$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df120d9a-c250-3e11-a401-251a5f83547e.roa File: df120d9a-c250-3e11-a401-251a5f83547e.roa (raw, json) Hash identifier: TNfGztHNdwUVxaoc5wK0Vt38uyrG8GJ3wJ4Lb/E5xbc= Subject key identifier: 94:25:CC:B3:E1:58:40:B4:0A:74:94:CF:2C:8D:AB:39:1D:25:32:64 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285849C20AC2330A330979EC3D4100 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df120d9a-c250-3e11-a401-251a5f83547e.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 10796 IP address blocks: 76.57.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:c2:33:0a:33:09:79:ec:3d:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=ab549a66-d1cd-4c74-b0e3-294568152e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:09:92:fb:b7:5c:88:f9:56:cc:f3:b1:78:ed: d1:15:22:ec:4e:65:23:42:2d:0a:dc:ee:1d:21:2e: 8a:ba:19:b6:00:56:38:ee:13:87:3f:ae:7d:06:cd: 67:e0:54:a0:38:1b:d5:12:86:06:b2:4c:55:02:1c: 42:85:97:da:16:75:35:ee:38:81:28:5a:e6:77:ef: 92:b8:f8:8f:6c:f1:9e:97:a2:c5:8a:eb:dc:45:32: 3d:dd:35:01:86:6d:c2:47:cc:a8:c1:9c:f0:21:ff: 8f:7a:d9:91:b8:6c:0e:9a:84:ac:ef:7b:2f:ec:0c: 90:e6:4b:54:42:20:bc:69:d6:1e:3f:c6:d0:01:d1: 09:e3:4b:c3:05:a5:f0:b0:35:cd:99:27:f1:0c:e8: 46:64:cd:ca:b0:22:1a:d4:aa:42:f2:4d:bd:75:4b: 92:7c:f8:4d:bc:60:ef:79:9e:78:c8:cd:49:17:b7: e5:59:08:cb:c7:1a:65:c4:9d:21:8d:52:66:8a:3e: f9:de:1b:aa:08:05:29:46:84:cb:c0:61:89:ca:dd: 2d:d9:2e:5b:2d:34:52:d8:a0:6c:19:b5:d6:a3:e9: 6c:76:a7:e3:08:c9:a9:ed:e7:1e:7e:e7:98:ac:27: b8:ae:60:7d:9b:a7:b3:77:01:7b:65:19:b1:86:32: d7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:25:CC:B3:E1:58:40:B4:0A:74:94:CF:2C:8D:AB:39:1D:25:32:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df120d9a-c250-3e11-a401-251a5f83547e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 76.57.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:7a:fe:cb:6d:dc:2c:83:7b:6c:19:5d:5b:28:41:93:b5:53: 27:1c:0e:8d:01:c5:a2:6e:08:fc:9b:5f:8c:7b:a6:e7:2f:07: e9:bd:80:f5:61:cb:9d:43:af:cf:d9:27:26:e9:0d:b8:f2:9d: c6:56:31:a4:f6:04:f9:de:88:ac:9d:7f:74:13:36:0b:b5:fe: 57:d8:cd:2c:32:31:ff:cf:f3:bd:5a:2c:65:96:18:d6:d8:41: 4b:18:76:b8:0c:bb:5c:af:70:03:95:09:40:6a:24:c7:ef:40: 3a:ec:8c:63:d4:cd:ae:12:05:f4:01:55:67:2f:3b:2a:98:d6: cd:fb:bd:66:e3:5b:55:e4:26:65:9b:1b:c3:eb:2a:0c:d2:ba: 81:9d:ed:c8:93:29:0a:8b:ce:7f:6b:69:95:cb:2c:64:73:f0: c5:3f:d6:49:89:f1:af:29:61:1f:4e:48:d5:cf:18:a7:95:e9: be:eb:e9:7f:cf:c1:33:8f:f8:d0:51:6a:ae:b6:ea:26:84:71: a2:15:92:37:09:6a:00:34:4b:aa:4d:04:47:20:43:f2:56:d6: 0c:bc:f5:b8:4d:32:37:d1:34:81:c6:7e:21:ef:79:30:0d:0b: 17:29:83:b0:12:37:83:6a:30:83:65:d5:c4:a2:b9:d8:de:53: a2:45:40:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCsIzCjMJeew9QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YWI1NDlhNjYtZDFjZC00Yzc0LWIwZTMtMjk0NTY4MTUyZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwmS+7dciPlWzPOxeO3RFSLsTmUjQi0K3O4d IS6Kuhm2AFY47hOHP659Bs1n4FSgOBvVEoYGskxVAhxChZfaFnU17jiBKFrmd++S uPiPbPGel6LFiuvcRTI93TUBhm3CR8yowZzwIf+PetmRuGwOmoSs73sv7AyQ5ktU QiC8adYeP8bQAdEJ40vDBaXwsDXNmSfxDOhGZM3KsCIa1KpC8k29dUuSfPhNvGDv eZ54yM1JF7flWQjLxxplxJ0hjVJmij753huqCAUpRoTLwGGJyt0t2S5bLTRS2KBs GbXWo+lsdqfjCMmp7ecefueYrCe4rmB9m6ezdwF7ZRmxhjLXkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQlzLPhWEC0CnSUzyyNqzkdJTJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZGYxMjBkOWEtYzI1MC0z ZTExLWE0MDEtMjUxYTVmODM1NDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATDmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB6/stt3CyDe2wZXVsoQZO1UyccDo0BxaJuCPybX4x7pucvB+m9gPVh y51Dr8/ZJybpDbjyncZWMaT2BPneiKydf3QTNgu1/lfYzSwyMf/P871aLGWWGNbY QUsYdrgMu1yvcAOVCUBqJMfvQDrsjGPUza4SBfQBVWcvOyqY1s37vWbjW1XkJmWb G8PrKgzSuoGd7ciTKQqLzn9raZXLLGRz8MU/1kmJ8a8pYR9OSNXPGKeV6b7r6X/P wTOP+NBRaq626iaEcaIVkjcJagA0S6pNBEcgQ/JW1gy89bhNMjfRNIHGfiHveTAN Cxcpg7ASN4NqMINl1cSiudjeU6JFQAQ= -----END CERTIFICATE-----Generated at Sun May 11 15:32:38 2025 by rpki-client