:64:bc:8f:8f:b6:28:fc: e4:b4:6a:f9:6e:2e:06:99:34:e7:ae:26:de:eb:9d: 8e:00:e7:ba:cb:5f:f7:18:35:35:de:77:14:97:ee: 4d:2a:d2:64:ba:11:51:79:c1:0d:ca:2c:e2:3b:8e: 48:de:6a:e0:b7:b8:7f:23:03:4d:e3:e0:61:61:5c: 44:83:85:5c:9a:78:89:0b:db:b6:31:73:d8:02:cb: 18:d3:05:17:9f:55:f7:73:f0:4c:cc:a5:0d:d0:f8: 59:d4:80:66:d9:a1:dc:7d:28:7f:eb:d3:c9:e8:84: 7e:1f:c7:50:3b:84:8a:fa:9c:f2:14:fe:4f:a9:90: ac:19:84:2d:0c:6b:d7:6e:2d:7b:ef:12:1f:c2:08: 08:cb:ff:d5:79:74:98:04:95:eb:14:a5:eb:24:24: 86:d6:23:ca:c9:ad:93:8d:6f:8d:da:13:9b:22:b6: e2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:68:C9:AD:4B:A5:B3:58:5E:91:AE:32:F5:D4:CB:ED:7D:B6:1F:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ece14e1-6965-3b7d-9adf-c2d829092a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.124.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:e4:4f:93:b0:47:cd:e2:04:d0:f0:c2:d7:7a:5f:05:4c:af: a5:44:71:56:77:c4:11:e5:b6:ff:9d:c8:6e:05:89:79:3c:b0: db:41:ab:89:8e:6f:6a:4d:f8:ab:93:b0:f3:70:54:73:28:9b: f1:9d:e6:c7:67:74:e2:c4:1c:cc:98:12:2e:20:3b:63:12:42: 9b:0b:56:9d:23:73:c1:c1:53:ed:dc:82:36:6e:83:72:f4:9a: b7:a1:ec:eb:d7:a4:e5:f5:2d:d6:b3:0a:e1:98:93:b3:42:7e: 2b:cd:34:a2:70:12:fc:94:ac:c5:b2:89:38:8f:6c:f1:a9:1c: 0d:5c:dc:4e:1c:4b:bb:ff:1d:7b:e9:be:d5:15:df:3d:ea:33: 8d:66:91:3b:d8:df:df:6f:29:65:46:01:39:54:da:c5:40:2d: 87:f8:cb:70:0c:12:8c:f1:8b:49:7e:b5:e0:f3:b3:d9:2f:87: 39:84:cc:2e:4f:d3:9b:df:16:fc:16:3d:13:3b:66:c0:93:14: ce:b5:e7:10:93:d8:13:19:f6:97:f2:19:f1:c7:4b:2a:68:a4: 18:54:27:cc:47:ed:8a:ac:0b:25:08:6e:f4:20:09:d4:05:9a: 01:f9:27:67:eb:ff:7b:66:79:a7:75:55:a1:a7:11:ea:bf:b2: 5b:af:a0:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksryDU7G1/9skPHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTQxODQwZjYtNDQ3Yy00NTRhLWJiZTctNjI2ZGVhZDkxMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCrLj455srN3lmli9n/u25c+zPm2muEiIrBy BSewcWXxyDye80axA12NEdKdocEOqitNcyjIxnuXJ3dMbKIL0yxlviAfWphQNE/B J7P1/EKiGGS8j4+2KPzktGr5bi4GmTTnribe652OAOe6y1/3GDU13ncUl+5NKtJk uhFRecENyiziO45I3mrgt7h/IwNN4+BhYVxEg4VcmniJC9u2MXPYAssY0wUXn1X3 c/BMzKUN0PhZ1IBm2aHcfSh/69PJ6IR+H8dQO4SK+pzyFP5PqZCsGYQtDGvXbi17 7xIfwggIy//VeXSYBJXrFKXrJCSG1iPKya2TjW+N2hObIrbi4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMloya1LpbNYXpGuMvXUy+19th84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWVjZTE0ZTEtNjk2NS0z YjdkLTlhZGYtYzJkODI5MDkyYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHkT5OwR83iBNDwwtd6XwVMr6VEcVZ3xBHltv+dyG4FiXk8sNtBq4mO b2pN+KuTsPNwVHMom/Gd5sdndOLEHMyYEi4gO2MSQpsLVp0jc8HBU+3cgjZug3L0 mreh7OvXpOX1LdazCuGYk7NCfivNNKJwEvyUrMWyiTiPbPGpHA1c3E4cS7v/HXvp vtUV3z3qM41mkTvY399vKWVGATlU2sVALYf4y3AMEozxi0l+teDzs9kvhzmEzC5P 05vfFvwWPRM7ZsCTFM615xCT2BMZ9pfyGfHHSypopBhUJ8xH7YqsCyUIbvQgCdQF mgH5J2fr/3tmead1VaGnEeq/sluvoCE= -----END CERTIFICATE-----Generated at Sun Apr 27 10:45:37 2025 by rpki-client