$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d723720-c1b1-3ded-94bb-35dc56996c9f.roa File: 8d723720-c1b1-3ded-94bb-35dc56996c9f.roa (raw, json) Hash identifier: sYP5oGdJG8kEtbukUS7FWsUiPufuafDP3cyWrIHMW8s= Subject key identifier: 60:61:D0:39:B6:62:4A:44:0E:B9:AB:A0:98:00:D8:D5:27:FB:9B:8F Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BABC05BC78B72C62FD8C00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d723720-c1b1-3ded-94bb-35dc56996c9f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 396982 IP address blocks: 208.76.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:bc:05:bc:78:b7:2c:62:fd:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5267b5a8-a149-4e8e-82f3-f56adcba782e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:71:12:4d:5f:a6:a3:a0:b5:c2:96:cc:ca:7c: 91:2f:61:eb:0d:f5:d7:63:ba:75:4f:25:2b:75:1f: 82:f8:fb:bb:ac:0d:0d:6d:22:41:82:12:cd:6a:46: ad:db:bf:c6:05:04:39:87:cc:82:76:c0:44:11:3e: 6e:91:18:f2:c6:2f:12:68:5e:1c:6f:c6:b4:cd:15: 44:b1:25:3d:0e:ab:a0:73:0c:94:30:cc:5f:e1:0b: 94:43:33:5e:0d:c5:80:76:8c:a5:36:e3:f8:e5:bf: a3:d5:6b:13:76:c8:27:c3:e2:ad:67:2c:ca:3e:27: 74:82:1b:75:a4:96:2e:06:4e:ad:cf:5d:c2:09:26: 1b:b9:fb:9c:13:7c:da:d9:96:30:f4:9f:30:74:64: 3c:3d:be:85:0a:cf:fe:aa:31:99:b4:77:d8:ee:4d: 5f:0a:4d:1a:18:5b:f3:e0:ea:c8:43:c2:f9:a2:0a: d6:76:90:0b:a8:95:61:b1:31:e1:cf:ea:19:93:f5: 44:16:a1:9c:a9:11:cf:54:03:45:fb:a4:9e:3f:c4: 46:38:19:19:df:e6:57:0e:00:19:d7:34:e5:2e:2e: 98:41:fc:5e:82:2d:11:df:4b:59:c9:ab:41:ca:0f: 68:ff:c1:2a:4c:b3:1e:f9:a7:d0:da:62:e8:53:6e: a0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:61:D0:39:B6:62:4A:44:0E:B9:AB:A0:98:00:D8:D5:27:FB:9B:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d723720-c1b1-3ded-94bb-35dc56996c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:dc:35:3d:7e:4e:ee:6e:c4:3b:9e:51:2d:fc:c7:4e:db:78: 5b:2a:99:03:d2:ea:ce:28:cd:b5:79:3c:99:47:34:3f:43:dc: 21:9a:9a:ce:b7:33:1a:b6:97:4d:3c:5d:44:59:af:dc:40:69: b2:19:1c:24:11:85:2d:c9:d0:8c:0b:15:be:e5:df:02:fc:79: 9f:7c:ed:d9:16:13:34:1c:6c:59:a5:69:ff:77:fe:09:c0:90: de:e3:36:72:1c:c7:ab:c5:02:1c:07:4d:86:c4:52:7b:7d:f3: 0d:fa:26:a9:57:a7:ab:e2:ce:e8:bb:58:96:5f:a3:9c:bd:f8: 3c:52:bc:be:c7:fa:fd:4a:38:03:74:7d:47:0b:35:fc:29:05: 7e:90:54:02:37:c4:ff:06:75:4c:c9:7b:32:21:d2:4e:43:8e: a8:50:25:c8:1a:4d:6e:c6:ef:3c:d7:f0:98:ce:25:99:da:46: a1:79:d8:32:cf:25:1e:66:36:6c:40:53:7d:67:07:ed:e7:dd: 35:b7:17:a2:e8:44:79:cc:6e:a5:2c:50:f7:77:86:7a:d4:43: 4b:46:e3:dd:45:08:d6:17:e9:3b:de:08:ee:50:f6:c1:92:6d: 10:90:bd:3e:6f:3d:c5:07:d6:e7:ce:37:9f:99:69:03:1e:c6: ea:25:0c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurwFvHi3LGL9jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTI2N2I1YTgtYTE0OS00ZThlLTgyZjMtZjU2YWRjYmE3ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nESTV+mo6C1wpbMynyRL2HrDfXXY7p1TyUr dR+C+Pu7rA0NbSJBghLNakat27/GBQQ5h8yCdsBEET5ukRjyxi8SaF4cb8a0zRVE sSU9DqugcwyUMMxf4QuUQzNeDcWAdoylNuP45b+j1WsTdsgnw+KtZyzKPid0ght1 pJYuBk6tz13CCSYbufucE3za2ZYw9J8wdGQ8Pb6FCs/+qjGZtHfY7k1fCk0aGFvz 4OrIQ8L5ogrWdpALqJVhsTHhz+oZk/VEFqGcqRHPVANF+6SeP8RGOBkZ3+ZXDgAZ 1zTlLi6YQfxegi0R30tZyatByg9o/8EqTLMe+afQ2mLoU26gFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBh0Dm2YkpEDrmroJgA2NUn+5uPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGQ3MjM3MjAtYzFiMS0z ZGVkLTk0YmItMzVkYzU2OTk2YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPcNT1+Tu5uxDueUS38x07beFsqmQPS6s4ozbV5PJlHND9D3CGams63 Mxq2l008XURZr9xAabIZHCQRhS3J0IwLFb7l3wL8eZ987dkWEzQcbFmlaf93/gnA kN7jNnIcx6vFAhwHTYbEUnt98w36JqlXp6vizui7WJZfo5y9+DxSvL7H+v1KOAN0 fUcLNfwpBX6QVAI3xP8GdUzJezIh0k5DjqhQJcgaTW7G7zzX8JjOJZnaRqF52DLP JR5mNmxAU31nB+3n3TW3F6LoRHnMbqUsUPd3hnrUQ0tG491FCNYX6TveCO5Q9sGS bRCQvT5vPcUH1ufON5+ZaQMexuolDLI= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:38 2025 by rpki-client