$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa File: 3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa (raw, json) Hash identifier: 39P+QNHY59Sjrh4N7IlAt8AbbB+sSDB2DPnJ9TDorNY= Subject key identifier: 39:27:25:0D:DD:34:70:0B:AD:20:A8:37:F7:24:12:E0:8D:55:88:D4 Certificate issuer: /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Certificate serial: 010D0C9F43285848FD56C02ABF02A4074F2B0180 Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 208.70.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c0:2a:bf:02:a4:07:4f:2b:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=aaf88577-466c-40f2-9bb9-017eb3e56dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c3:83:41:e9:6d:c8:a5:ae:22:34:d8:11:4b: 5c:91:71:4f:73:c5:ad:49:7d:27:d0:a7:c0:23:33: 94:32:ef:63:53:ef:f2:26:50:d7:ae:b3:e9:b2:a6: 6e:cf:48:ed:3e:67:ca:50:d2:2e:11:21:70:e2:bc: d7:d4:29:96:1d:80:c2:ce:bc:27:fa:b3:20:13:ad: bc:5a:d0:61:8e:a1:7b:20:31:85:30:45:17:58:a6: aa:6f:41:c5:b0:0e:af:9d:49:b7:85:19:9e:60:5a: 75:ed:6a:0f:d7:be:28:73:58:21:c4:41:55:ca:d5: 01:a2:5c:0c:d1:29:cc:f0:82:09:4c:fe:60:03:37: 6a:dd:5b:ff:2e:41:9d:8c:dc:28:bd:c2:1f:1f:ca: 50:82:1e:90:6f:a9:64:36:ea:c0:a3:e6:ed:3a:93: b9:13:32:25:6c:be:99:07:e7:37:58:92:49:c8:19: 49:78:f1:ac:27:1c:3d:49:3f:99:1c:4d:06:ff:47: 83:43:23:b7:0a:5d:68:77:61:17:4f:b6:6d:05:2b: 83:50:5b:d7:ec:5b:4e:69:db:33:3e:d8:e3:00:7c: 6b:4b:12:a1:88:3d:86:e7:d7:82:fd:e1:e2:e7:86: ac:4f:85:7d:b2:f5:01:41:fe:cf:93:e2:11:4c:47: e6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:27:25:0D:DD:34:70:0B:AD:20:A8:37:F7:24:12:E0:8D:55:88:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/3867ea7f-b667-361a-a1dc-5dd9b0a2002d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl X509v3 Authority Key Identifier: keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer sbgp-ipAddrBlock: critical IPv4: 208.70.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:59:49:cf:7c:55:60:3f:8d:cf:dd:c2:a6:84:d1:9b:66:4e: 48:83:a5:34:c2:ea:83:04:44:6e:db:e5:5c:a9:04:f3:fb:bf: 27:fd:43:a1:93:07:72:24:ab:47:b8:92:d3:ef:fd:b0:1a:70: 65:3c:67:3c:4d:c1:30:9f:3b:8a:00:af:28:de:3f:42:56:5f: 2d:44:e5:8f:57:3d:fd:8f:8d:fe:88:8d:ba:86:02:97:0d:f7: 81:02:1d:63:27:9b:3e:9a:3b:38:74:0b:0b:6c:b6:0c:de:e3: 89:c2:cb:2c:f6:03:1a:19:ba:cc:f3:09:67:32:56:6b:71:f4: 98:3a:d4:73:8a:2e:2a:a4:77:c3:78:36:7f:60:25:03:75:44: 23:31:56:d3:1d:78:49:53:a8:dd:3b:58:13:42:33:7e:f4:eb: c4:53:26:ca:51:58:0e:c3:a0:14:e2:be:31:4c:80:86:8a:a2: 6b:82:26:16:c2:42:98:9d:3f:05:ee:93:1d:db:33:90:92:b3: a4:92:f6:70:15:6b:4b:17:af:f7:df:05:b5:5d:8c:73:7b:56: 3d:df:1c:19:de:09:26:e5:8d:90:c0:2d:aa:1e:a1:6c:0d:de: ae:62:bb:07:fc:83:d6:c7:68:ce:49:76:87:ff:66:47:ce:d7: 32:49:fd:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsAqvwKkB08rAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc2YmI1YTQtNzFlNS00OTdmLWE0YTQtZWIzZjFhOGFm ZDFjMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YWFmODg1NzctNDY2Yy00MGYyLTliYjktMDE3ZWIzZTU2ZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcODQeltyKWuIjTYEUtckXFPc8WtSX0n0KfA IzOUMu9jU+/yJlDXrrPpsqZuz0jtPmfKUNIuESFw4rzX1CmWHYDCzrwn+rMgE628 WtBhjqF7IDGFMEUXWKaqb0HFsA6vnUm3hRmeYFp17WoP174oc1ghxEFVytUBolwM 0SnM8IIJTP5gAzdq3Vv/LkGdjNwovcIfH8pQgh6Qb6lkNurAo+btOpO5EzIlbL6Z B+c3WJJJyBlJePGsJxw9ST+ZHE0G/0eDQyO3Cl1od2EXT7ZtBSuDUFvX7FtOadsz PtjjAHxrSxKhiD2G59eC/eHi54asT4V9svUBQf7Pk+IRTEfmwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDknJQ3dNHALrSCoN/ckEuCNVYjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NzZi YjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNmMWE4YWZkMWMvMzg2N2VhN2YtYjY2Ny0z NjFhLWExZGMtNWRkOWIwYTIwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODc2YmI1YTQtNzFlNS00OTdmLWE0 YTQtZWIzZjFhOGFmZDFjLzg3NmJiNWE0LTcxZTUtNDk3Zi1hNGE0LWViM2YxYThh ZmQxYy5jcmwwHwYDVR0jBBgwFoAUE2GiTAhkvDkz5Ehc1jDniqqapGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NzZiYjVhNC03MWU1LTQ5N2YtYTRhNC1lYjNm MWE4YWZkMWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRZSc98VWA/jc/dwqaE0ZtmTkiDpTTC6oMERG7b5VypBPP7vyf9Q6GT B3Ikq0e4ktPv/bAacGU8ZzxNwTCfO4oAryjeP0JWXy1E5Y9XPf2Pjf6IjbqGApcN 94ECHWMnmz6aOzh0Cwtstgze44nCyyz2AxoZuszzCWcyVmtx9Jg61HOKLiqkd8N4 Nn9gJQN1RCMxVtMdeElTqN07WBNCM37068RTJspRWA7DoBTivjFMgIaKomuCJhbC QpidPwXukx3bM5CSs6SS9nAVa0sXr/ffBbVdjHN7Vj3fHBneCSbljZDALaoeoWwN 3q5iuwf8g9bHaM5Jdof/ZkfO1zJJ/c8= -----END CERTIFICATE-----Generated at Sat Apr 5 10:52:03 2025 by rpki-client