$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa File: b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa (raw, json) Hash identifier: JbUXZ4tvlmwo8b6qwgG2jGtUPgAoAbKkrlySccB7esQ= Subject key identifier: 89:6F:E0:EB:1A:9C:AE:9D:61:89:A8:2B:9D:98:C2:83:EB:46:AE:EE Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584900216D0ED11ADA08D1AA233B Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 7018 IP address blocks: 208.66.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:6d:0e:d1:1a:da:08:d1:aa:23:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=57794641-9ea2-4762-acd0-a1152fa26a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:02:da:a6:83:64:54:cf:c4:ca:bb:eb:d7:2a: a6:2a:42:4f:97:e6:45:1b:b8:1d:ed:f6:94:9a:c2: 59:84:e1:c3:ee:64:41:e1:dc:28:83:37:01:4f:91: d8:22:b5:23:d2:5a:4e:1a:07:b4:6f:38:20:71:6a: b4:7f:0c:8c:af:3f:57:9b:ee:e2:4b:1b:43:7e:f3: 98:d8:b5:60:f1:1c:0e:a1:c7:62:85:86:15:86:cc: d3:ad:e3:9f:f4:ca:6a:fb:6d:fb:1a:50:d8:8f:a2: 57:ce:de:9f:ff:5b:8f:a0:3f:ab:df:4a:34:8a:36: b1:69:16:c1:64:88:70:f0:bb:69:8a:f4:3b:d6:43: da:c7:ea:a1:3b:29:70:34:94:f6:87:cd:78:33:d8: 21:83:c2:50:82:cf:94:59:74:01:cb:c8:41:91:f4: 59:4d:b2:02:05:7e:36:3a:3d:a1:5c:ee:41:70:9d: e1:79:a1:b4:d9:33:4e:ca:be:c4:51:8e:fe:84:f1: 16:89:24:17:41:8e:12:72:92:98:ce:62:34:7b:64: 28:43:ed:8e:07:b9:3b:6d:3e:3c:f8:4c:33:2f:4d: c0:3f:d3:33:d6:b5:4a:0e:36:e0:09:fe:79:55:23: e8:4a:12:a0:fb:fc:56:28:e4:57:0d:ef:e8:1b:32: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6F:E0:EB:1A:9C:AE:9D:61:89:A8:2B:9D:98:C2:83:EB:46:AE:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b4947faa-c8a9-3c4a-a712-a7321ea1595c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 208.66.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d9:0a:4f:fd:44:1e:e2:e2:19:c3:80:a9:c5:57:cc:5c:76: d8:6c:a0:f3:7e:c7:d3:93:e2:a5:79:1d:80:e0:6d:1a:d6:b9: 8c:db:6d:52:50:4d:70:04:7e:f1:78:60:f7:2e:c4:17:72:06: 54:97:76:9e:fc:88:63:df:25:61:e7:1a:3d:54:0f:de:06:e7: 3b:dc:be:be:13:39:9e:38:c2:f0:45:a9:20:1c:67:91:01:13: 27:21:89:2a:ba:19:d2:59:20:10:7a:7f:d9:84:53:0e:c4:6f: 6c:9a:b0:19:01:d0:a4:fa:e9:a0:73:03:25:d2:83:65:ce:37: 55:e6:87:83:ef:83:7c:0f:04:84:cc:0c:46:98:6c:b4:e7:e9: 5d:f6:42:00:b6:11:01:66:50:8c:6b:85:8f:ea:d9:7e:b1:ea: b9:ec:72:9f:68:73:fc:7c:59:72:78:b8:16:0d:fe:5a:44:7a: a9:b1:26:c9:81:9c:aa:e4:74:3a:83:06:19:12:14:a8:53:6c: 3f:e9:fe:87:ed:10:4b:44:8b:41:dd:c3:1e:fe:8a:f7:93:3d: ed:26:06:33:1d:6a:d6:ea:37:26:06:26:30:6d:29:64:16:a4: ba:53:5c:66:b0:dd:10:83:ca:16:a5:3c:ef:4d:25:bf:a4:b3: c2:ae:b4:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIW0O0RraCNGqIzswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk NTc3OTQ2NDEtOWVhMi00NzYyLWFjZDAtYTExNTJmYTI2YTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwLapoNkVM/Eyrvr1yqmKkJPl+ZFG7gd7faU msJZhOHD7mRB4dwogzcBT5HYIrUj0lpOGge0bzggcWq0fwyMrz9Xm+7iSxtDfvOY 2LVg8RwOocdihYYVhszTreOf9Mpq+237GlDYj6JXzt6f/1uPoD+r30o0ijaxaRbB ZIhw8LtpivQ71kPax+qhOylwNJT2h814M9ghg8JQgs+UWXQBy8hBkfRZTbICBX42 Oj2hXO5BcJ3heaG02TNOyr7EUY7+hPEWiSQXQY4ScpKYzmI0e2QoQ+2OB7k7bT48 +EwzL03AP9Mz1rVKDjbgCf55VSPoShKg+/xWKORXDe/oGzK3wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlv4OsanK6dYYmoK52YwoPrRq7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvYjQ5NDdmYWEtYzhhOS0z YzRhLWE3MTItYTczMjFlYTE1OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzZCk/9RB7i4hnDgKnFV8xcdthsoPN+x9OT4qV5HYDgbRrWuYzbbVJQ TXAEfvF4YPcuxBdyBlSXdp78iGPfJWHnGj1UD94G5zvcvr4TOZ44wvBFqSAcZ5EB EychiSq6GdJZIBB6f9mEUw7Eb2yasBkB0KT66aBzAyXSg2XON1Xmh4Pvg3wPBITM DEaYbLTn6V32QgC2EQFmUIxrhY/q2X6x6rnscp9oc/x8WXJ4uBYN/lpEeqmxJsmB nKrkdDqDBhkSFKhTbD/p/oftEEtEi0Hdwx7+iveTPe0mBjMdatbqNyYGJjBtKWQW pLpTXGaw3RCDyhalPO9NJb+ks8KutBE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:16:22 2025 by rpki-client