$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d60b70f0-4e28-3c8a-bebf-287850b1da79.roa File: d60b70f0-4e28-3c8a-bebf-287850b1da79.roa (raw, json) Hash identifier: 02sLuDRsWclGZXke0jaJRcthgJCvLIJHGTLjefDV54w= Subject key identifier: DF:67:90:72:C5:8B:A5:D9:4E:48:B6:10:C3:9A:30:8C:89:8C:DE:E6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5E56C9E3DD47455434A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d60b70f0-4e28-3c8a-bebf-287850b1da79.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 76.129.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:e5:6c:9e:3d:d4:74:55:43:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=a168792a-3c4c-423c-8601-30b8c2f5bef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:28:fa:0e:31:0d:04:49:b4:0a:e1:0a:fb:53: 74:74:44:90:79:6b:51:b7:27:68:2d:67:20:a0:a7: ee:f8:8f:bd:59:42:da:a3:b2:21:a1:84:14:45:96: db:e0:97:f6:0d:27:c9:b0:51:3d:d4:c1:14:40:06: 3f:63:7c:d3:2e:31:a3:ed:ee:f3:82:b9:08:ca:8d: 58:a5:24:d0:d4:35:20:75:8e:1f:f7:bd:ae:6d:a0: 8a:38:fd:b0:e4:29:9e:fa:0a:73:f6:c3:96:44:f0: 3e:cb:a6:93:6c:0f:49:65:fe:cc:37:dc:08:19:1c: e8:66:63:cb:0e:76:73:8b:e4:bb:b2:d6:bd:49:5b: 36:4b:a1:2d:3c:06:ab:33:80:9c:88:70:73:3c:65: 71:b6:ae:c6:c1:9b:76:fc:24:df:d4:c2:1f:d0:c0: c7:27:db:0e:e4:98:ba:56:00:b7:51:f2:20:29:4a: 80:98:6c:2d:d4:e5:86:92:63:fd:60:53:97:17:35: 49:d0:3e:4e:5b:05:ff:34:8b:7c:03:a0:76:7a:90: 09:89:37:bc:48:26:1b:e3:67:bf:7c:a0:5c:8b:ae: d9:20:5c:9c:34:73:93:72:3d:14:14:e0:52:e0:ea: 6a:20:0d:92:63:1f:b9:ee:47:e5:56:72:c9:83:cd: 70:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:67:90:72:C5:8B:A5:D9:4E:48:B6:10:C3:9A:30:8C:89:8C:DE:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d60b70f0-4e28-3c8a-bebf-287850b1da79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.129.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:85:c2:6f:e4:a4:3a:6d:e6:4f:c2:44:76:4d:6f:a9:24:34: b0:b6:72:a2:ed:94:ed:f8:64:2f:68:0c:00:84:7b:be:85:72: 7d:d0:2f:bf:45:f4:1a:1f:59:88:78:b0:a3:06:1b:b9:88:0e: e7:25:4d:11:04:8e:70:87:13:70:37:1c:ef:3b:64:f1:e9:2f: 5f:2f:36:f9:13:46:eb:3b:c1:5e:e4:c4:51:10:e7:36:21:51: 00:5d:8b:f7:3d:f5:70:85:2b:64:8b:35:3d:9d:05:c3:92:41: c7:4f:e8:9f:c4:1f:e9:be:c6:d0:42:cd:da:74:f9:be:7e:b9: c9:07:ce:40:04:c7:be:8e:01:41:eb:9e:80:4f:36:19:0e:30: ec:9e:eb:5c:3f:da:fe:c8:f2:e3:ff:de:db:32:cf:94:5e:04: 2a:e5:65:f9:07:0d:55:cd:cc:77:63:fa:82:da:ce:e8:0a:cc: 05:06:a8:45:1e:56:de:4b:1a:a4:15:a3:3a:47:bc:cb:85:6d: 72:b0:a6:d0:01:41:05:39:32:6e:08:e4:2f:cc:d0:56:10:e5: 7c:34:11:f2:ea:14:11:d1:ad:ef:1a:64:af:2b:05:b3:4f:74: 1f:33:8c:8f:41:d8:e0:57:77:5e:94:66:8f:35:86:91:4a:40: a9:05:bb:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9peVsnj3UdFVDSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YTE2ODc5MmEtM2M0Yy00MjNjLTg2MDEtMzBiOGMyZjViZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyj6DjENBEm0CuEK+1N0dESQeWtRtydoLWcg oKfu+I+9WULao7IhoYQURZbb4Jf2DSfJsFE91MEUQAY/Y3zTLjGj7e7zgrkIyo1Y pSTQ1DUgdY4f972ubaCKOP2w5Cme+gpz9sOWRPA+y6aTbA9JZf7MN9wIGRzoZmPL DnZzi+S7sta9SVs2S6EtPAarM4CciHBzPGVxtq7GwZt2/CTf1MIf0MDHJ9sO5Ji6 VgC3UfIgKUqAmGwt1OWGkmP9YFOXFzVJ0D5OWwX/NIt8A6B2epAJiTe8SCYb42e/ fKBci67ZIFycNHOTcj0UFOBS4OpqIA2SYx+57kflVnLJg81w7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9nkHLFi6XZTki2EMOaMIyJjN7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDYwYjcwZjAtNGUyOC0z YzhhLWJlYmYtMjg3ODUwYjFkYTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALiFwm/kpDpt5k/CRHZNb6kkNLC2cqLtlO34ZC9oDACEe76Fcn3QL79F 9BofWYh4sKMGG7mIDuclTREEjnCHE3A3HO87ZPHpL18vNvkTRus7wV7kxFEQ5zYh UQBdi/c99XCFK2SLNT2dBcOSQcdP6J/EH+m+xtBCzdp0+b5+uckHzkAEx76OAUHr noBPNhkOMOye61w/2v7I8uP/3tsyz5ReBCrlZfkHDVXNzHdj+oLazugKzAUGqEUe Vt5LGqQVozpHvMuFbXKwptABQQU5Mm4I5C/M0FYQ5Xw0EfLqFBHRre8aZK8rBbNP dB8zjI9B2OBXd16UZo81hpFKQKkFu8g= -----END CERTIFICATE-----Generated at Sat May 10 13:34:41 2025 by rpki-client