$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b99430e-eff0-3a11-909f-d6971c916ce1.roa File: 8b99430e-eff0-3a11-909f-d6971c916ce1.roa (raw, json) Hash identifier: 81Ya/QH3P6vTsPwWusPt+KEvjHCxfdUrzsWpWSpB1vM= Subject key identifier: 2A:44:97:05:6D:D3:04:B8:10:B4:C4:8D:EE:9A:90:C2:69:C8:AE:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFB5C62809B71F8940E480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b99430e-eff0-3a11-909f-d6971c916ce1.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 76.141.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:b5:c6:28:09:b7:1f:89:40:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=5e6187cd-ab74-4d59-a096-d96042065e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2d:82:25:16:ac:fa:49:ca:a9:1f:a4:a2:c9: 86:9e:30:ec:c7:cb:49:ab:f4:2b:53:98:b7:b2:ce: 9c:4c:51:3e:46:d1:73:5d:ef:05:20:46:a7:f4:da: e9:ea:a9:3a:19:ce:a0:6d:d7:32:69:02:23:3a:5b: 85:85:3b:bf:5f:28:ad:48:ce:db:95:a3:83:f6:67: 8c:0f:fd:c9:a6:35:0f:95:d5:6a:f4:3f:e9:d0:3f: 41:00:4e:d1:d0:50:fd:4d:67:d5:04:49:a8:36:ea: f3:9c:2c:c9:2f:e9:8b:53:34:e6:36:31:a8:17:39: 23:6c:d8:a8:7f:bf:8a:22:c6:95:25:7e:ca:ef:fd: 72:c8:76:10:49:6a:12:35:36:66:9d:d7:8a:9f:f5: 35:77:fc:fb:85:49:8f:67:3f:5d:a6:10:83:1c:b0: 58:17:06:5e:3c:92:20:e9:51:32:2e:f3:ab:bc:81: 12:8e:48:c0:d2:05:23:5f:6a:8c:3f:d2:59:ac:4d: 1f:af:37:26:49:a9:36:c3:fc:e4:bb:2b:ce:d2:51: ae:f7:17:6e:53:db:81:9e:51:08:45:f9:89:72:02: be:65:0e:77:9f:1f:26:92:e1:d8:6b:4a:8b:74:67: c7:6c:59:22:c6:4b:ac:e1:aa:2f:c2:5d:b2:92:9c: de:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:44:97:05:6D:D3:04:B8:10:B4:C4:8D:EE:9A:90:C2:69:C8:AE:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b99430e-eff0-3a11-909f-d6971c916ce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.141.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:88:e7:2e:31:4f:8b:9e:01:1f:bf:95:ad:d2:59:c0:13:ff: 87:85:75:eb:f3:be:8c:d2:42:dc:b3:69:20:2c:ef:98:88:ed: ce:18:8a:45:96:d7:e5:38:84:2e:e8:31:78:99:63:74:39:94: 31:e9:16:74:89:74:5d:e0:35:58:09:3e:ae:a1:22:df:d2:1a: 0c:65:99:d1:3c:61:13:f1:24:e5:9f:b5:6d:f4:a9:15:31:8a: cd:01:c5:be:49:ff:42:d3:64:3e:fd:d1:40:2b:21:98:50:d9: af:77:e4:55:1f:63:b2:c7:52:b8:0c:52:b8:ea:9c:22:d9:b9: 44:c1:8c:74:ed:e8:bc:e8:44:1f:72:59:91:3d:37:c1:3f:f3: 62:f4:bf:3e:32:c0:09:d7:8e:e7:7f:a3:de:ae:d2:e2:26:73: 6c:d8:98:36:8d:ff:b5:15:d7:0c:67:91:ef:97:4a:17:ee:25: 2c:27:21:d9:ca:e7:2e:e5:b2:cf:fe:ed:fe:d1:f5:27:f2:b1: 39:a9:83:bb:4f:dc:b7:4c:22:41:91:3d:fd:ca:14:ea:ae:84: ca:a1:80:1c:0f:11:a9:3c:07:70:68:de:f9:4e:b1:fc:91:d8: 68:2e:5f:d8:6e:d2:e3:ec:87:9c:35:b5:79:6b:d5:f0:90:a7: 08:d4:bf:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr7XGKAm3H4lA5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NWU2MTg3Y2QtYWI3NC00ZDU5LWEwOTYtZDk2MDQyMDY1ZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC2CJRas+knKqR+kosmGnjDsx8tJq/QrU5i3 ss6cTFE+RtFzXe8FIEan9Nrp6qk6Gc6gbdcyaQIjOluFhTu/XyitSM7blaOD9meM D/3JpjUPldVq9D/p0D9BAE7R0FD9TWfVBEmoNurznCzJL+mLUzTmNjGoFzkjbNio f7+KIsaVJX7K7/1yyHYQSWoSNTZmndeKn/U1d/z7hUmPZz9dphCDHLBYFwZePJIg 6VEyLvOrvIESjkjA0gUjX2qMP9JZrE0frzcmSak2w/zkuyvO0lGu9xduU9uBnlEI RfmJcgK+ZQ53nx8mkuHYa0qLdGfHbFkixkus4aovwl2ykpzegwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpElwVt0wS4ELTEje6akMJpyK6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGI5OTQzMGUtZWZmMC0z YTExLTkwOWYtZDY5NzFjOTE2Y2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI3uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2I5y4xT4ueAR+/la3SWcAT/4eFdevzvozSQtyzaSAs75iI7c4YikWW 1+U4hC7oMXiZY3Q5lDHpFnSJdF3gNVgJPq6hIt/SGgxlmdE8YRPxJOWftW30qRUx is0Bxb5J/0LTZD790UArIZhQ2a935FUfY7LHUrgMUrjqnCLZuUTBjHTt6LzoRB9y WZE9N8E/82L0vz4ywAnXjud/o96u0uImc2zYmDaN/7UV1wxnke+XShfuJSwnIdnK 5y7lss/+7f7R9SfysTmpg7tP3LdMIkGRPf3KFOquhMqhgBwPEak8B3Bo3vlOsfyR 2GguX9hu0uPsh5w1tXlr1fCQpwjUv5s= -----END CERTIFICATE-----Generated at Sun Apr 27 20:00:03 2025 by rpki-client