$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa File: 1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa (raw, json) Hash identifier: JKM8Yh4VG55IFmk71NIDz6ERr9CbzTQlUTG3RZ6f884= Subject key identifier: E0:29:3C:2D:AE:8E:BF:CF:B0:87:42:F5:FD:FC:D7:2A:7E:EA:88:32 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285849A61F3DF241C8D6202B1C2380 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 16433 IP address blocks: 208.76.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3d:f2:41:c8:d6:20:2b:1c:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=3c820557-5200-44c7-9362-127b1c0d82f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:f4:d0:1a:6a:d1:52:d9:0b:81:9f:78:66: 86:07:cd:69:32:7f:68:a7:15:c3:d3:af:cc:5a:dd: cb:24:11:44:8b:bf:f2:f7:66:00:b2:4d:77:e2:83: 1b:0e:6c:c2:25:37:8f:31:cd:f2:d3:2a:e6:65:e0: cb:ba:77:40:f2:10:4e:82:43:9e:07:3c:bd:b3:55: 47:ac:fb:ff:a9:83:c2:12:c5:27:39:55:c8:3e:d9: 95:94:8b:ac:61:6d:e4:70:93:ef:97:34:bd:11:e0: 50:71:65:76:56:c2:a6:14:1d:d5:ea:ce:3a:31:1c: 8b:80:e3:09:97:77:47:6b:af:0b:c8:ce:f9:d1:73: e8:1c:ba:de:0d:96:67:d6:40:68:d5:92:70:12:47: ad:44:c2:05:cd:9a:ac:31:1d:04:f7:cf:f2:b4:c2: 3a:a0:39:8f:b6:af:8b:05:27:f4:39:15:16:4b:95: c5:bf:12:40:f1:d1:15:05:d8:99:7b:a2:c4:90:c6: 53:70:d3:87:9f:7b:a3:8c:6d:3c:b1:a3:15:60:df: d1:18:ae:49:02:b9:9f:f2:43:de:c1:c4:6d:9c:f1: bc:30:3a:09:82:95:2e:73:2a:51:e6:fb:94:19:98: a9:9f:cb:10:23:88:b2:0c:85:0e:aa:4c:61:66:e6: 93:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:29:3C:2D:AE:8E:BF:CF:B0:87:42:F5:FD:FC:D7:2A:7E:EA:88:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/1c6ee6ca-823d-393a-9d2d-0c7394e1975f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 208.76.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:37:73:2c:28:95:ce:9c:0f:4b:e9:9b:91:e5:67:75:a6:50: 8f:c7:8a:61:77:65:94:b3:a0:4e:48:b7:fd:66:10:8a:cf:eb: 9a:05:13:b9:f1:f0:04:1e:7d:82:0e:57:77:af:f7:c7:8a:9f: c6:59:28:47:aa:8b:6a:87:6a:6c:f4:73:a8:f7:68:67:ca:1d: 7a:f7:22:2c:1e:03:a6:47:f6:e0:e4:14:51:47:1b:f1:88:59: 0d:e8:c6:b8:d3:ac:bd:b1:73:d3:24:ae:cc:b6:64:1f:44:42: 39:0f:23:e7:b0:cd:f5:1a:2f:de:bf:47:5a:98:62:38:e5:71: ad:13:e1:9a:dc:44:d8:4c:8e:50:01:5f:10:ea:e5:8e:42:e9: b1:ca:a4:d1:1b:15:4e:69:90:27:68:50:18:2c:20:43:21:1f: d1:c6:91:59:c3:dd:b9:4e:af:a7:21:99:15:bc:c5:dd:db:6a: d5:0e:4d:49:94:65:fd:c7:97:e7:a2:eb:ed:16:d8:ea:98:0e: 2e:b5:e2:d1:d6:2b:2e:7f:77:ad:be:66:73:f7:94:50:98:75: f5:22:5e:aa:72:0f:7e:71:f0:d6:d2:a1:5f:fc:f7:57:02:cc: ed:99:bc:6f:0f:0d:a7:d0:09:dd:22:c9:23:bb:1a:d2:39:2f: 7e:e1:f6:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHz3yQcjWICscI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk M2M4MjA1NTctNTIwMC00NGM3LTkzNjItMTI3YjFjMGQ4MmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0j00Bpq0VLZC4GfeGaGB81pMn9opxXD06/M Wt3LJBFEi7/y92YAsk134oMbDmzCJTePMc3y0yrmZeDLundA8hBOgkOeBzy9s1VH rPv/qYPCEsUnOVXIPtmVlIusYW3kcJPvlzS9EeBQcWV2VsKmFB3V6s46MRyLgOMJ l3dHa68LyM750XPoHLreDZZn1kBo1ZJwEketRMIFzZqsMR0E98/ytMI6oDmPtq+L BSf0ORUWS5XFvxJA8dEVBdiZe6LEkMZTcNOHn3ujjG08saMVYN/RGK5JArmf8kPe wcRtnPG8MDoJgpUucypR5vuUGZipn8sQI4iyDIUOqkxhZuaTIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOApPC2ujr/PsIdC9f381yp+6ogyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMWM2ZWU2Y2EtODIzZC0z OTNhLTlkMmQtMGM3Mzk0ZTE5NzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM3cywolc6cD0vpm5HlZ3WmUI/HimF3ZZSzoE5It/1mEIrP65oFE7nx 8AQefYIOV3ev98eKn8ZZKEeqi2qHamz0c6j3aGfKHXr3IiweA6ZH9uDkFFFHG/GI WQ3oxrjTrL2xc9Mkrsy2ZB9EQjkPI+ewzfUaL96/R1qYYjjlca0T4ZrcRNhMjlAB XxDq5Y5C6bHKpNEbFU5pkCdoUBgsIEMhH9HGkVnD3blOr6chmRW8xd3batUOTUmU Zf3Hl+ei6+0W2OqYDi614tHWKy5/d62+ZnP3lFCYdfUiXqpyD35x8NbSoV/891cC zO2ZvG8PDafQCd0iySO7GtI5L37h9uo= -----END CERTIFICATE-----Generated at Tue Apr 29 01:43:22 2025 by rpki-client