$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd170ce2-205d-35fa-ba03-d2acdd3ce2dd.roa File: dd170ce2-205d-35fa-ba03-d2acdd3ce2dd.roa (raw, json) Hash identifier: oeXe5+tvRHKeyE3TfJu6lhfF4V8ozclzZTSmwjvJdwQ= Subject key identifier: B3:20:81:78:1F:05:5E:6C:1C:98:9C:2B:35:AE:57:65:E7:C3:A8:A4 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A61F392BCBF75F8865198EC0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd170ce2-205d-35fa-ba03-d2acdd3ce2dd.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 396982 IP address blocks: 208.76.71.0/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:39:2b:cb:f7:5f:88:65:19:8e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=7a3c0385-23f6-4fa6-a9e2-d7d7d614322e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:26:2b:a3:9e:ed:41:fc:3f:05:84:14:6a:21: 0d:16:9a:03:4c:c5:63:3f:fa:98:77:ca:d5:7f:60: 6e:d0:4e:b9:9a:e7:58:e2:cb:f4:78:84:28:a0:0c: fa:3c:b7:cf:3c:78:78:cf:40:be:00:29:44:7b:40: 76:11:c8:43:83:84:7c:a2:10:57:8a:8e:54:81:cd: ff:ba:22:dd:8b:95:f1:57:53:11:93:bf:1b:b3:da: 2d:50:43:61:5b:5e:8d:96:75:c8:82:78:05:14:56: 84:3d:43:a3:86:3f:f1:0c:de:c7:e8:60:60:68:f7: 11:3e:ad:57:2f:22:2d:ed:87:53:8a:d6:c8:20:3b: 06:28:4d:97:58:47:85:62:46:62:96:fc:99:cc:de: 7b:83:57:5e:a0:28:0b:84:ff:0f:da:d3:33:8d:9b: fa:71:5b:52:bb:5f:e0:19:bd:32:f2:01:ea:69:bf: 2d:85:fd:1a:ce:3b:f6:ef:c0:09:37:dd:ff:c1:b2: 8a:8a:82:29:77:ee:24:88:9d:5d:d2:b1:52:ee:9f: d2:bf:28:56:f1:50:41:87:3b:2b:e8:a8:b3:ec:de: 02:da:a5:14:d9:2f:bc:a1:cc:f2:9c:87:d6:ab:5c: 34:42:f1:8b:54:60:dc:45:d3:0f:72:d2:9b:e2:8f: 26:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:20:81:78:1F:05:5E:6C:1C:98:9C:2B:35:AE:57:65:E7:C3:A8:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd170ce2-205d-35fa-ba03-d2acdd3ce2dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.71.0/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:44:e3:98:79:e8:5e:7d:35:6a:13:99:07:86:52:ec:f3:8c: 93:60:64:c1:d7:29:5a:c1:17:7b:96:7f:59:31:86:fc:b5:de: 49:ed:29:b7:fc:91:20:ae:ff:ef:6c:35:42:58:85:be:b6:d5: 3a:fb:f5:c3:2d:9b:17:25:85:12:2c:ac:61:38:6d:b5:ac:4d: 93:2e:62:b4:cf:16:c9:16:f7:30:64:12:88:21:29:18:c5:75: a7:75:b3:5c:02:64:5d:6a:72:c1:36:bc:ca:f2:f9:2b:ad:bb: c5:73:6c:50:3d:e6:33:3d:32:9e:3f:7d:ff:6c:32:ae:34:1f: ea:51:54:90:37:21:1b:33:d2:2e:77:49:39:cf:75:c0:aa:cc: 7f:c8:62:2c:67:cf:7e:45:a9:b6:2b:12:0d:21:16:f3:e0:ac: e3:47:0e:a6:98:1b:fe:2c:f3:80:04:d2:03:ba:61:85:75:00: 67:a5:b9:1f:83:54:61:d3:8c:2c:99:b6:f2:bb:d1:3b:1d:54: 14:1c:35:14:49:53:56:e5:17:59:f8:99:cd:34:69:d0:8e:e8: c0:dc:fa:67:d8:f7:1a:27:af:05:d8:3a:45:72:56:66:5e:27: 66:23:c9:84:d3:b0:33:99:2d:3f:32:83:28:85:4f:a2:e0:27: 26:80:1e:14 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmmHzkry/dfiGUZjsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk N2EzYzAzODUtMjNmNi00ZmE2LWE5ZTItZDdkN2Q2MTQzMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SYro57tQfw/BYQUaiENFpoDTMVjP/qYd8rV f2Bu0E65mudY4sv0eIQooAz6PLfPPHh4z0C+AClEe0B2EchDg4R8ohBXio5Ugc3/ uiLdi5XxV1MRk78bs9otUENhW16NlnXIgngFFFaEPUOjhj/xDN7H6GBgaPcRPq1X LyIt7YdTitbIIDsGKE2XWEeFYkZilvyZzN57g1deoCgLhP8P2tMzjZv6cVtSu1/g Gb0y8gHqab8thf0azjv278AJN93/wbKKioIpd+4kiJ1d0rFS7p/SvyhW8VBBhzsr 6Kiz7N4C2qUU2S+8oczynIfWq1w0QvGLVGDcRdMPctKb4o8mZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLMggXgfBV5sHJicKzWuV2Xnw6ikMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQxNzBjZTItMjA1ZC0z NWZhLWJhMDMtZDJhY2RkM2NlMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0ExHADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3ROOYeehefTVqE5kHhlLs84yTYGTB1ylawRd7ln9ZMYb8td5J7Sm3 /JEgrv/vbDVCWIW+ttU6+/XDLZsXJYUSLKxhOG21rE2TLmK0zxbJFvcwZBKIISkY xXWndbNcAmRdanLBNrzK8vkrrbvFc2xQPeYzPTKeP33/bDKuNB/qUVSQNyEbM9Iu d0k5z3XAqsx/yGIsZ89+Ram2KxINIRbz4KzjRw6mmBv+LPOABNIDumGFdQBnpbkf g1Rh04wsmbbyu9E7HVQUHDUUSVNW5RdZ+JnNNGnQjujA3Ppn2PcaJ68F2DpFclZm XidmI8mE07AzmS0/MoMohU+i4CcmgB4U -----END CERTIFICATE-----Generated at Sat Apr 26 16:06:11 2025 by rpki-client