$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/144c1b7a-63c2-3a05-8d5d-4d7724a6887f.roa File: 144c1b7a-63c2-3a05-8d5d-4d7724a6887f.roa (raw, json) Hash identifier: lBSdHwDFpn7BtUiv7SmPDyrP+LN7FPdKRWqv6uSRIzI= Subject key identifier: 22:7D:12:30:2A:36:E2:14:AA:F5:F9:E7:69:68:AE:9A:2D:E3:A5:F5 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A61F38D85A0D3D76BED8B100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/144c1b7a-63c2-3a05-8d5d-4d7724a6887f.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 396982 IP address blocks: 208.76.71.160/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:38:d8:5a:0d:3d:76:be:d8:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=ebc43315-dad4-47ae-98a9-e5467babeb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:54:fa:35:5f:8a:42:9c:b0:c8:54:4c:2a:4b: 56:06:e3:b7:97:69:cf:11:0b:f7:66:f2:77:3f:5e: 83:91:56:39:a3:17:97:bf:e1:3a:53:74:62:0a:0e: bf:97:64:d9:99:5d:d0:6f:7c:4b:22:4f:aa:ee:95: d6:87:b0:6a:f3:37:f9:cf:0f:08:f2:97:dd:f7:5c: 31:bb:ba:cd:8c:e7:df:f6:d6:3e:40:1b:a8:24:a0: 4c:90:4a:0a:bc:03:1f:02:55:0f:2c:f4:e5:53:67: 61:11:ad:2e:90:3b:76:15:34:51:b1:4b:4c:67:94: 57:d6:9b:d4:57:1b:36:3e:94:d7:a1:b7:d5:be:09: 5a:55:25:13:e2:b5:b5:64:75:3b:57:96:80:4b:36: 2c:72:2c:c4:2c:fe:96:2f:de:1a:30:f1:1c:8a:ec: 76:ee:88:50:a9:5e:a1:1c:f8:11:22:47:d0:06:1d: 97:85:8a:47:93:0e:12:71:1f:99:12:8d:77:34:8b: 1f:72:c3:7e:2b:50:32:a1:f8:e6:be:78:ee:94:bb: 90:95:16:1f:9c:a4:d3:36:30:bc:5a:8a:dd:e7:d3: 20:88:57:20:29:a6:0b:bd:c2:79:db:53:64:29:52: ce:f4:a1:e3:99:82:15:8b:3b:ab:0f:a2:74:fa:64: 22:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7D:12:30:2A:36:E2:14:AA:F5:F9:E7:69:68:AE:9A:2D:E3:A5:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/144c1b7a-63c2-3a05-8d5d-4d7724a6887f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.160/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:55:2b:a1:06:30:76:b4:46:02:f1:c0:0e:95:3d:0c:2d:7e: d1:31:b5:5a:56:e6:69:2f:a4:23:12:28:61:84:17:04:5a:98: 88:8e:ff:d7:bd:e8:a3:90:3b:aa:6e:c9:ec:23:1b:13:45:0c: 84:5e:d7:f9:ca:63:19:0d:d8:19:90:05:e5:72:ea:aa:b9:c9: 42:f5:d3:7b:38:9f:ca:01:96:6c:89:fb:58:ff:8c:8a:7d:ba: 97:cf:51:b1:af:4c:81:5e:4e:e6:08:7d:b7:a3:72:14:f2:df: e6:59:5a:ae:66:ba:a6:a2:0a:13:0e:63:26:24:57:3c:0c:40: 38:44:69:b3:3e:a1:c5:9d:b0:74:7e:ef:25:6b:25:cb:26:31: 6c:e9:d7:bc:b6:21:6b:9f:1b:40:f4:34:b5:66:c2:d8:6b:ee: 68:05:69:28:bb:41:ad:e5:58:1b:74:70:4e:87:06:22:58:25: c9:21:7d:50:b2:b3:0e:93:38:5a:b2:fe:c4:9a:79:c6:f1:28: bc:9b:14:28:3d:42:a1:29:56:ad:22:9e:ae:f0:52:95:3e:69: e7:1e:ad:45:b2:8b:36:21:4e:2b:25:a5:a8:35:e0:1e:04:b6: 47:a7:4c:78:6a:75:b9:fb:3e:53:0c:54:13:f9:ba:26:99:5f: da:62:fd:bb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmmHzjYWg09dr7YsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ZWJjNDMzMTUtZGFkNC00N2FlLTk4YTktZTU0NjdiYWJlYjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlT6NV+KQpywyFRMKktWBuO3l2nPEQv3ZvJ3 P16DkVY5oxeXv+E6U3RiCg6/l2TZmV3Qb3xLIk+q7pXWh7Bq8zf5zw8I8pfd91wx u7rNjOff9tY+QBuoJKBMkEoKvAMfAlUPLPTlU2dhEa0ukDt2FTRRsUtMZ5RX1pvU Vxs2PpTXobfVvglaVSUT4rW1ZHU7V5aASzYscizELP6WL94aMPEciux27ohQqV6h HPgRIkfQBh2XhYpHkw4ScR+ZEo13NIsfcsN+K1AyofjmvnjulLuQlRYfnKTTNjC8 Word59MgiFcgKaYLvcJ521NkKVLO9KHjmYIVizurD6J0+mQijwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCJ9EjAqNuIUqvX552lorpot46X1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTQ0YzFiN2EtNjNjMi0z YTA1LThkNWQtNGQ3NzI0YTY4ODdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCeVSuhBjB2tEYC8cAOlT0MLX7RMbVaVuZpL6QjEihhhBcEWpiIjv/X veijkDuqbsnsIxsTRQyEXtf5ymMZDdgZkAXlcuqquclC9dN7OJ/KAZZsiftY/4yK fbqXz1Gxr0yBXk7mCH23o3IU8t/mWVquZrqmogoTDmMmJFc8DEA4RGmzPqHFnbB0 fu8layXLJjFs6de8tiFrnxtA9DS1ZsLYa+5oBWkou0Gt5VgbdHBOhwYiWCXJIX1Q srMOkzhasv7EmnnG8Si8mxQoPUKhKVatIp6u8FKVPmnnHq1Fsos2IU4rJaWoNeAe BLZHp0x4anW5+z5TDFQT+bommV/aYv27 -----END CERTIFICATE-----Generated at Sat Apr 26 19:53:32 2025 by rpki-client