$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3ce328d-8399-3c94-b7be-0531caa32867.roa File: f3ce328d-8399-3c94-b7be-0531caa32867.roa (raw, json) Hash identifier: FhIrPfF/GNpt0G7mnXltqCdg6wzDyrtoMIRAN+5yIvU= Subject key identifier: 74:D8:DD:D6:1C:14:F4:D5:B6:6A:54:E1:FA:FC:E5:7C:38:A2:23:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA4D179CC35E7BD2BFB5C90 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3ce328d-8399-3c94-b7be-0531caa32867.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 21508 IP address blocks: 76.111.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:d1:79:cc:35:e7:bd:2b:fb:5c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=486d8559-09a1-487b-8170-e7d21915e61b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ad:75:1a:40:b1:75:c3:07:9c:2f:9e:ce:35: 4d:f7:01:24:ce:76:a0:29:ae:96:8d:93:85:8e:1b: 61:74:8f:de:12:51:8b:b7:7b:77:f6:27:e0:12:78: 33:c4:dd:4f:8d:74:ed:8a:51:f9:3e:01:6b:23:25: 34:0a:4f:33:50:57:11:91:8a:c0:24:1a:bc:a9:fb: bb:f9:1a:0a:ee:11:0a:28:0b:18:34:3c:8f:a4:96: d2:8a:5b:93:eb:5a:d7:fd:12:e4:1a:e9:36:fd:f3: b0:41:6b:c8:0c:76:b8:da:78:e9:66:4b:66:bd:20: 6f:bf:82:0b:3a:12:60:cb:c3:94:64:98:a2:c1:98: ec:86:17:b7:ba:e2:a4:cd:26:db:69:7f:88:5b:9b: 20:26:ba:7e:c6:98:09:43:22:72:ff:4a:26:a7:69: 56:55:44:58:17:d8:86:c1:1d:90:3e:49:fc:9c:72: 75:37:78:96:a2:a0:9f:96:d4:41:ff:94:1f:cc:a2: e0:1c:89:99:e7:be:b4:37:36:e2:e2:8d:ac:0e:53: ca:c5:4c:2b:64:6e:6c:31:01:3e:63:21:6e:74:14: 58:6a:6d:a6:b1:6e:9d:9a:a6:5e:a8:4c:f8:df:c8: 97:64:4c:d8:0f:c0:b5:ce:34:e1:47:50:20:7b:8b: c3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D8:DD:D6:1C:14:F4:D5:B6:6A:54:E1:FA:FC:E5:7C:38:A2:23:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3ce328d-8399-3c94-b7be-0531caa32867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.111.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ce:32:58:9a:cd:10:5e:da:27:84:d4:33:71:f4:40:6b:bd: 09:ab:ba:18:e0:e1:96:22:fb:24:08:e8:a8:ca:b3:8b:af:5f: 62:d4:fa:82:de:11:9d:5b:b1:46:8b:9b:6c:d6:04:b1:3a:fc: 7f:c3:48:28:8d:a5:76:cb:ec:40:c2:a6:c7:aa:03:c8:c0:aa: 12:fa:b0:dd:cc:07:01:bf:bf:c9:6a:52:4c:7c:f5:fa:88:ab: 45:80:54:1f:59:9d:ad:81:f1:0b:82:96:29:f7:ef:9b:70:64: 44:41:03:80:de:55:3e:d7:bd:72:25:05:f6:44:00:9d:82:b6: 93:b9:61:17:3b:88:83:eb:96:25:06:bf:b2:20:71:ba:ff:12: ea:41:6e:36:d2:f9:79:02:e1:f8:2e:d1:9e:8c:5a:f3:ad:c9: 03:67:dd:7b:74:3a:38:ec:65:ac:e5:37:be:cb:c6:64:49:8c: e6:f4:a5:a6:cf:85:25:21:53:76:55:91:6b:68:0c:c4:02:f2: 99:00:11:79:56:f7:f6:80:81:c4:2b:80:41:62:9e:ac:3c:11: 6b:f3:56:48:46:c9:e2:39:dc:4e:18:97:7c:f3:c1:1e:17:c6: 5a:2d:17:79:55:68:15:c4:a7:df:b2:d2:da:f5:cd:bf:71:e5: a5:5b:ae:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pNF5zDXnvSv7XJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NDg2ZDg1NTktMDlhMS00ODdiLTgxNzAtZTdkMjE5MTVlNjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq11GkCxdcMHnC+ezjVN9wEkznagKa6WjZOF jhthdI/eElGLt3t39ifgEngzxN1PjXTtilH5PgFrIyU0Ck8zUFcRkYrAJBq8qfu7 +RoK7hEKKAsYNDyPpJbSiluT61rX/RLkGuk2/fOwQWvIDHa42njpZktmvSBvv4IL OhJgy8OUZJiiwZjshhe3uuKkzSbbaX+IW5sgJrp+xpgJQyJy/0omp2lWVURYF9iG wR2QPkn8nHJ1N3iWoqCfltRB/5QfzKLgHImZ5760Nzbi4o2sDlPKxUwrZG5sMQE+ YyFudBRYam2msW6dmqZeqEz438iXZEzYD8C1zjThR1Age4vD0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTY3dYcFPTVtmpU4fr85Xw4oiPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjNjZTMyOGQtODM5OS0z Yzk0LWI3YmUtMDUzMWNhYTMyODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETG+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDOMliazRBe2ieE1DNx9EBrvQmruhjg4ZYi+yQI6KjKs4uvX2LU+oLe EZ1bsUaLm2zWBLE6/H/DSCiNpXbL7EDCpseqA8jAqhL6sN3MBwG/v8lqUkx89fqI q0WAVB9Zna2B8QuClin375twZERBA4DeVT7XvXIlBfZEAJ2CtpO5YRc7iIPrliUG v7Igcbr/EupBbjbS+XkC4fgu0Z6MWvOtyQNn3Xt0OjjsZazlN77LxmRJjOb0pabP hSUhU3ZVkWtoDMQC8pkAEXlW9/aAgcQrgEFinqw8EWvzVkhGyeI53E4Yl3zzwR4X xlotF3lVaBXEp9+y0tr1zb9x5aVbrrs= -----END CERTIFICATE-----Generated at Sun May 11 00:52:43 2025 by rpki-client