$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa File: 047692f9-4c45-3534-9455-58a8a7660d58.roa (raw, json) Hash identifier: kbqXjJF+kT6OxYslgf4qb6hzMktw/h2Kx8qZTv1ly68= Subject key identifier: 20:87:40:37:7F:14:EC:90:08:01:AA:39:4A:E1:2E:EE:FD:E2:71:DC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB6268CC29892197577B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 208.76.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:62:68:cc:29:89:21:97:57:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=eb6e63b4-66ad-437f-a59d-188c71e1dca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0d:e1:4c:f5:6d:c7:9d:85:c3:bd:87:3d:6e: 8a:e3:eb:f9:55:17:f1:55:a0:76:76:65:a1:6e:3c: a9:15:b2:84:13:8d:f6:8d:6b:1a:c3:36:4e:9a:a7: 11:1b:9f:5d:68:99:a9:57:ed:d6:38:46:0c:41:70: b4:b2:fe:2b:6f:13:40:f2:96:4e:c9:e7:10:05:f6: 61:f4:db:4b:7c:fa:82:d9:6e:76:7c:ff:b7:60:ce: 53:14:e1:3e:d1:15:b1:85:86:ee:47:e5:83:a8:1e: 4d:3e:d6:c2:25:6e:cd:2c:90:d9:2e:66:12:ef:62: e1:f2:3d:60:dc:60:c9:ed:d9:d3:46:c7:de:49:64: b0:b6:c6:04:44:45:e1:5c:b4:f7:d8:78:dd:22:c2: cc:9e:88:4b:e6:ca:76:c1:5b:50:ed:34:ec:1e:bf: a3:22:b5:74:98:89:87:a4:74:c2:fa:38:dd:1e:b0: 13:87:89:4c:ce:e6:69:9f:33:cf:e0:c7:92:ce:38: a5:b2:28:69:b7:1c:af:75:d3:78:74:92:58:80:10: 91:a7:bf:d9:67:90:c5:3c:8d:47:fd:53:14:33:a0: 3a:bf:59:82:7e:b5:be:df:fe:d4:07:f8:5f:52:35: fb:d5:5c:ca:87:29:ec:f4:79:8d:f9:cb:04:fc:9a: 37:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:87:40:37:7F:14:EC:90:08:01:AA:39:4A:E1:2E:EE:FD:E2:71:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:9b:4c:4c:6a:fd:9d:23:14:b6:1b:d2:df:a6:80:b3:d2:e2: 99:ae:e3:5b:db:2d:fb:c7:cc:5d:8d:75:71:7c:d8:a8:d3:42: a8:25:70:0b:86:f7:8a:a1:d0:04:1a:93:38:8c:6a:a8:1c:cc: 33:6d:5d:01:72:3a:29:a3:5b:fb:81:c5:6d:e8:3a:8c:6e:db: 15:59:b2:c1:04:e1:4a:c9:b7:05:c4:5f:60:e1:55:b3:43:cc: cf:c4:9c:d6:9e:50:40:23:db:69:fa:fe:b9:77:7e:c9:57:8d: 95:c8:da:e8:43:e4:fe:6b:ea:f4:f9:c7:a7:f6:8b:93:17:78: 68:87:08:72:fc:81:2f:c3:36:18:f4:18:19:7f:e1:69:fe:68: 1a:35:11:c3:4e:8c:f3:8f:b0:ed:c4:35:1e:de:98:58:7e:d4: 1b:00:81:e1:a1:8a:8b:08:4c:80:6d:16:a5:a6:70:a8:9c:5f: 18:f0:4e:f2:58:a5:0e:fc:18:91:13:5b:a5:ba:6a:cf:d4:90: e3:18:fa:2e:50:3f:0b:64:c2:b4:f4:10:bd:b3:20:bb:d4:58: c9:a5:f2:10:8c:f1:0d:c6:42:f7:d6:86:1a:b3:f4:e7:6b:7c: 8e:d9:9c:a0:ee:d5:04:f4:1c:fc:1e:3d:55:99:4f:51:2b:39: 00:df:1e:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2JozCmJIZdXe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWI2ZTYzYjQtNjZhZC00MzdmLWE1OWQtMTg4YzcxZTFkY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA3hTPVtx52Fw72HPW6K4+v5VRfxVaB2dmWh bjypFbKEE432jWsawzZOmqcRG59daJmpV+3WOEYMQXC0sv4rbxNA8pZOyecQBfZh 9NtLfPqC2W52fP+3YM5TFOE+0RWxhYbuR+WDqB5NPtbCJW7NLJDZLmYS72Lh8j1g 3GDJ7dnTRsfeSWSwtsYEREXhXLT32HjdIsLMnohL5sp2wVtQ7TTsHr+jIrV0mImH pHTC+jjdHrATh4lMzuZpnzPP4MeSzjilsihptxyvddN4dJJYgBCRp7/ZZ5DFPI1H /VMUM6A6v1mCfrW+3/7UB/hfUjX71VzKhyns9HmN+csE/Jo3KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCHQDd/FOyQCAGqOUrhLu794nHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDQ3NjkyZjktNGM0NS0z NTM0LTk0NTUtNThhOGE3NjYwZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCbTExq/Z0jFLYb0t+mgLPS4pmu41vbLfvHzF2NdXF82KjTQqglcAuG 94qh0AQakziMaqgczDNtXQFyOimjW/uBxW3oOoxu2xVZssEE4UrJtwXEX2DhVbND zM/EnNaeUEAj22n6/rl3fslXjZXI2uhD5P5r6vT5x6f2i5MXeGiHCHL8gS/DNhj0 GBl/4Wn+aBo1EcNOjPOPsO3ENR7emFh+1BsAgeGhiosITIBtFqWmcKicXxjwTvJY pQ78GJETW6W6as/UkOMY+i5QPwtkwrT0EL2zILvUWMml8hCM8Q3GQvfWhhqz9Odr fI7ZnKDu1QT0HPwePVWZT1ErOQDfHtQ= -----END CERTIFICATE-----Generated at Sat Apr 26 22:27:55 2025 by rpki-client