$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1af0590-bfcb-3a91-8188-be94000da24e.roa File: d1af0590-bfcb-3a91-8188-be94000da24e.roa (raw, json) Hash identifier: Q5jOUlEMHxF+fRNpG5uoRHLPwliHCHqEZQ9ZIRYW0nA= Subject key identifier: EC:C4:FD:F1:AC:D3:2F:73:8A:5C:90:45:E2:1A:85:99:5A:5D:EC:07 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5E4C03FFEB95416FB9E40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1af0590-bfcb-3a91-8188-be94000da24e.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 76.122.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:e4:c0:3f:fe:b9:54:16:fb:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=1037d81e-228a-4458-909a-70bf2fb1ef3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fc:42:e9:f4:96:0d:92:5f:78:ce:29:aa:83: 28:9b:23:c7:a4:84:50:0c:b0:83:18:04:7a:14:cf: 11:e8:70:de:b5:da:02:32:97:01:cf:2b:0b:70:1e: ac:96:43:2e:9f:76:3c:33:58:a4:3f:b9:d0:23:33: 19:71:59:b9:06:d7:e9:e3:3a:8b:7c:ae:ee:c9:6a: d1:ed:d4:34:c5:ac:4c:9c:10:7c:fd:4b:f7:97:7c: 03:b8:3e:d3:3c:0e:8e:75:94:88:2c:71:b9:ee:52: 85:a1:32:3e:6d:bf:de:9e:02:86:f9:e9:a6:ac:15: c8:9b:e1:94:d5:29:a6:65:07:22:aa:00:47:40:32: 60:48:29:10:c3:18:e9:6a:93:d5:5d:98:de:74:83: 6d:c8:71:0c:b2:1a:fb:46:0f:44:48:76:ff:5c:0d: 32:fb:0b:a9:0c:8e:dc:72:46:0b:19:14:67:6b:84: d8:f8:58:83:78:76:4a:10:55:9a:07:44:5c:d8:d3: a2:b2:95:af:7f:72:a5:e0:8c:08:88:4a:25:bc:ab: c4:2a:69:0f:8e:d5:9b:8f:3e:95:da:a6:c9:ca:42: 00:a2:00:82:ca:12:ee:7b:58:1c:f2:f7:e2:29:1c: 4f:51:08:91:5f:c0:0f:51:76:9f:28:9b:4e:b1:6b: 39:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C4:FD:F1:AC:D3:2F:73:8A:5C:90:45:E2:1A:85:99:5A:5D:EC:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1af0590-bfcb-3a91-8188-be94000da24e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.122.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b0:bf:5c:4d:b8:42:0f:c6:2a:27:91:26:32:92:fe:bc:f3: d5:ad:bc:1e:20:ed:97:a7:cc:be:68:44:51:66:f9:be:65:58: 81:d4:81:ef:15:5d:f0:0a:d5:2f:50:7a:56:27:2d:41:46:df: c1:77:79:28:b8:96:d7:3f:9e:83:8a:15:f0:fd:60:50:61:e1: c9:cf:9e:52:ed:38:9b:8f:7c:00:f0:5f:35:97:89:d9:cf:16: 7e:4a:ba:09:cd:3d:68:a7:d5:0a:bb:a9:0b:7c:38:87:8b:f0: 64:0e:3a:c6:64:c1:36:c7:1e:1c:92:4f:93:a5:0d:e3:21:c8: e1:03:ee:f0:d3:84:81:70:13:2a:5c:a3:fe:a8:30:dc:ba:99: a0:2d:26:de:c7:a0:32:e6:27:f1:8f:fb:e4:cd:df:64:9c:36: 6e:ee:f8:27:b9:75:b6:20:6a:48:23:3f:06:4f:5a:f2:8d:18: 19:77:d1:bb:ef:0a:09:a9:50:36:01:74:21:4b:98:18:3c:7c: ef:47:e2:44:63:e6:4b:6f:80:b1:72:f9:aa:b8:d6:64:48:ad: 46:9e:6c:e5:36:f1:55:99:34:48:74:45:3f:b9:f8:78:8e:75: 8a:2b:51:aa:6f:85:93:54:1c:4e:8b:f7:b5:cb:d2:5f:37:0b: 54:3d:50:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9peTAP/65VBb7nkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MTAzN2Q4MWUtMjI4YS00NDU4LTkwOWEtNzBiZjJmYjFlZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvxC6fSWDZJfeM4pqoMomyPHpIRQDLCDGAR6 FM8R6HDetdoCMpcBzysLcB6slkMun3Y8M1ikP7nQIzMZcVm5Btfp4zqLfK7uyWrR 7dQ0xaxMnBB8/Uv3l3wDuD7TPA6OdZSILHG57lKFoTI+bb/engKG+emmrBXIm+GU 1SmmZQciqgBHQDJgSCkQwxjpapPVXZjedINtyHEMshr7Rg9ESHb/XA0y+wupDI7c ckYLGRRna4TY+FiDeHZKEFWaB0Rc2NOispWvf3Kl4IwIiEolvKvEKmkPjtWbjz6V 2qbJykIAogCCyhLue1gc8vfiKRxPUQiRX8APUXafKJtOsWs5IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzE/fGs0y9zilyQReIahZlaXewHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFhZjA1OTAtYmZjYi0z YTkxLTgxODgtYmU5NDAwMGRhMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATHruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOwv1xNuEIPxionkSYykv6889WtvB4g7ZenzL5oRFFm+b5lWIHUge8V XfAK1S9QelYnLUFG38F3eSi4ltc/noOKFfD9YFBh4cnPnlLtOJuPfADwXzWXidnP Fn5KugnNPWin1Qq7qQt8OIeL8GQOOsZkwTbHHhyST5OlDeMhyOED7vDThIFwEypc o/6oMNy6maAtJt7HoDLmJ/GP++TN32ScNm7u+Ce5dbYgakgjPwZPWvKNGBl30bvv CgmpUDYBdCFLmBg8fO9H4kRj5ktvgLFy+aq41mRIrUaebOU28VWZNEh0RT+5+HiO dYorUapvhZNUHE6L97XL0l83C1Q9UNQ= -----END CERTIFICATE-----Generated at Mon Apr 28 03:18:26 2025 by rpki-client