$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe97e0a-5c6d-3f67-b735-8ba14939c0db.roa File: afe97e0a-5c6d-3f67-b735-8ba14939c0db.roa (raw, json) Hash identifier: ob6SFA5mKgHXF5CntjjZXjwbs6w77R2Wty5DR8C2nLQ= Subject key identifier: 33:F0:B5:70:F4:6B:81:B5:26:16:48:D6:FC:DD:BB:E1:BB:12:B5:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA68E788D491A57988ABD20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe97e0a-5c6d-3f67-b735-8ba14939c0db.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 13367 IP address blocks: 76.156.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:8e:78:8d:49:1a:57:98:8a:bd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=83a9485d-689a-403b-97ed-7d120a00e0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:61:a5:03:af:1b:85:dd:d0:b8:43:fb:02: 95:59:7e:8b:c7:0b:38:83:68:f0:fa:49:64:3f:cc: 8e:53:55:86:a8:61:39:62:bb:d4:ef:83:68:17:01: 22:47:f5:cb:6d:c6:fb:79:f5:ae:2f:a5:a2:5d:05: e0:19:42:41:99:e9:13:1d:b2:4a:09:b2:7c:1a:47: 03:aa:67:c4:ac:fc:c6:0b:53:1c:4a:5d:d3:8c:fb: 2a:09:0c:d4:dc:bc:27:27:50:9c:4e:d9:61:f0:a4: 3c:24:6a:1e:58:17:a8:f6:12:fd:c7:95:d9:71:02: f4:4c:46:f9:20:58:da:a0:e5:14:e1:89:4d:8d:c4: 01:19:f6:63:23:93:65:a1:35:3b:e1:93:d8:ee:db: e3:89:8d:93:d6:df:2b:bb:6c:24:79:04:97:bc:b7: 70:3d:67:9d:5a:a6:b6:a0:57:4d:35:17:0d:d5:52: 7e:6a:7b:d6:86:d9:60:a2:4b:26:03:a5:a2:60:e8: 81:09:28:0b:d4:e0:83:c0:52:fc:60:35:ec:07:08: bf:c6:59:0e:bd:97:3c:bc:c5:a3:64:04:53:d4:ac: ec:05:54:62:a7:a5:a5:9a:11:f4:90:34:6e:df:76: 0e:b2:ab:58:c2:27:8d:33:ea:85:8f:de:5c:7a:90: 44:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F0:B5:70:F4:6B:81:B5:26:16:48:D6:FC:DD:BB:E1:BB:12:B5:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe97e0a-5c6d-3f67-b735-8ba14939c0db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.156.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:32:4c:4e:d5:0d:11:a9:7f:7a:b1:2e:fe:b9:1d:69:f2:6e: 22:88:dd:5f:b4:4d:e0:ae:36:f1:d5:64:3f:5f:b7:dd:c5:20: e8:83:2d:2c:d9:ce:76:ce:f1:c8:cd:ef:4a:0b:b0:0c:6e:5f: f3:97:e6:09:07:80:46:0d:7e:ef:60:8c:0c:0e:cf:fe:1a:e4: 28:b2:9f:c1:46:a5:ae:d3:b7:76:56:7b:b6:7f:6f:79:4c:96: 5b:72:26:ea:77:2a:34:bf:c1:b7:ba:99:60:9d:69:23:fe:f2: 3b:ee:b1:aa:26:9a:c8:f7:9b:8b:93:29:df:d0:21:bd:6e:72: be:87:48:56:67:8e:79:55:ba:40:97:cb:d3:b8:86:ca:9e:3f: 1f:70:4b:c9:f3:82:fc:ca:da:7e:0d:01:23:df:b7:b6:d3:b9: 2b:4f:ce:b0:57:80:e6:8b:10:cd:ad:77:06:be:cc:84:f0:5f: 71:8b:b9:15:a0:2f:dc:e9:d6:07:78:2d:4d:c9:ca:ab:bb:35: 7e:b1:cd:f7:e7:c1:f8:1e:52:02:af:e9:17:d0:d2:6d:3d:8e: d1:ac:32:b7:0f:db:9a:dd:da:ed:79:a5:b8:7b:1d:09:1d:b7: 7e:1e:41:a5:e0:b7:6e:a9:cf:b7:c6:d5:37:c6:12:45:3c:36: d3:c7:71:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9po54jUkaV5iKvSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODNhOTQ4NWQtNjg5YS00MDNiLTk3ZWQtN2QxMjBhMDBlMGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/VhpQOvG4Xd0LhD+wKVWX6Lxws4g2jw+klk P8yOU1WGqGE5YrvU74NoFwEiR/XLbcb7efWuL6WiXQXgGUJBmekTHbJKCbJ8GkcD qmfErPzGC1McSl3TjPsqCQzU3LwnJ1CcTtlh8KQ8JGoeWBeo9hL9x5XZcQL0TEb5 IFjaoOUU4YlNjcQBGfZjI5NloTU74ZPY7tvjiY2T1t8ru2wkeQSXvLdwPWedWqa2 oFdNNRcN1VJ+anvWhtlgoksmA6WiYOiBCSgL1OCDwFL8YDXsBwi/xlkOvZc8vMWj ZART1KzsBVRip6WlmhH0kDRu33YOsqtYwieNM+qFj95cepBELwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPwtXD0a4G1JhZI1vzdu+G7ErUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZlOTdlMGEtNWM2ZC0z ZjY3LWI3MzUtOGJhMTQ5MzljMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTJycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYyTE7VDRGpf3qxLv65HWnybiKI3V+0TeCuNvHVZD9ft93FIOiDLSzZ znbO8cjN70oLsAxuX/OX5gkHgEYNfu9gjAwOz/4a5Ciyn8FGpa7Tt3ZWe7Z/b3lM lltyJup3KjS/wbe6mWCdaSP+8jvusaommsj3m4uTKd/QIb1ucr6HSFZnjnlVukCX y9O4hsqePx9wS8nzgvzK2n4NASPft7bTuStPzrBXgOaLEM2tdwa+zITwX3GLuRWg L9zp1gd4LU3Jyqu7NX6xzffnwfgeUgKv6RfQ0m09jtGsMrcP25rd2u15pbh7HQkd t34eQaXgt26pz7fG1TfGEkU8NtPHcQY= -----END CERTIFICATE-----Generated at Tue Apr 29 10:20:49 2025 by rpki-client