$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa File: f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa (raw, json) Hash identifier: +oDP0OYlGqhe/y3XOZQU2QGiqqp7rw1BJX66sVw2AYE= Subject key identifier: 97:CB:2F:CE:FE:92:B9:C5:90:D8:DA:37:20:59:8F:71:48:CE:4A:71 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BB5DA9EADCFEBE642A7B20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 208.68.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5d:a9:ea:dc:fe:be:64:2a:7b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0839178d-a11b-4ba4-83ec-0f4de1536d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:87:a6:9b:1b:6a:28:d3:ea:8c:36:15:e2: bd:04:d8:b2:06:9a:0b:bd:bc:11:d4:ab:bb:1e:14: 07:cb:49:22:1c:00:f3:0c:db:73:e6:8d:64:e2:df: ec:51:ae:ec:38:fa:81:eb:40:4c:25:bc:cf:ab:56: c2:d8:70:5e:f8:3c:8c:50:e8:a5:ea:f7:bd:55:39: 08:7a:82:36:2b:6f:72:1d:d1:3a:84:1c:b3:88:8f: 2d:f3:5e:cd:0c:d3:2e:00:2a:d3:db:d3:ba:84:46: f8:22:dd:b6:2a:22:a7:af:c5:10:d4:a4:41:cf:93: a8:43:8b:e1:21:1f:fd:31:c5:1d:12:69:a0:a5:86: ac:91:fa:68:81:ca:d8:76:f8:11:78:3a:84:23:a3: 73:84:5c:bb:d7:95:aa:14:ab:23:63:f0:8a:3a:a5: c1:95:a8:46:16:bc:92:38:e1:07:b3:30:f6:dd:bd: ef:7d:c6:fe:5b:ec:e7:33:cf:08:61:6e:08:7e:8f: e6:5e:4c:b3:ef:54:36:88:4b:5f:07:c3:14:4e:44: 42:87:5c:de:86:15:46:60:25:cf:e5:ea:90:08:e1: 57:e5:51:67:d7:06:ab:0d:1c:68:5c:2b:2d:16:03: 08:cb:4c:31:df:d7:44:da:e0:36:82:ab:bc:d9:ce: ca:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CB:2F:CE:FE:92:B9:C5:90:D8:DA:37:20:59:8F:71:48:CE:4A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f4a6b878-14b7-33dd-b1e0-d3b237987d79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:4e:b1:53:1c:17:01:1f:37:6c:1f:05:49:61:ca:a1:c0:e7: 59:39:24:66:27:6f:b1:93:14:55:03:c2:8a:dd:d5:6d:85:9b: 20:4f:2b:81:5b:b6:8f:1a:25:35:9a:7e:3b:40:76:2c:a1:70: c2:b1:aa:87:96:b8:ac:22:ef:d7:1a:de:92:ce:9e:74:23:ac: 26:16:0e:5a:8c:7f:2a:92:95:73:9f:ee:86:cc:0e:d9:be:bc: 6f:b9:73:7d:a3:2c:2a:6a:23:2c:05:f4:50:55:01:d1:fc:b4: 9c:c0:97:56:04:2e:9c:db:33:e6:88:f2:f7:37:f3:1c:22:e3: 6e:3c:3c:22:85:f3:cb:8b:b2:0b:89:8c:31:e9:86:9a:43:af: 73:cb:8c:0e:2d:15:f6:a9:16:96:8a:f1:36:d6:84:79:0f:b6: 40:fb:17:d3:c8:b1:65:8a:51:0e:9e:3c:4b:84:91:0b:ba:75: 2c:80:e2:60:fa:a3:09:9a:a1:e1:3f:ea:ea:83:d2:f7:ad:0d: de:8e:67:03:a1:b2:e3:87:93:22:e1:96:4a:bc:86:3b:51:54: 76:21:e7:08:d0:29:4f:96:55:4e:b5:8b:c8:9e:a2:1d:45:9b: 3a:1e:a7:bd:ab:f6:7c:1a:3a:bc:c6:52:73:7a:22:9d:85:3a: 81:6d:65:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku12p6tz+vmQqeyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDgzOTE3OGQtYTExYi00YmE0LTgzZWMtMGY0ZGUxNTM2ZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnWHppsbaijT6ow2FeK9BNiyBpoLvbwR1Ku7 HhQHy0kiHADzDNtz5o1k4t/sUa7sOPqB60BMJbzPq1bC2HBe+DyMUOil6ve9VTkI eoI2K29yHdE6hByziI8t817NDNMuACrT29O6hEb4It22KiKnr8UQ1KRBz5OoQ4vh IR/9McUdEmmgpYaskfpogcrYdvgReDqEI6NzhFy715WqFKsjY/CKOqXBlahGFryS OOEHszD23b3vfcb+W+znM88IYW4Ifo/mXkyz71Q2iEtfB8MUTkRCh1zehhVGYCXP 5eqQCOFX5VFn1warDRxoXCstFgMIy0wx39dE2uA2gqu82c7KpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfLL87+krnFkNjaNyBZj3FIzkpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjRhNmI4NzgtMTRiNy0z M2RkLWIxZTAtZDNiMjM3OTg3ZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdOsVMcFwEfN2wfBUlhyqHA51k5JGYnb7GTFFUDword1W2FmyBPK4Fb to8aJTWafjtAdiyhcMKxqoeWuKwi79ca3pLOnnQjrCYWDlqMfyqSlXOf7obMDtm+ vG+5c32jLCpqIywF9FBVAdH8tJzAl1YELpzbM+aI8vc38xwi4248PCKF88uLsguJ jDHphppDr3PLjA4tFfapFpaK8TbWhHkPtkD7F9PIsWWKUQ6ePEuEkQu6dSyA4mD6 owmaoeE/6uqD0vetDd6OZwOhsuOHkyLhlkq8hjtRVHYh5wjQKU+WVU61i8ieoh1F mzoep72r9nwaOrzGUnN6Ip2FOoFtZeM= -----END CERTIFICATE-----Generated at Sat Apr 26 20:53:10 2025 by rpki-client