$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/568629ec-0abb-329d-bf41-127fea7cd6a1.roa File: 568629ec-0abb-329d-bf41-127fea7cd6a1.roa (raw, json) Hash identifier: Z7uTSAXGw3vNknjoCzo43xrQRjt/u3wed5wEbLuq86M= Subject key identifier: 0B:1A:20:F6:BC:F0:A7:F9:8F:90:9F:83:54:B4:77:57:F7:55:EE:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7C5A762D20C651AC05920 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/568629ec-0abb-329d-bf41-127fea7cd6a1.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 76.112.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:c5:a7:62:d2:0c:65:1a:c0:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=9b1803c0-5e3c-41f5-a49f-8f616725fe0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5f:7a:46:0b:87:98:ce:7d:ac:38:da:90:9b: 6b:46:a8:a0:50:57:b9:03:2e:74:4a:a2:a7:67:99: dc:5b:ef:44:99:61:78:9a:09:f2:1f:41:37:0c:c4: 88:38:7a:8e:ee:1a:a6:db:73:6a:cc:e4:2f:10:0b: a5:ff:5c:17:f3:72:86:ad:b3:e2:44:2d:d5:d5:91: 92:c8:b4:bd:5c:86:a8:9b:3d:b5:53:5d:09:9c:28: 57:be:f2:24:4b:c2:c8:e8:41:63:4c:71:15:12:ed: 12:00:ed:50:9c:a9:60:3e:fb:5e:bf:26:cb:a6:12: b0:5c:60:69:4d:fd:f9:2a:c2:9f:5b:71:89:1a:5c: 6d:97:81:82:96:01:a3:65:98:3e:65:ab:0b:51:49: 59:e6:34:f3:fc:60:a7:b2:6f:33:2c:97:58:27:23: 40:18:31:d4:3e:48:22:53:3e:72:0f:08:52:56:f3: 46:c7:6e:72:e2:8b:90:c2:da:b7:82:69:8a:6d:46: 98:c7:7c:e1:35:91:95:a8:ab:9d:53:be:83:c2:9d: 35:7e:32:e8:59:f8:a8:a7:c9:bb:bd:1d:7d:8f:0e: c4:50:cc:ad:19:18:03:43:b8:92:04:ba:3a:6f:34: 49:b7:d8:e0:d2:17:7c:a0:4b:4b:fb:92:f0:d2:d4: cc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1A:20:F6:BC:F0:A7:F9:8F:90:9F:83:54:B4:77:57:F7:55:EE:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/568629ec-0abb-329d-bf41-127fea7cd6a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.112.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:0c:bc:18:fa:16:59:28:a6:9f:91:6f:8b:ce:00:40:2b:86: 35:43:31:c6:a0:1d:33:76:37:23:65:2b:9e:06:fa:f9:9c:eb: 13:8c:86:6c:20:9a:26:ed:6e:19:d2:85:fd:72:ad:69:f4:02: 60:e1:32:56:0e:15:c0:5e:04:f1:ef:42:db:37:e1:78:0c:cc: 73:eb:5d:c5:50:f0:0f:00:99:22:1c:f6:37:7e:03:a7:63:d6: 0d:37:cf:ee:a0:c9:52:d1:2e:ce:05:10:4f:b5:f6:c5:66:99: ab:a7:46:2d:aa:e1:4c:4b:bc:f7:92:13:16:da:38:66:41:51: f5:2a:f7:bd:4a:09:99:ab:95:63:13:6f:51:17:05:ef:10:91: 12:97:7c:db:df:d3:0e:eb:e3:7f:5a:bb:54:6d:59:1d:73:b5: 20:0b:14:a7:b0:25:c7:db:76:08:7d:a4:50:df:be:e8:20:de: 86:bf:e1:78:aa:a9:11:f4:19:c1:45:6f:5b:11:20:08:f1:d5: 07:ed:f7:bf:0a:03:ca:82:47:66:69:2e:96:a0:93:a9:10:53: 08:3e:22:e8:1a:08:5c:21:f3:c5:7e:6b:00:72:16:74:cd:85: 09:99:3f:13:97:7d:72:b6:8e:50:91:cb:b6:bc:23:51:f2:95: 91:0c:e8:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj098WnYtIMZRrAWSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OWIxODAzYzAtNWUzYy00MWY1LWE0OWYtOGY2MTY3MjVmZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl96RguHmM59rDjakJtrRqigUFe5Ay50SqKn Z5ncW+9EmWF4mgnyH0E3DMSIOHqO7hqm23NqzOQvEAul/1wX83KGrbPiRC3V1ZGS yLS9XIaomz21U10JnChXvvIkS8LI6EFjTHEVEu0SAO1QnKlgPvtevybLphKwXGBp Tf35KsKfW3GJGlxtl4GClgGjZZg+ZasLUUlZ5jTz/GCnsm8zLJdYJyNAGDHUPkgi Uz5yDwhSVvNGx25y4ouQwtq3gmmKbUaYx3zhNZGVqKudU76Dwp01fjLoWfiop8m7 vR19jw7EUMytGRgDQ7iSBLo6bzRJt9jg0hd8oEtL+5Lw0tTMswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsaIPa88Kf5j5Cfg1S0d1f3Ve6QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTY4NjI5ZWMtMGFiYi0z MjlkLWJmNDEtMTI3ZmVhN2NkNmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTHDsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcMvBj6Flkopp+Rb4vOAEArhjVDMcagHTN2NyNlK54G+vmc6xOMhmwg mibtbhnShf1yrWn0AmDhMlYOFcBeBPHvQts34XgMzHPrXcVQ8A8AmSIc9jd+A6dj 1g03z+6gyVLRLs4FEE+19sVmmaunRi2q4UxLvPeSExbaOGZBUfUq971KCZmrlWMT b1EXBe8QkRKXfNvf0w7r439au1RtWR1ztSALFKewJcfbdgh9pFDfvugg3oa/4Xiq qRH0GcFFb1sRIAjx1Qft978KA8qCR2ZpLpagk6kQUwg+IugaCFwh88V+awByFnTN hQmZPxOXfXK2jlCRy7a8I1HylZEM6ME= -----END CERTIFICATE-----Generated at Mon Apr 28 22:44:09 2025 by rpki-client