$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7aeec8f8-a74d-36b7-b282-2769a3d5d716.roa File: 7aeec8f8-a74d-36b7-b282-2769a3d5d716.roa (raw, json) Hash identifier: wVWzannO88qrW/4ZwUQ7Vc8ZFXf2XX3NNeyHlJ+7tNs= Subject key identifier: B8:5E:B5:25:0D:E1:DB:53:19:C3:24:A9:DD:01:06:51:9D:65:3F:B0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA68CB5046C6F2DD34BBF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7aeec8f8-a74d-36b7-b282-2769a3d5d716.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 13367 IP address blocks: 76.17.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:8c:b5:04:6c:6f:2d:d3:4b:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=c40f30f8-b009-4a8e-b818-20121b293769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:de:42:49:58:5c:d0:f5:37:4f:92:ff:4c: 52:36:c7:e0:29:8a:39:73:ed:39:be:17:4a:45:a3: b7:08:d8:4a:dc:e1:f7:03:0f:0f:59:d9:ea:d7:88: 1c:01:b4:83:9e:f2:fe:7b:27:44:c8:51:93:60:ad: 85:ba:cb:f3:45:89:bf:52:ed:9c:c0:bd:50:87:b6: 1e:e3:3e:31:ea:85:d4:09:02:7e:58:ed:05:e6:ca: 8e:53:57:5a:7c:8e:7c:cf:50:9f:36:d1:b3:ec:0e: 32:db:0e:8a:06:ef:d0:83:28:95:7d:ca:dc:77:4a: 55:25:eb:87:ff:2d:c6:43:39:12:64:5a:b9:62:4e: cf:ad:26:72:f5:2b:bb:80:47:18:48:97:2f:da:0e: ac:8b:bd:e1:fe:51:c8:3e:52:e6:a0:4a:77:9a:f1: 38:7a:a3:03:1c:1c:3e:7e:af:49:1d:5f:14:90:5c: 99:ff:c0:bf:f2:30:00:e2:e7:92:d0:1f:06:5b:16: 71:53:15:e9:cf:59:17:7e:43:a0:b5:d0:bf:01:54: 91:ba:33:27:e2:23:76:dd:77:6e:c9:d4:c4:f5:48: 91:3a:7d:e8:23:0e:fb:cb:73:58:54:7e:e0:d3:dd: fa:67:0a:6d:a9:0c:13:c6:ed:cb:e6:4b:93:8d:58: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:5E:B5:25:0D:E1:DB:53:19:C3:24:A9:DD:01:06:51:9D:65:3F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7aeec8f8-a74d-36b7-b282-2769a3d5d716.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.17.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:9b:80:07:27:47:ec:40:f6:e0:9d:c7:79:10:5a:a5:63:43: 6c:7f:56:a9:08:f9:f3:37:2b:25:4c:f9:ea:08:33:37:86:f9: b7:02:58:dc:09:69:94:05:02:d4:29:2b:dd:7f:1f:09:40:1a: c8:78:cd:59:85:ac:be:38:be:10:1d:25:b3:ed:d0:07:ba:ff: 15:b6:60:cc:68:46:aa:be:d2:ec:90:79:e4:55:d1:4c:98:f8: 26:24:34:0b:14:d9:14:60:00:6c:c1:89:65:81:24:3c:76:d4: 77:ab:20:d3:a3:cd:8a:91:01:c0:11:12:fd:e6:b6:20:eb:b3: 44:80:43:77:12:c5:75:a8:16:66:b1:8d:05:cd:41:88:0f:77: a7:4d:c4:84:5e:25:11:52:9f:73:45:c8:1d:c7:1a:38:28:e3: 63:d6:f1:25:f4:e3:82:d1:fb:9b:7c:c0:9b:0d:ca:01:e8:40: a1:20:bf:41:5b:c4:d9:48:92:05:b9:65:7e:20:23:81:43:54: 7b:b3:bf:42:38:88:c5:87:3f:6d:32:a5:09:85:8a:2a:00:f1: 0d:09:e6:e4:03:a6:be:5d:18:71:63:7f:e6:df:9e:54:99:54: e2:cd:31:df:54:70:47:8b:d6:02:57:11:ae:4c:01:01:4e:ea: ac:28:27:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9poy1BGxvLdNLv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzQwZjMwZjgtYjAwOS00YThlLWI4MTgtMjAxMjFiMjkzNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrXeQklYXND1N0+S/0xSNsfgKYo5c+05vhdK RaO3CNhK3OH3Aw8PWdnq14gcAbSDnvL+eydEyFGTYK2FusvzRYm/Uu2cwL1Qh7Ye 4z4x6oXUCQJ+WO0F5sqOU1dafI58z1CfNtGz7A4y2w6KBu/QgyiVfcrcd0pVJeuH /y3GQzkSZFq5Yk7PrSZy9Su7gEcYSJcv2g6si73h/lHIPlLmoEp3mvE4eqMDHBw+ fq9JHV8UkFyZ/8C/8jAA4ueS0B8GWxZxUxXpz1kXfkOgtdC/AVSRujMn4iN23Xdu ydTE9UiROn3oIw77y3NYVH7g0936ZwptqQwTxu3L5kuTjVhQbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhetSUN4dtTGcMkqd0BBlGdZT+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2FlZWM4ZjgtYTc0ZC0z NmI3LWIyODItMjc2OWEzZDVkNzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTBH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqbgAcnR+xA9uCdx3kQWqVjQ2x/VqkI+fM3KyVM+eoIMzeG+bcCWNwJ aZQFAtQpK91/HwlAGsh4zVmFrL44vhAdJbPt0Ae6/xW2YMxoRqq+0uyQeeRV0UyY +CYkNAsU2RRgAGzBiWWBJDx21HerINOjzYqRAcAREv3mtiDrs0SAQ3cSxXWoFmax jQXNQYgPd6dNxIReJRFSn3NFyB3HGjgo42PW8SX044LR+5t8wJsNygHoQKEgv0Fb xNlIkgW5ZX4gI4FDVHuzv0I4iMWHP20ypQmFiioA8Q0J5uQDpr5dGHFjf+bfnlSZ VOLNMd9UcEeL1gJXEa5MAQFO6qwoJ+A= -----END CERTIFICATE-----Generated at Sat May 10 04:51:24 2025 by rpki-client