$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/95d7152e-c6b8-348b-8dde-e12c279be0ff.roa File: 95d7152e-c6b8-348b-8dde-e12c279be0ff.roa (raw, json) Hash identifier: +GYVqru1fut7zEwM8hwAAme+fQGt92ZN9JTJHXQiQAk= Subject key identifier: 95:9E:F3:D5:EC:A4:DD:1B:E7:70:71:1B:A6:21:20:DC:BA:08:6D:31 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584993F9DBD38CF973DB2A726EA0 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/95d7152e-c6b8-348b-8dde-e12c279be0ff.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 395506 IP address blocks: 76.8.20.0/23 maxlen: 24 76.8.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:db:d3:8c:f9:73:db:2a:72:6e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=06655477-eccd-4149-b057-980166eca7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6f:87:a0:90:4b:9c:04:e2:75:4e:0a:02:69: 6b:16:fe:4a:5e:d9:58:b8:a1:da:9a:ab:f8:b3:c8: ed:37:a3:0e:ae:0f:7a:74:59:88:ef:19:c5:eb:97: a9:1d:65:a1:98:28:db:c9:e5:9a:27:2b:c1:76:be: 6b:c3:2e:02:bf:8f:fb:af:16:69:d6:a7:c8:5a:75: 66:27:0c:2b:d7:d0:a4:d5:81:24:e7:66:9f:0e:a1: fb:9b:67:b3:c5:ab:50:84:f3:5a:9d:73:8a:2d:b9: 94:96:19:ea:6a:db:34:bc:b9:28:50:b5:66:26:b0: 57:10:bb:c0:94:f4:f1:7d:09:ff:c1:de:65:5c:c6: 1f:6a:38:a2:bf:8c:0f:e9:b8:bf:78:90:18:d2:39: 3a:83:c3:fc:49:d1:1c:cc:8e:a7:8b:d8:2a:5a:3f: 0d:8b:e1:f8:ae:66:4a:cb:93:ea:b0:49:38:b9:4e: 19:24:15:66:db:08:e6:91:d0:36:9d:6c:03:7e:95: bd:6a:db:b9:f3:40:be:5b:c5:88:73:ce:e6:29:c1: 82:8d:02:07:70:b8:89:d4:d8:b7:32:df:1b:9e:66: 58:5e:79:c7:0f:b7:57:60:39:9b:4d:2d:d8:33:e1: a1:de:b3:d3:02:9f:4b:09:2c:ef:22:27:37:48:73: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9E:F3:D5:EC:A4:DD:1B:E7:70:71:1B:A6:21:20:DC:BA:08:6D:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/95d7152e-c6b8-348b-8dde-e12c279be0ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 76.8.20.0/23 76.8.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:5d:a8:6c:9c:77:f5:b0:62:77:08:4f:3c:73:db:3e:e4:aa: 4e:7b:9f:f4:98:dd:3c:01:6a:23:b4:fb:07:6e:13:52:05:b3: d5:1c:9f:21:ea:36:70:71:c0:c8:e9:a8:71:57:cb:0f:39:3e: 61:d7:06:a1:58:be:56:d2:74:34:c4:59:c5:3f:46:b3:9f:3b: 96:44:9e:02:8c:58:2c:1d:50:23:15:04:0c:1d:8b:bd:cd:cf: 9f:2d:e6:9c:61:de:9e:ce:3f:a1:05:ce:35:99:2d:92:8e:51: db:1b:f5:40:97:58:dc:c9:94:ec:8a:cd:58:bf:f8:88:56:f7: 47:fd:58:19:8b:e6:3b:2c:3a:ca:eb:e8:7f:78:6b:36:0e:0f: db:f1:01:96:3f:21:c7:cc:4e:a6:ca:83:a7:70:be:21:81:ea: 54:28:74:c5:e6:52:cc:8a:ef:a1:52:84:d4:e5:9e:e0:0f:c3: 85:8b:40:cb:0a:2a:4e:f0:fd:03:02:ce:7b:4e:ac:3b:df:63: 2f:1f:71:88:e7:91:7b:e0:cf:5a:30:8d:8e:bf:fc:4a:5e:b9: 65:b7:d8:7a:bc:92:16:9c:17:f3:f3:ef:78:fa:4a:05:42:10: 2f:f3:e7:16:1c:2a:c5:7a:d1:71:1f:00:e7:3f:2a:40:d5:35: ab:cb:f8:6e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmT+dvTjPlz2ypybqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk MDY2NTU0NzctZWNjZC00MTQ5LWIwNTctOTgwMTY2ZWNhN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2+HoJBLnATidU4KAmlrFv5KXtlYuKHamqv4 s8jtN6MOrg96dFmI7xnF65epHWWhmCjbyeWaJyvBdr5rwy4Cv4/7rxZp1qfIWnVm Jwwr19Ck1YEk52afDqH7m2ezxatQhPNanXOKLbmUlhnqats0vLkoULVmJrBXELvA lPTxfQn/wd5lXMYfajiiv4wP6bi/eJAY0jk6g8P8SdEczI6ni9gqWj8Ni+H4rmZK y5PqsEk4uU4ZJBVm2wjmkdA2nWwDfpW9atu580C+W8WIc87mKcGCjQIHcLiJ1Ni3 Mt8bnmZYXnnHD7dXYDmbTS3YM+Gh3rPTAp9LCSzvIic3SHMlaQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJWe89XspN0b53BxG6YhINy6CG0xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvOTVkNzE1MmUtYzZiOC0z NDhiLThkZGUtZTEyYzI3OWJlMGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTAgUAwQB TAgaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJhdqGycd/WwYncITzxz2z7kqk57n/SY3TwBaiO0+wduE1IF s9UcnyHqNnBxwMjpqHFXyw85PmHXBqFYvlbSdDTEWcU/RrOfO5ZEngKMWCwdUCMV BAwdi73Nz58t5pxh3p7OP6EFzjWZLZKOUdsb9UCXWNzJlOyKzVi/+IhW90f9WBmL 5jssOsrr6H94azYOD9vxAZY/IcfMTqbKg6dwviGB6lQodMXmUsyK76FShNTlnuAP w4WLQMsKKk7w/QMCzntOrDvfYy8fcYjnkXvgz1owjY6//EpeuWW32Hq8khacF/Pz 73j6SgVCEC/z5xYcKsV60XEfAOc/KkDVNavL+G4= -----END CERTIFICATE-----Generated at Mon Apr 28 19:34:36 2025 by rpki-client