$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7145a76b-bc44-3ebb-87cc-73d1eafdc55b.roa File: 7145a76b-bc44-3ebb-87cc-73d1eafdc55b.roa (raw, json) Hash identifier: 4Iaih3bHCotqEoAeLciQU6+7ZKkVX0t39dTo7PfXhKk= Subject key identifier: A6:95:4F:5B:8F:DA:B8:F8:C0:7D:B5:E0:51:60:DC:04:F7:9F:02:14 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642EC38510F152B8822C80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7145a76b-bc44-3ebb-87cc-73d1eafdc55b.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 208.53.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2e:c3:85:10:f1:52:b8:82:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=65db6ee3-fab0-45ff-bb91-9f2dcbf30864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:41:0e:ea:bf:8c:2b:9b:69:3a:bd:cf:9e: a2:80:ab:bc:99:7e:05:fd:1b:13:ca:c0:92:ac:c7: 29:9f:4d:d2:ce:85:30:0e:11:14:1e:e4:71:a9:7a: 13:90:11:98:46:02:bd:15:f9:12:50:2c:94:d6:1e: ae:5b:0f:5f:02:0f:4b:fc:96:3b:3e:cf:68:13:7e: 8f:f7:e3:d5:d5:0d:e7:f1:02:a8:b5:e0:80:b9:1a: b8:41:78:60:1e:3d:d0:d2:c9:b6:2c:38:95:32:fc: 3c:86:a6:ff:73:77:66:bb:07:45:57:e5:74:7d:f5: 93:72:f3:83:ef:21:4f:b6:5c:ee:b4:ef:1c:ce:9f: 35:3b:71:7d:8a:7b:d3:ba:7f:e2:8c:ce:b9:d0:e3: 38:ac:7e:e0:ac:e9:a3:2b:b1:8d:98:97:83:0c:b5: 96:c6:0d:5d:cd:19:58:21:1b:a3:fd:16:64:94:0d: c0:37:44:55:c3:f3:ab:fc:0a:b0:ad:fb:ea:3f:48: e9:b5:fe:95:9e:bc:8b:e5:f3:36:79:08:b2:ff:c4: 26:dc:69:17:bb:3e:ec:36:78:67:0f:c2:12:7c:86: 49:f4:cd:bb:11:6c:d3:6a:7e:a6:64:2b:56:75:80: 7e:44:7b:7a:21:75:6f:0e:4a:07:1a:d3:f0:a9:3d: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:95:4F:5B:8F:DA:B8:F8:C0:7D:B5:E0:51:60:DC:04:F7:9F:02:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7145a76b-bc44-3ebb-87cc-73d1eafdc55b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.53.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:70:fc:65:a7:0c:63:6f:04:cc:b1:a8:43:fc:82:40:45:dc: 5c:e4:25:80:a1:d5:6e:0a:a4:18:07:fb:5e:ef:85:ac:dc:a9: eb:56:82:a3:d3:2e:6d:e4:8b:c7:a0:da:4d:23:a6:db:21:c3: 42:2e:1c:8a:c2:e5:39:3b:cb:8d:a4:2a:48:1a:c9:62:e2:66: 24:47:4c:08:1c:2e:58:ef:49:34:2c:7f:9f:03:0d:23:c7:ec: f8:bd:cf:95:e4:3f:58:cd:f1:75:4f:75:1b:70:ad:3d:8a:f7: 28:2e:a4:79:33:d3:bc:0a:44:1f:de:a4:88:f0:66:32:84:89: 12:3e:b1:13:1d:57:75:9b:f2:21:79:85:2c:fc:af:98:2b:e2: ce:b4:a2:1f:7e:b0:68:fc:ca:d9:c0:ac:c4:7d:3c:75:fb:87: a6:d6:eb:fe:bd:79:f7:38:82:30:2d:c6:f2:64:48:b3:42:bf: 62:56:ab:78:dc:77:d7:99:48:c9:fb:38:0c:22:40:7b:d3:88: 44:6d:7e:56:e0:ba:31:ff:1e:45:48:c5:1a:f1:a4:10:78:34: be:ee:d8:a5:c6:9d:f7:3b:22:0f:a6:38:39:74:30:70:e5:0b: 38:1a:5f:58:24:7d:e6:40:05:3f:0c:0d:82:74:d4:df:52:41: 6a:b1:69:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC7DhRDxUriCLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NjVkYjZlZTMtZmFiMC00NWZmLWJiOTEtOWYyZGNiZjMwODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJZBDuq/jCubaTq9z56igKu8mX4F/RsTysCS rMcpn03SzoUwDhEUHuRxqXoTkBGYRgK9FfkSUCyU1h6uWw9fAg9L/JY7Ps9oE36P 9+PV1Q3n8QKoteCAuRq4QXhgHj3Q0sm2LDiVMvw8hqb/c3dmuwdFV+V0ffWTcvOD 7yFPtlzutO8czp81O3F9invTun/ijM650OM4rH7grOmjK7GNmJeDDLWWxg1dzRlY IRuj/RZklA3AN0RVw/Or/AqwrfvqP0jptf6VnryL5fM2eQiy/8Qm3GkXuz7sNnhn D8ISfIZJ9M27EWzTan6mZCtWdYB+RHt6IXVvDkoHGtPwqT0O5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaVT1uP2rj4wH214FFg3AT3nwIUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNzE0NWE3NmItYmM0NC0z ZWJiLTg3Y2MtNzNkMWVhZmRjNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0DVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9w/GWnDGNvBMyxqEP8gkBF3FzkJYCh1W4KpBgH+17vhazcqetWgqPT Lm3ki8eg2k0jptshw0IuHIrC5Tk7y42kKkgayWLiZiRHTAgcLljvSTQsf58DDSPH 7Pi9z5XkP1jN8XVPdRtwrT2K9ygupHkz07wKRB/epIjwZjKEiRI+sRMdV3Wb8iF5 hSz8r5gr4s60oh9+sGj8ytnArMR9PHX7h6bW6/69efc4gjAtxvJkSLNCv2JWq3jc d9eZSMn7OAwiQHvTiERtflbgujH/HkVIxRrxpBB4NL7u2KXGnfc7Ig+mODl0MHDl CzgaX1gkfeZABT8MDYJ01N9SQWqxaXI= -----END CERTIFICATE-----Generated at Sun Apr 27 02:55:21 2025 by rpki-client