$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1164f4f-5ff5-3e08-8c59-340706b616dd.roa File: e1164f4f-5ff5-3e08-8c59-340706b616dd.roa (raw, json) Hash identifier: S6s3GBm/cjTPyV0nZjsVZmTt8fiQZUshMu+o9klilLg= Subject key identifier: D9:D4:CB:0F:AF:BB:80:A4:E7:4B:8D:E5:85:DA:D7:C2:9F:2C:EB:0F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB14C190C8DEBB92EEE9800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1164f4f-5ff5-3e08-8c59-340706b616dd.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 76.157.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:4c:19:0c:8d:eb:b9:2e:ee:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f1a6f981-dbcf-4026-8f80-76819cd547cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0e:55:13:72:48:4c:10:18:36:85:e9:a3:e4: ef:4c:6c:1b:bb:f9:c9:bf:91:dd:ce:21:c3:f5:54: ef:46:6c:af:c5:58:e4:23:82:91:3d:08:ff:74:44: 54:5c:1b:96:49:41:70:37:4c:72:57:e3:16:58:6d: a0:23:b1:25:d4:b6:ce:bd:48:76:5e:f5:a8:33:8c: 04:e5:3d:df:65:75:5d:79:6d:77:dc:55:fe:35:71: b4:8b:8e:bc:f7:4f:ba:83:54:9a:19:9d:6e:54:2b: 7a:30:02:26:5b:3b:46:a3:ee:d6:98:40:74:43:06: 79:f9:53:53:1c:25:05:f2:f6:cf:59:c8:04:89:b8: 2e:0f:bd:c2:01:c6:80:e6:78:44:fe:73:6e:20:51: 07:14:ee:4d:d3:b3:c2:f4:d9:b4:08:fa:86:20:70: 89:10:bf:a9:e3:0b:e7:11:d3:4c:2b:a1:92:15:54: 04:cb:85:b5:3c:56:e7:a2:42:28:aa:12:3e:28:bd: c9:62:11:88:22:88:2f:67:53:dc:c8:33:fd:f2:f2: f6:d3:aa:05:4e:ab:08:f2:97:2f:82:21:b8:0c:22: 98:37:79:0b:1e:54:88:73:77:3c:0d:1a:6e:4a:69: 57:86:3c:27:52:d1:a8:94:72:67:32:76:df:07:3e: 79:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D4:CB:0F:AF:BB:80:A4:E7:4B:8D:E5:85:DA:D7:C2:9F:2C:EB:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1164f4f-5ff5-3e08-8c59-340706b616dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.157.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:db:74:48:d6:cc:08:80:30:81:9f:62:2b:c1:12:3d:72:bd: 6c:e0:d9:75:60:be:9e:72:af:f3:bc:cd:69:d3:95:95:53:95: 93:fd:20:4c:25:a2:a8:2e:69:45:46:a1:ee:45:83:38:48:c2: c1:31:d9:1b:e1:20:1f:49:e6:ea:9a:1b:4e:65:e9:86:e9:d0: 09:5c:54:6e:94:ba:79:85:2b:79:26:3e:e2:9b:e9:fb:a0:a2: 14:fe:4b:a2:f7:8e:d9:64:f0:67:41:32:8c:9f:9e:cd:fe:7c: 74:eb:4e:a9:72:4f:37:5b:e6:25:8e:25:41:f6:10:3d:be:f9: eb:ee:4d:3d:ba:34:2b:96:6f:84:37:97:3a:6e:10:66:22:86: 24:40:fe:da:e1:04:e6:17:31:d7:e0:a7:f0:ef:74:81:ad:a7: 1b:86:0b:5f:f3:a9:57:c6:fc:af:6a:3b:8a:54:df:1d:bc:45: b9:5c:2e:af:4c:0b:8b:bc:67:f2:23:af:63:34:57:54:c0:6a: a4:68:08:27:71:a5:43:8b:ee:7f:d2:ae:74:e6:b4:12:ff:79: b6:e5:45:e6:50:aa:43:bd:10:c6:57:36:d5:a7:fe:99:93:f1: 64:ec:4a:aa:49:d3:7f:91:14:ef:ca:3c:a7:9c:88:34:cc:58: d2:50:10:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssUwZDI3ruS7umAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjFhNmY5ODEtZGJjZi00MDI2LThmODAtNzY4MTljZDU0N2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw5VE3JITBAYNoXpo+TvTGwbu/nJv5HdziHD 9VTvRmyvxVjkI4KRPQj/dERUXBuWSUFwN0xyV+MWWG2gI7El1LbOvUh2XvWoM4wE 5T3fZXVdeW133FX+NXG0i46890+6g1SaGZ1uVCt6MAImWztGo+7WmEB0QwZ5+VNT HCUF8vbPWcgEibguD73CAcaA5nhE/nNuIFEHFO5N07PC9Nm0CPqGIHCJEL+p4wvn EdNMK6GSFVQEy4W1PFbnokIoqhI+KL3JYhGIIogvZ1PcyDP98vL206oFTqsI8pcv giG4DCKYN3kLHlSIc3c8DRpuSmlXhjwnUtGolHJnMnbfBz55PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnUyw+vu4Ck50uN5YXa18KfLOsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTExNjRmNGYtNWZmNS0z ZTA4LThjNTktMzQwNzA2YjYxNmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJ2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/bdEjWzAiAMIGfYivBEj1yvWzg2XVgvp5yr/O8zWnTlZVTlZP9IEwl oqguaUVGoe5FgzhIwsEx2RvhIB9J5uqaG05l6Ybp0AlcVG6UunmFK3kmPuKb6fug ohT+S6L3jtlk8GdBMoyfns3+fHTrTqlyTzdb5iWOJUH2ED2++evuTT26NCuWb4Q3 lzpuEGYihiRA/trhBOYXMdfgp/DvdIGtpxuGC1/zqVfG/K9qO4pU3x28RblcLq9M C4u8Z/Ijr2M0V1TAaqRoCCdxpUOL7n/SrnTmtBL/ebblReZQqkO9EMZXNtWn/pmT 8WTsSqpJ03+RFO/KPKeciDTMWNJQEAY= -----END CERTIFICATE-----Generated at Sun Apr 27 16:35:43 2025 by rpki-client