$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa File: db86d00a-9156-38fa-a2ec-a5019abb2c87.roa (raw, json) Hash identifier: f507UYfvG15WYDa9VHZgY7WZdfVbfssiscBfNMs+pI8= Subject key identifier: C5:70:98:37:71:0A:8E:04:99:12:0F:3C:AC:23:E1:FF:26:19:16:4C Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5FCC5C85E6CE7A83EAC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 208.76.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5f:cc:5c:85:e6:ce:7a:83:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7836c47d-3ad5-41ff-b971-43000a96ef20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:77:bd:70:03:08:a8:74:5a:6f:63:3d:b1:36: 53:6f:77:ae:2d:7d:04:f9:14:7d:0f:f9:93:30:5f: 9a:e3:bd:ae:a6:94:33:d8:12:ea:dd:73:35:8d:34: e7:b1:5f:96:64:b2:b0:e9:dd:3b:19:49:77:45:69: f5:db:31:1a:c1:77:55:c0:2b:13:97:cf:39:73:17: 73:ed:9e:0b:59:bc:d6:7f:64:9a:ab:81:fc:c2:32: 4c:50:67:92:fa:34:f2:04:9a:fc:3f:bf:94:21:09: 84:d2:45:01:73:f1:d5:2f:bf:58:58:84:9a:fe:c6: de:98:a7:d7:1a:c8:fe:7a:e6:0e:ef:ce:70:60:a7: 72:1a:1f:f6:7d:8a:37:01:2a:a9:b4:a4:3c:81:33: b1:6b:cb:b6:91:e5:0e:fc:51:13:4f:81:2a:30:b2: ea:dc:b5:07:c9:36:11:7c:27:0f:b4:98:eb:8e:af: 8d:cf:7f:af:be:c2:ca:b5:11:fd:d0:49:a6:e8:68: 08:69:3e:c0:52:dc:77:c9:70:de:f4:60:a9:1f:16: e7:87:16:c5:6b:96:f8:e9:e4:f1:db:62:0d:14:89: cd:d3:23:3c:1c:03:04:35:b0:dc:a6:b6:16:5d:bd: 5e:b9:ad:a4:7c:93:f9:34:fd:20:9f:1c:a6:20:fa: 85:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:70:98:37:71:0A:8E:04:99:12:0F:3C:AC:23:E1:FF:26:19:16:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:ea:96:80:f0:b8:70:b6:4f:1c:db:8d:de:55:1b:69:14:65: fc:18:c8:e0:fe:a9:51:5f:b1:d8:ae:22:5d:90:70:33:18:ae: a9:6f:e3:07:fc:eb:34:1f:d8:7d:b6:ff:9f:6e:6b:68:5d:56: d8:df:2d:35:5c:51:8c:9a:7b:55:18:bb:95:35:6c:35:0e:cd: b3:ca:28:a2:16:48:09:e3:36:64:1e:4c:5f:ad:15:47:61:29: 75:84:ad:01:15:35:2c:8b:0d:02:6d:25:56:ed:2f:d6:3a:98: f4:c7:83:9c:55:fe:e5:b2:ec:c6:3f:97:c8:9c:cd:98:da:1e: 6e:e2:89:77:d0:c1:3b:1e:65:71:7b:2c:f7:12:08:2b:07:f8: e7:89:3d:7e:bf:8e:ac:13:9c:f6:c1:c0:4a:33:2a:1e:73:44: 82:96:a9:ed:ac:11:06:5d:af:e3:ad:e4:c7:47:56:9c:a7:d3: 33:d6:64:8d:82:6c:19:45:b0:56:db:20:33:89:7d:43:b6:4d: 52:74:34:bf:a8:d9:cc:c5:22:3c:a2:d5:fc:95:af:8f:81:6b: 25:58:75:c4:2f:2f:70:28:0a:eb:76:ff:6a:e4:b0:2e:e7:d6: d4:34:b6:53:74:8c:8e:d7:a6:fd:e8:86:4d:9f:e3:1c:cd:cc: 4a:82:61:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1/MXIXmznqD6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzgzNmM0N2QtM2FkNS00MWZmLWI5NzEtNDMwMDBhOTZlZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApne9cAMIqHRab2M9sTZTb3euLX0E+RR9D/mT MF+a472uppQz2BLq3XM1jTTnsV+WZLKw6d07GUl3RWn12zEawXdVwCsTl885cxdz 7Z4LWbzWf2Saq4H8wjJMUGeS+jTyBJr8P7+UIQmE0kUBc/HVL79YWISa/sbemKfX Gsj+euYO785wYKdyGh/2fYo3ASqptKQ8gTOxa8u2keUO/FETT4EqMLLq3LUHyTYR fCcPtJjrjq+Nz3+vvsLKtRH90Emm6GgIaT7AUtx3yXDe9GCpHxbnhxbFa5b46eTx 22INFInN0yM8HAMENbDcprYWXb1eua2kfJP5NP0gnxymIPqFmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVwmDdxCo4EmRIPPKwj4f8mGRZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGI4NmQwMGEtOTE1Ni0z OGZhLWEyZWMtYTUwMTlhYmIyYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTqloDwuHC2Txzbjd5VG2kUZfwYyOD+qVFfsdiuIl2QcDMYrqlv4wf8 6zQf2H22/59ua2hdVtjfLTVcUYyae1UYu5U1bDUOzbPKKKIWSAnjNmQeTF+tFUdh KXWErQEVNSyLDQJtJVbtL9Y6mPTHg5xV/uWy7MY/l8iczZjaHm7iiXfQwTseZXF7 LPcSCCsH+OeJPX6/jqwTnPbBwEozKh5zRIKWqe2sEQZdr+Ot5MdHVpyn0zPWZI2C bBlFsFbbIDOJfUO2TVJ0NL+o2czFIjyi1fyVr4+BayVYdcQvL3AoCut2/2rksC7n 1tQ0tlN0jI7Xpv3ohk2f4xzNzEqCYc8= -----END CERTIFICATE-----Generated at Sun Apr 27 21:07:31 2025 by rpki-client