$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc895342-5a06-3432-8543-7d2354db93f0.roa File: dc895342-5a06-3432-8543-7d2354db93f0.roa (raw, json) Hash identifier: mEHRGg9bNzJQ/rUwTX0GJM786Py+O3Ai9w0w5UYEKFw= Subject key identifier: 44:35:B2:3E:76:D4:FC:1E:3C:B0:80:19:07:D9:E2:09:06:D8:B1:DE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA49C2E3A65378FEC40C400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc895342-5a06-3432-8543-7d2354db93f0.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 76.129.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:9c:2e:3a:65:37:8f:ec:40:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=1e9075dc-2909-4b2f-8b6a-16ec7d8e4bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b7:22:8d:e5:ae:4d:86:9f:27:7f:c3:00:be: d5:26:a0:14:f9:2e:2d:80:ad:34:7d:5f:d2:c6:76: 8d:36:ba:da:34:f3:9e:3c:82:dd:c2:e8:00:39:33: 6c:62:d3:1d:40:44:96:3f:40:7d:51:14:42:9d:5c: c5:5b:f3:19:0b:b3:da:0a:a2:d0:b7:8f:d5:00:11: f8:97:89:74:98:14:de:90:c8:59:fa:fe:ba:13:05: cf:cd:22:26:85:95:76:79:4d:59:9b:44:95:4f:91: 6e:a5:2a:b6:16:9f:ca:35:e9:03:2e:96:1e:a3:6e: 41:82:f3:62:15:37:58:70:2f:82:3f:cd:ad:dc:c7: cd:39:0c:a4:73:34:c4:0f:4a:fe:63:db:54:23:be: 11:28:cd:9c:6f:88:41:e5:68:3b:0e:f2:e4:0f:de: ac:51:f4:f1:bc:cd:e9:ee:14:51:27:22:38:48:99: 3f:23:a6:68:b9:f1:a1:3d:e4:28:9d:cb:8f:fe:ac: 65:b4:7c:3b:1f:a3:d3:50:ae:03:54:4a:60:cd:6b: 8d:ac:de:1e:47:63:8a:49:ef:7e:ff:d4:f5:38:4b: f2:30:65:a2:85:36:5e:d4:79:ad:89:47:ac:db:da: 08:44:bd:83:d5:88:cb:b6:a4:51:b3:52:25:1f:47: 72:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:35:B2:3E:76:D4:FC:1E:3C:B0:80:19:07:D9:E2:09:06:D8:B1:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc895342-5a06-3432-8543-7d2354db93f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.129.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:22:27:4d:a1:ac:23:ea:f1:b2:0f:db:ce:ff:e0:7b:e9:0a: 0a:df:5d:fa:6e:d8:c9:f4:fb:27:c7:b3:5e:2c:c4:68:2b:14: 7e:09:66:4a:e7:ac:e0:45:db:8d:58:9d:82:6f:c4:20:75:49: 0e:bc:4c:77:9f:1a:d5:a0:77:4f:85:b1:65:38:fb:bb:ce:53: a2:39:bf:2b:67:05:47:9c:9f:94:e1:ce:f8:ac:02:41:30:06: d4:79:42:2a:cc:1e:6a:f4:4d:98:d5:b7:bc:da:67:51:0b:41: 3c:04:dc:2e:64:e4:d4:d7:47:70:54:4c:d3:53:1a:66:3c:4d: f1:f0:3c:40:5c:11:05:77:db:6b:fb:e8:bb:28:6b:ac:92:c1: 9c:ef:81:c5:46:c7:17:60:6f:a8:f5:13:2e:dc:45:ad:0e:ec: 5a:a0:64:04:be:a4:68:9c:8d:b1:3e:b3:40:d6:3f:23:bd:4b: 8e:cf:26:54:3c:80:52:ab:3d:3b:51:3c:66:89:bc:51:37:5d: 52:1e:3b:5c:89:d8:99:81:16:05:03:17:80:fb:e3:64:39:e3: 19:af:79:74:cc:6f:b6:33:10:37:2d:e8:f5:00:04:0e:83:04: 94:52:16:f8:2f:77:1e:0a:00:53:88:cb:37:ac:17:57:ae:f1: 67:32:fb:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pJwuOmU3j+xAxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MWU5MDc1ZGMtMjkwOS00YjJmLThiNmEtMTZlYzdkOGU0YmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07cijeWuTYafJ3/DAL7VJqAU+S4tgK00fV/S xnaNNrraNPOePILdwugAOTNsYtMdQESWP0B9URRCnVzFW/MZC7PaCqLQt4/VABH4 l4l0mBTekMhZ+v66EwXPzSImhZV2eU1Zm0SVT5FupSq2Fp/KNekDLpYeo25BgvNi FTdYcC+CP82t3MfNOQykczTED0r+Y9tUI74RKM2cb4hB5Wg7DvLkD96sUfTxvM3p 7hRRJyI4SJk/I6ZoufGhPeQoncuP/qxltHw7H6PTUK4DVEpgzWuNrN4eR2OKSe9+ /9T1OEvyMGWihTZe1HmtiUes29oIRL2D1YjLtqRRs1IlH0dycwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ1sj521PwePLCAGQfZ4gkG2LHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGM4OTUzNDItNWEwNi0z NDMyLTg1NDMtN2QyMzU0ZGI5M2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQiJ02hrCPq8bIP287/4HvpCgrfXfpu2Mn0+yfHs14sxGgrFH4JZkrn rOBF241YnYJvxCB1SQ68THefGtWgd0+FsWU4+7vOU6I5vytnBUecn5ThzvisAkEw BtR5QirMHmr0TZjVt7zaZ1ELQTwE3C5k5NTXR3BUTNNTGmY8TfHwPEBcEQV322v7 6Lsoa6ySwZzvgcVGxxdgb6j1Ey7cRa0O7FqgZAS+pGicjbE+s0DWPyO9S47PJlQ8 gFKrPTtRPGaJvFE3XVIeO1yJ2JmBFgUDF4D742Q54xmveXTMb7YzEDct6PUABA6D BJRSFvgvdx4KAFOIyzesF1eu8Wcy+y8= -----END CERTIFICATE-----Generated at Sun Apr 27 16:33:16 2025 by rpki-client