$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c14e2f80-1f59-37d9-8484-270eb327919c.roa File: c14e2f80-1f59-37d9-8484-270eb327919c.roa (raw, json) Hash identifier: JlWdusPCqTaoIS1XAihIdtIg7XifGVAvjNA/ojfM3ao= Subject key identifier: D3:1A:0B:13:89:C1:1D:51:05:41:70:1A:C1:D1:80:E8:57:D7:42:41 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A61F38B1454D1C8B957E7B40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c14e2f80-1f59-37d9-8484-270eb327919c.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 396982 IP address blocks: 208.76.71.32/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:38:b1:45:4d:1c:8b:95:7e:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=032708b0-f128-49a4-931e-402bbb8dc94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:54:9c:97:e1:2d:e5:01:96:b3:f4:49:29: 01:2e:ee:94:2d:e4:be:1e:1a:12:2d:18:c7:69:48: 25:b5:d1:d7:8e:34:49:a4:1c:78:30:11:64:e3:a8: 8e:ea:85:a8:d6:c9:2b:cd:00:38:7c:df:b4:a6:e0: b2:6a:40:5f:33:87:fd:ce:aa:c8:b9:22:3f:d5:89: cc:92:bd:6b:4f:17:9d:d8:78:0c:a0:e6:ab:90:0e: 89:f7:e3:2d:27:0a:ba:04:10:2c:f4:fc:fd:c3:2a: 94:67:52:a3:9e:21:73:c1:85:5e:4e:a5:ad:3c:0c: 89:31:1a:c0:8a:28:ae:13:31:d1:21:d7:76:42:a9: 8d:3d:ff:56:f9:8f:57:5a:cc:66:be:eb:a4:22:c5: 44:46:8e:e8:2f:66:4f:9f:b4:b4:66:6b:ca:37:32: 73:23:84:7a:77:63:50:76:32:d4:64:52:ab:18:ea: 61:3e:8a:25:10:0f:55:c0:30:d6:e5:b4:28:39:3d: 29:c6:3a:c1:40:45:c9:9d:f8:44:c1:79:e9:3b:3b: 11:a9:60:16:ef:a1:ed:92:52:92:3c:7b:8d:f8:06: 09:3c:b0:c8:b4:95:f1:b9:e3:31:05:89:66:e6:cc: c2:c5:6e:8a:17:1b:4f:cb:10:e3:e8:35:99:c2:11: 36:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1A:0B:13:89:C1:1D:51:05:41:70:1A:C1:D1:80:E8:57:D7:42:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c14e2f80-1f59-37d9-8484-270eb327919c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.32/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f3:5f:8a:86:4f:88:b6:10:a1:61:49:ae:61:79:45:19:15: e7:fb:0b:01:2d:fa:a7:d6:2b:c1:6c:75:da:26:fb:cf:9a:09: 00:ff:13:0e:c0:97:9e:39:81:86:10:51:ed:73:e8:40:98:7f: f6:54:34:50:3e:13:13:4a:59:4e:63:8c:cb:9d:9e:9c:2a:58: a8:32:3c:5c:a9:2e:e6:dd:34:58:9d:7d:96:06:87:f9:9f:ee: aa:41:a2:29:ac:02:90:ed:1b:ec:09:45:ed:19:cc:3e:6d:43: f5:93:59:08:dd:34:7a:2f:22:c7:96:6b:38:74:28:48:d6:c3: f0:b6:7b:bd:cb:1f:7a:ed:9b:c2:e8:26:b9:9a:ef:bd:e1:c9: 42:80:a0:9e:ae:f5:ae:cd:79:9f:ce:a8:58:43:a0:5a:0a:5f: 01:09:6e:08:16:f2:45:58:3e:30:ff:b1:dc:a5:95:c1:8f:c6: 2b:6b:c9:b8:59:b2:ce:97:1a:4b:0a:d0:11:f0:1e:db:41:ec: 18:c8:9a:87:6c:4d:c6:79:d6:f9:6e:98:4b:d8:6e:cc:12:1b: f4:a0:1a:79:34:31:1c:63:7b:e9:19:f1:5d:36:55:d2:77:b0: da:54:94:ef:4a:92:d0:75:eb:3f:58:55:c2:8b:39:48:69:d9: 3b:13:a8:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmmHzixRU0ci5V+e0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MDMyNzA4YjAtZjEyOC00OWE0LTkzMWUtNDAyYmJiOGRjOTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWlUnJfhLeUBlrP0SSkBLu6ULeS+HhoSLRjH aUgltdHXjjRJpBx4MBFk46iO6oWo1skrzQA4fN+0puCyakBfM4f9zqrIuSI/1YnM kr1rTxed2HgMoOarkA6J9+MtJwq6BBAs9Pz9wyqUZ1KjniFzwYVeTqWtPAyJMRrA iiiuEzHRIdd2QqmNPf9W+Y9XWsxmvuukIsVERo7oL2ZPn7S0ZmvKNzJzI4R6d2NQ djLUZFKrGOphPoolEA9VwDDW5bQoOT0pxjrBQEXJnfhEwXnpOzsRqWAW76HtklKS PHuN+AYJPLDItJXxueMxBYlm5szCxW6KFxtPyxDj6DWZwhE2ywIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNMaCxOJwR1RBUFwGsHRgOhX10JBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYzE0ZTJmODAtMWY1OS0z N2Q5LTg0ODQtMjcwZWIzMjc5MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA481+Khk+IthChYUmuYXlFGRXn+wsBLfqn1ivBbHXaJvvPmgkA/xMO wJeeOYGGEFHtc+hAmH/2VDRQPhMTSllOY4zLnZ6cKlioMjxcqS7m3TRYnX2WBof5 n+6qQaIprAKQ7RvsCUXtGcw+bUP1k1kI3TR6LyLHlms4dChI1sPwtnu9yx967ZvC 6Ca5mu+94clCgKCervWuzXmfzqhYQ6BaCl8BCW4IFvJFWD4w/7HcpZXBj8Yra8m4 WbLOlxpLCtAR8B7bQewYyJqHbE3Gedb5bphL2G7MEhv0oBp5NDEcY3vpGfFdNlXS d7DaVJTvSpLQdes/WFXCizlIadk7E6il -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:30 2025 by rpki-client