$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/898458b2-198e-391a-ad4b-eb8e162c478c.roa File: 898458b2-198e-391a-ad4b-eb8e162c478c.roa (raw, json) Hash identifier: tGBLCBD1pTE3oo4fpRPNCvQp7TxnAN3ZROIWR28r9nE= Subject key identifier: CC:32:EA:47:A6:9E:53:84:88:02:4B:FA:FC:CB:53:CB:AB:A9:C3:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA68C83AEF091EB2ACFC580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/898458b2-198e-391a-ad4b-eb8e162c478c.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 13367 IP address blocks: 76.17.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:8c:83:ae:f0:91:eb:2a:cf:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=9df5e228-ac7b-4576-8bcb-1662069dc6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9d:7b:50:a1:87:6d:58:99:fd:b6:90:fe:13: 71:01:93:34:1d:cc:f5:c4:a0:9e:7f:53:e1:9a:b0: ab:30:b2:52:05:7b:92:66:ce:b5:1c:27:ad:aa:1b: 66:24:75:cd:91:1b:1b:60:33:1f:71:eb:5c:bf:84: 2f:14:43:f9:c1:ed:e1:da:e3:96:36:e7:31:ff:3b: d1:54:0e:cd:81:33:1f:6b:85:07:c7:86:73:e0:a9: 75:39:9b:8d:b7:40:ef:5f:c7:f9:12:42:3f:db:43: 39:6e:88:18:d8:25:bf:c6:9e:30:dc:ac:0c:41:85: 9d:6e:c5:44:9d:f3:bc:6e:3b:69:be:42:77:33:44: 72:07:65:5d:2e:03:4e:a7:33:33:46:e9:eb:93:7b: 6e:49:88:64:0b:40:37:c1:41:ea:32:8f:f1:8e:6f: 54:f0:bb:b8:66:42:1a:df:5f:51:5e:dd:fc:34:77: 10:e6:c2:18:01:37:be:38:20:72:43:76:bd:27:8f: 0a:4b:7b:32:28:54:99:85:6a:c6:49:a0:03:ac:75: 64:8e:46:8e:44:42:a6:d0:98:ee:30:30:d0:cd:a7: a1:9c:01:d9:08:24:4e:6e:0e:1d:7e:3b:89:0e:ce: 6b:61:7a:80:9f:41:57:f5:96:7c:68:e8:e0:e3:50: 61:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:32:EA:47:A6:9E:53:84:88:02:4B:FA:FC:CB:53:CB:AB:A9:C3:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/898458b2-198e-391a-ad4b-eb8e162c478c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.17.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:e6:2c:38:2c:21:17:1f:b3:d9:75:a0:da:a2:99:e1:1b:7a: 3e:ef:ce:da:2f:0a:ad:b1:61:00:86:41:d8:b4:fd:0c:44:01: b4:9c:86:b7:6c:55:02:67:6e:b1:4f:48:c4:3a:a4:36:4f:3b: 29:7b:03:c2:2a:18:00:70:f4:51:32:e7:bd:13:0a:1a:0d:b0: d7:6d:f9:32:1c:7c:a0:ba:b6:cf:0f:60:4e:d5:e2:d2:ab:83: 44:b5:35:d5:76:6e:f7:41:e8:5e:6b:59:a0:92:55:73:f0:6c: a9:a3:91:42:13:99:5f:77:67:bc:91:1c:a6:27:9d:73:e4:22: 5c:dc:8a:1a:e8:98:e5:93:4a:9f:39:7b:ee:5e:c0:af:9d:55: 2c:93:8f:f0:5d:f3:8f:10:48:15:b4:23:27:01:2e:69:ad:8f: a1:2c:ff:25:ab:cf:3b:33:42:fd:c7:25:51:93:ee:9f:61:90: 26:0d:2f:67:8c:f7:6e:7c:2f:52:c9:e5:1d:54:72:a2:c4:09: 4a:7d:80:e6:b9:d8:51:13:60:2e:0d:37:01:9d:f5:c0:98:21: 53:6b:fd:5b:8e:f7:e9:91:0b:5c:4e:78:d3:f1:58:64:a2:9c: 69:04:06:d0:c8:a3:ee:85:34:8b:c9:75:51:2a:4c:92:53:e2: 07:17:52:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9poyDrvCR6yrPxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk OWRmNWUyMjgtYWM3Yi00NTc2LThiY2ItMTY2MjA2OWRjNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J17UKGHbViZ/baQ/hNxAZM0Hcz1xKCef1Ph mrCrMLJSBXuSZs61HCetqhtmJHXNkRsbYDMfcetcv4QvFEP5we3h2uOWNucx/zvR VA7NgTMfa4UHx4Zz4Kl1OZuNt0DvX8f5EkI/20M5bogY2CW/xp4w3KwMQYWdbsVE nfO8bjtpvkJ3M0RyB2VdLgNOpzMzRunrk3tuSYhkC0A3wUHqMo/xjm9U8Lu4ZkIa 319RXt38NHcQ5sIYATe+OCByQ3a9J48KS3syKFSZhWrGSaADrHVkjkaOREKm0Jju MDDQzaehnAHZCCRObg4dfjuJDs5rYXqAn0FX9ZZ8aOjg41BhKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwy6kemnlOEiAJL+vzLU8urqcMDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODk4NDU4YjItMTk4ZS0z OTFhLWFkNGItZWI4ZTE2MmM0NzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATBHyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTmLDgsIRcfs9l1oNqimeEbej7vztovCq2xYQCGQdi0/QxEAbSchrds VQJnbrFPSMQ6pDZPOyl7A8IqGABw9FEy570TChoNsNdt+TIcfKC6ts8PYE7V4tKr g0S1NdV2bvdB6F5rWaCSVXPwbKmjkUITmV93Z7yRHKYnnXPkIlzcihromOWTSp85 e+5ewK+dVSyTj/Bd848QSBW0IycBLmmtj6Es/yWrzzszQv3HJVGT7p9hkCYNL2eM 9258L1LJ5R1UcqLECUp9gOa52FETYC4NNwGd9cCYIVNr/VuO9+mRC1xOeNPxWGSi nGkEBtDIo+6FNIvJdVEqTJJT4gcXUrc= -----END CERTIFICATE-----Generated at Sun Apr 27 10:41:04 2025 by rpki-client