$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa File: 147822a5-c475-34ed-abbe-3e272f9028c9.roa (raw, json) Hash identifier: cvZ1Dv25VydjD+9BFTXRyO7znytu9HD8gjq7iB2OOjE= Subject key identifier: F8:6B:A2:4F:65:84:DD:A5:40:AF:74:8D:D4:53:00:CA:C3:80:55:79 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F432858490E16C658E2D00416D7423900 Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 76.76.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:c6:58:e2:d0:04:16:d7:42:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=8f28d1d1-a2b8-47dd-b260-0cc10bc9f9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:df:2d:36:6e:73:5d:57:0d:92:15:40:b7: f0:6c:bd:f8:80:fe:7e:eb:06:29:ed:53:f8:1f:95: ea:d3:e3:57:d8:65:c6:33:b2:b4:f0:c3:d6:d2:f1: 13:ed:3e:70:c9:66:cd:81:4b:05:2d:4f:08:31:40: fa:20:30:fb:f8:9e:d0:47:66:26:46:50:eb:5b:cf: 45:a5:46:ce:82:56:93:26:b5:5f:cc:40:be:c3:6e: 44:cd:86:d1:ca:07:bc:86:b1:68:6c:d1:73:db:15: e5:e3:7a:6c:7a:c9:2f:9e:df:73:6f:33:61:cb:1c: f3:42:fe:18:a5:21:ef:e1:8b:d0:e9:fa:ff:55:6b: 33:2a:7b:9b:aa:0b:54:09:52:ce:61:6c:29:6f:4d: a8:87:cd:88:fb:de:7e:ac:a2:c8:77:cc:4c:31:8a: 89:c5:b6:a9:84:24:c9:7d:14:8b:38:06:d4:f4:dd: 72:41:61:5c:54:13:90:69:1c:7d:5e:ac:cf:2c:09: ac:9f:c9:8b:5a:40:9f:f8:b5:2e:4a:9c:dd:7d:38: 4d:da:bb:45:ef:cf:7a:d5:69:95:06:76:8c:a7:d8: 68:dc:b0:ac:71:c8:e6:64:28:dc:de:9e:b3:5e:23: 19:6a:f2:df:86:0e:2e:25:d3:31:6a:50:0c:c9:1e: ba:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6B:A2:4F:65:84:DD:A5:40:AF:74:8D:D4:53:00:CA:C3:80:55:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 76.76.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:55:c2:5f:cf:78:b2:0c:45:16:0c:e6:4d:df:b6:6c:93:cf: ed:57:6d:40:3b:71:40:c3:25:8a:49:47:80:f6:95:8e:48:43: ca:d1:c6:2d:c1:8f:5e:71:fa:47:b5:6f:88:59:6a:22:f8:b9: ed:4e:e6:99:46:3e:5b:42:95:bc:35:82:16:4d:41:a0:39:32: cd:5e:dc:59:98:04:b3:07:81:94:6f:01:66:bc:c5:38:84:28: ca:73:98:9f:fc:9e:34:24:32:37:5f:e1:6d:4e:01:6a:9d:36: c5:c3:dd:33:c9:6e:50:56:54:70:9b:05:a5:62:d9:bf:e9:f3: d5:98:38:04:d4:2e:83:de:7e:90:0b:0a:7b:7b:15:74:48:ac: 17:c5:7e:f9:b3:6b:6c:9b:45:ca:6b:63:87:53:70:13:86:37: 2d:68:8d:7e:b5:22:ef:10:41:b3:b1:c8:4a:81:d4:74:b8:38: 69:be:95:ea:d7:71:23:dd:fd:bd:58:72:0c:a1:5b:33:24:d5: 04:f4:c8:84:69:eb:d4:93:84:94:bb:58:6e:e1:cf:c9:9b:93: a1:88:06:70:c2:d6:6b:2b:2d:a2:93:fa:c3:ba:44:92:2b:3f: c3:e8:d4:5c:a7:2f:32:30:82:a1:76:ee:ca:03:b5:fb:ad:ba: 90:70:7e:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFsZY4tAEFtdCOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk OGYyOGQxZDEtYTJiOC00N2RkLWIyNjAtMGNjMTBiYzlmOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIbfLTZuc11XDZIVQLfwbL34gP5+6wYp7VP4 H5Xq0+NX2GXGM7K08MPW0vET7T5wyWbNgUsFLU8IMUD6IDD7+J7QR2YmRlDrW89F pUbOglaTJrVfzEC+w25EzYbRyge8hrFobNFz2xXl43pseskvnt9zbzNhyxzzQv4Y pSHv4YvQ6fr/VWszKnubqgtUCVLOYWwpb02oh82I+95+rKLId8xMMYqJxbaphCTJ fRSLOAbU9N1yQWFcVBOQaRx9XqzPLAmsn8mLWkCf+LUuSpzdfThN2rtF78961WmV BnaMp9ho3LCsccjmZCjc3p6zXiMZavLfhg4uJdMxalAMyR66dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhrok9lhN2lQK90jdRTAMrDgFV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvMTQ3ODIyYTUtYzQ3NS0z NGVkLWFiYmUtM2UyNzJmOTAyOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATEwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1Vwl/PeLIMRRYM5k3ftmyTz+1XbUA7cUDDJYpJR4D2lY5IQ8rRxi3B j15x+ke1b4hZaiL4ue1O5plGPltClbw1ghZNQaA5Ms1e3FmYBLMHgZRvAWa8xTiE KMpzmJ/8njQkMjdf4W1OAWqdNsXD3TPJblBWVHCbBaVi2b/p89WYOATULoPefpAL Cnt7FXRIrBfFfvmza2ybRcprY4dTcBOGNy1ojX61Iu8QQbOxyEqB1HS4OGm+lerX cSPd/b1YcgyhWzMk1QT0yIRp69SThJS7WG7hz8mbk6GIBnDC1msrLaKT+sO6RJIr P8Po1FynLzIwgqF27soDtfutupBwfuI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:40 2025 by rpki-client