$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a40f8753-45d5-31a4-9829-bf896f10b054.roa File: a40f8753-45d5-31a4-9829-bf896f10b054.roa (raw, json) Hash identifier: oq2WqOh2T0lJAyUnCOZ+sJufZG4BUqIUHIyTHRIspTQ= Subject key identifier: 37:BE:90:1E:F0:A0:1B:38:2A:52:68:39:3A:8A:F6:5C:1B:2E:D3:F4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A61F38FDBE7F4D1609631200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a40f8753-45d5-31a4-9829-bf896f10b054.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 396982 IP address blocks: 208.76.71.64/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:38:fd:be:7f:4d:16:09:63:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=597eb292-19bb-4f9a-99cd-ef505a3a4dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b4:f8:4e:59:5b:2e:87:56:a8:af:ff:17:98: 9f:fe:70:66:26:26:04:e0:2a:c5:a3:df:77:10:81: ac:a5:8f:b1:2c:3f:fe:2d:6b:a6:7d:34:c2:7b:9a: dc:47:2c:11:b9:ad:0a:cd:68:6d:68:40:82:76:b8: 6b:1e:7b:a0:00:ba:92:b6:b2:b2:d2:a3:16:f0:92: 7f:2d:ef:0b:b8:5a:18:47:23:17:15:fa:37:3e:2f: 2d:2d:08:fb:51:0f:21:f0:54:fb:69:cb:f8:30:70: f5:a4:17:c6:d1:c7:18:54:3d:f8:ea:cf:c7:bd:80: 32:c2:3e:7b:12:fc:49:b9:bf:bd:18:a2:d0:bc:a2: 0c:6c:c4:ad:c7:71:aa:3d:fe:36:ec:44:96:59:68: 15:ca:26:4f:77:5b:0b:6d:1b:16:1a:6c:e2:33:69: f1:8e:e2:d9:73:1d:8f:b9:48:a0:02:c5:d4:19:82: a2:e6:6d:e2:ee:ac:93:99:28:08:bf:7b:d7:86:dc: 9d:fb:e5:b5:40:7e:ab:bc:70:c4:68:14:56:bb:c1: 54:b7:f9:17:d7:da:0b:76:9a:7f:51:cc:2b:4e:75: 6b:38:c6:ac:7c:4f:39:2c:14:3f:dd:11:b7:90:df: 8a:16:a7:1d:a6:e1:c2:7b:88:2d:59:57:ca:a2:56: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BE:90:1E:F0:A0:1B:38:2A:52:68:39:3A:8A:F6:5C:1B:2E:D3:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a40f8753-45d5-31a4-9829-bf896f10b054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.64/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:2f:9f:fc:6a:d8:e0:0c:e5:76:e3:72:e1:50:ce:11:9b:3c: 8c:b9:72:4d:d0:99:f2:a7:7a:39:12:58:f8:81:85:30:4a:08: 76:7f:42:19:a2:5b:17:9b:f9:8f:3a:ca:93:86:01:c3:64:a2: e4:a3:cb:1b:fe:40:7c:bd:ab:0a:2a:6f:1e:c3:5f:41:d9:7e: 79:4c:c5:75:a1:8c:b0:20:bc:a4:77:22:76:50:9a:fd:95:50: 14:b0:a4:55:f6:f1:20:1c:c4:f1:00:bb:a1:bd:3b:b1:4a:89: 6e:e6:00:c3:78:99:c3:6b:4d:38:f7:2e:ae:56:b7:9f:30:df: 30:13:24:35:39:17:08:61:c4:00:24:d3:04:97:a3:30:e7:cf: 5b:ab:a2:6e:2f:f7:15:f4:28:c4:7d:28:2b:7e:29:df:47:54: 35:5a:be:f0:1f:43:72:ae:ca:dc:13:c4:5a:38:61:23:32:ed: 2d:a1:8c:cc:b9:b1:36:10:b3:52:4f:c6:b3:15:eb:61:a2:87: 1d:10:42:98:f5:75:38:68:18:76:af:28:29:7e:5f:e1:34:a9: 24:5a:2e:b8:22:e3:db:05:3c:74:4b:1b:b7:c1:03:e5:fd:25: 56:83:1f:6f:e2:f1:a8:ab:89:ee:0a:52:a7:d0:46:db:30:78: d0:02:b7:ed -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmmHzj9vn9NFgljEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk NTk3ZWIyOTItMTliYi00ZjlhLTk5Y2QtZWY1MDVhM2E0ZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorT4TllbLodWqK//F5if/nBmJiYE4CrFo993 EIGspY+xLD/+LWumfTTCe5rcRywRua0KzWhtaECCdrhrHnugALqStrKy0qMW8JJ/ Le8LuFoYRyMXFfo3Pi8tLQj7UQ8h8FT7acv4MHD1pBfG0ccYVD346s/HvYAywj57 EvxJub+9GKLQvKIMbMStx3GqPf427ESWWWgVyiZPd1sLbRsWGmziM2nxjuLZcx2P uUigAsXUGYKi5m3i7qyTmSgIv3vXhtyd++W1QH6rvHDEaBRWu8FUt/kX19oLdpp/ UcwrTnVrOMasfE85LBQ/3RG3kN+KFqcdpuHCe4gtWVfKolaqRwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDe+kB7woBs4KlJoOTqK9lwbLtP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTQwZjg3NTMtNDVkNS0z MWE0LTk4MjktYmY4OTZmMTBiMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBwL5/8atjgDOV243LhUM4RmzyMuXJN0Jnyp3o5Elj4gYUwSgh2f0IZ olsXm/mPOsqThgHDZKLko8sb/kB8vasKKm8ew19B2X55TMV1oYywILykdyJ2UJr9 lVAUsKRV9vEgHMTxALuhvTuxSolu5gDDeJnDa0049y6uVrefMN8wEyQ1ORcIYcQA JNMEl6Mw589bq6JuL/cV9CjEfSgrfinfR1Q1Wr7wH0NyrsrcE8RaOGEjMu0toYzM ubE2ELNST8azFethoocdEEKY9XU4aBh2rygpfl/hNKkkWi64IuPbBTx0Sxu3wQPl /SVWgx9v4vGoq4nuClKn0EbbMHjQArft -----END CERTIFICATE-----Generated at Sat Apr 26 18:39:09 2025 by rpki-client