$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad52ab69-9e7e-3353-adb5-f908fb39bc4d.roa File: ad52ab69-9e7e-3353-adb5-f908fb39bc4d.roa (raw, json) Hash identifier: W8n3b6NbXhxWTCrWMZa674B8PFD4Kg2SH1SZHKNLLGE= Subject key identifier: 85:FE:13:0E:D6:EA:5D:AC:8A:C2:90:4F:66:04:69:ED:1C:2C:79:03 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A61F391DB94BA6F20B1D2500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad52ab69-9e7e-3353-adb5-f908fb39bc4d.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 396982 IP address blocks: 208.76.71.192/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:39:1d:b9:4b:a6:f2:0b:1d:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=2942121c-5b74-4992-ad17-3fe7da29add0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:6b:c6:d7:4a:ce:bc:6a:5b:bf:2e:89:c7: eb:2b:db:76:e6:f3:50:9e:a7:50:81:e4:65:d3:4a: 75:d9:09:e3:8b:57:bd:67:15:75:9f:fa:88:17:68: 71:27:09:58:76:9d:1a:c5:e1:fd:17:99:23:f2:f9: dc:c0:6f:9d:26:42:97:47:9b:c6:be:15:7a:57:f4: ca:63:08:fc:9e:3d:c7:d7:b5:9c:cc:e9:83:c7:10: c9:6c:1b:c5:1e:42:3b:03:2f:d5:9b:42:aa:56:1c: 73:a1:35:8c:7e:18:d5:9d:f3:ba:4c:d6:fe:19:21: 22:b3:9e:d4:b6:0a:7b:2f:47:11:2e:7d:58:9b:b8: d6:62:b6:cf:95:5f:80:c5:97:bd:26:5e:df:e2:33: 20:0f:1f:91:eb:6a:84:84:b3:ec:a4:0a:38:3a:d8: ac:25:4c:51:34:32:26:37:95:f5:c6:e0:5d:67:ca: d9:b5:d0:7b:f7:74:af:a2:63:55:00:d1:78:c3:fe: 80:a6:fc:d1:19:9d:61:f0:23:49:d6:69:72:fb:8f: 23:a6:d0:c4:3e:d5:80:76:16:fe:ba:74:0f:56:44: d3:f1:0d:19:f4:a0:28:6c:2d:a0:89:dd:83:48:4e: bb:85:61:1a:d9:d2:c8:68:e0:04:6e:7c:c0:f9:86: 6e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FE:13:0E:D6:EA:5D:AC:8A:C2:90:4F:66:04:69:ED:1C:2C:79:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ad52ab69-9e7e-3353-adb5-f908fb39bc4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.192/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:20:18:f2:2f:3a:30:6b:02:a3:3f:e9:31:a7:e1:bf:c0:b1: a1:7f:50:2a:39:2a:58:15:a2:5c:ec:69:60:e9:e4:87:32:03: 1b:ac:fe:1f:ae:3a:20:bd:c5:c8:32:34:d1:cb:13:50:ae:54: de:6e:93:9c:17:4a:18:ca:37:7d:3c:a4:f9:15:ed:82:47:97: 80:b1:65:9a:7d:e9:5e:c3:6a:4c:62:a0:47:34:39:c7:66:1b: 2b:48:43:35:97:72:6a:fb:65:62:70:b3:36:e4:1b:50:0f:aa: 2a:fb:9d:cc:02:e0:1a:f9:5f:77:be:f7:10:89:41:d4:89:48: 70:be:1a:a0:31:2d:bd:82:28:11:ca:7b:1c:21:3c:7b:d0:1b: b9:5f:4b:eb:a2:2d:49:c4:a0:f4:36:40:a8:e2:33:1d:64:be: 0a:4b:bc:65:1a:fa:e8:f5:a6:14:de:d3:0f:c3:53:0d:87:ac: 8c:84:6c:57:c9:02:74:a3:d5:e5:40:29:94:39:01:5a:7f:b1: bf:7a:d7:78:d2:f9:c6:d9:b1:22:8e:e0:c3:e6:34:e7:53:ab: 51:0b:18:bf:3d:81:c9:cd:40:e3:a7:ec:38:56:9e:43:ec:2f: ab:38:fb:50:c6:cd:76:d9:8c:ee:ed:d8:63:ad:b6:65:2c:38: 3f:4d:0d:c0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmmHzkduUum8gsdJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk Mjk0MjEyMWMtNWI3NC00OTkyLWFkMTctM2ZlN2RhMjlhZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/FrxtdKzrxqW78uicfrK9t25vNQnqdQgeRl 00p12Qnji1e9ZxV1n/qIF2hxJwlYdp0axeH9F5kj8vncwG+dJkKXR5vGvhV6V/TK Ywj8nj3H17WczOmDxxDJbBvFHkI7Ay/Vm0KqVhxzoTWMfhjVnfO6TNb+GSEis57U tgp7L0cRLn1Ym7jWYrbPlV+AxZe9Jl7f4jMgDx+R62qEhLPspAo4OtisJUxRNDIm N5X1xuBdZ8rZtdB793SvomNVANF4w/6ApvzRGZ1h8CNJ1mly+48jptDEPtWAdhb+ unQPVkTT8Q0Z9KAobC2gid2DSE67hWEa2dLIaOAEbnzA+YZuxQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIX+Ew7W6l2sisKQT2YEae0cLHkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYWQ1MmFiNjktOWU3ZS0z MzUzLWFkYjUtZjkwOGZiMzliYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBoIBjyLzowawKjP+kxp+G/wLGhf1AqOSpYFaJc7Glg6eSHMgMbrP4f rjogvcXIMjTRyxNQrlTebpOcF0oYyjd9PKT5Fe2CR5eAsWWafelew2pMYqBHNDnH ZhsrSEM1l3Jq+2VicLM25BtQD6oq+53MAuAa+V93vvcQiUHUiUhwvhqgMS29gigR ynscITx70Bu5X0vroi1JxKD0NkCo4jMdZL4KS7xlGvro9aYU3tMPw1MNh6yMhGxX yQJ0o9XlQCmUOQFaf7G/etd40vnG2bEijuDD5jTnU6tRCxi/PYHJzUDjp+w4Vp5D 7C+rOPtQxs122Yzu7dhjrbZlLDg/TQ3A -----END CERTIFICATE-----Generated at Sat Apr 26 18:34:30 2025 by rpki-client