$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e521e10-05f5-31f1-a49a-9a7a844cba26.roa File: 9e521e10-05f5-31f1-a49a-9a7a844cba26.roa (raw, json) Hash identifier: TMmxcTbVIbZPkZtfuWkQRSE6Pg1ySfIIfbCWFfS/rUs= Subject key identifier: 04:CC:1B:CA:EE:12:59:12:53:5F:B7:C5:E3:71:C7:D4:BD:A1:CE:0E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58219490ED582477B3C3000 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e521e10-05f5-31f1-a49a-9a7a844cba26.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 208.76.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:19:49:0e:d5:82:47:7b:3c:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=b9dccc0e-b28c-499f-bc66-7dd49aa2d0ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1f:9c:2a:6c:a7:68:3d:9e:73:69:02:0c:4e: 5e:63:e0:38:fb:3f:a6:41:b6:9f:6e:c4:e5:52:ce: a2:88:bb:59:0d:da:1d:6f:e9:b3:be:5b:b5:cf:cb: 53:08:95:7c:d7:8e:86:67:dd:5b:17:ab:c8:00:f1: 56:52:5a:23:05:6c:85:98:37:45:74:38:da:71:6e: e3:fb:b1:23:9d:9b:b2:0e:92:7c:62:7c:59:a6:ec: 9a:c9:6a:f4:80:b5:39:63:15:2b:c6:88:1e:0b:0c: 2c:8b:67:71:67:22:8f:e0:05:30:d2:f4:91:d4:c3: 29:9c:15:e4:75:47:43:8b:8c:d4:5c:e4:fd:3a:29: aa:51:be:51:c2:c9:0f:c9:a3:a7:3c:5a:e9:a1:f6: ce:29:90:59:b8:2c:08:ff:52:56:8c:17:e0:46:00: 19:e7:44:a5:82:ba:9a:ce:c2:10:86:97:b4:9a:9e: 65:cd:4a:ad:d6:58:3b:7a:2e:1e:28:06:4b:09:3c: a1:01:ab:5c:a5:db:2b:a8:89:c0:a3:d8:52:37:d4: fe:37:fb:65:84:f1:48:fd:7f:a3:e6:48:7c:ec:77: 33:ab:58:76:c6:f6:cc:ea:ab:94:bd:5d:e4:20:da: 56:c0:d1:66:74:80:fd:1f:1a:f8:4b:cc:56:81:73: e3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CC:1B:CA:EE:12:59:12:53:5F:B7:C5:E3:71:C7:D4:BD:A1:CE:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9e521e10-05f5-31f1-a49a-9a7a844cba26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:1f:65:6d:92:6d:e4:ca:88:a6:cd:3c:ea:1e:30:90:ff:ff: 86:9a:74:55:41:dd:52:a8:91:ad:76:b2:71:fc:1f:5b:b6:95: 52:30:70:be:24:5f:cd:77:38:85:78:86:c2:44:09:6d:69:5b: 09:c4:90:3c:29:e5:0e:62:87:cf:9e:14:db:bc:38:a7:97:74: 44:92:33:fe:b4:04:ca:40:07:cc:e5:62:1d:d3:74:ce:0b:75: 4e:c7:63:61:86:83:98:07:d6:8a:c6:e7:62:c7:db:0e:fd:49: 8a:73:e7:47:f9:47:a3:63:94:1b:18:ad:97:cf:0c:07:3c:4b: 15:7e:06:44:98:d3:7a:a0:42:d9:15:7a:22:11:91:64:65:8e: cf:46:46:f6:ad:2f:c4:03:f0:e8:af:de:59:4e:e4:79:61:4b: d0:00:bc:0e:24:f5:70:57:63:5b:56:ae:9a:ea:ed:f0:a7:20: 25:ab:23:f9:9a:ac:cf:20:1c:07:3f:a0:03:27:4d:3a:4f:21: 48:61:67:28:76:17:04:c4:e8:87:cd:7f:13:ad:e7:6f:da:2a: 13:fe:0b:d5:7e:53:d5:d0:61:90:c6:49:80:a5:c2:99:eb:c5: 5e:cc:9f:14:7d:56:8c:e8:b8:83:99:a5:1b:fe:1c:67:80:e5: 3b:10:fe:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghlJDtWCR3s8MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YjlkY2NjMGUtYjI4Yy00OTlmLWJjNjYtN2RkNDlhYTJkMGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB+cKmynaD2ec2kCDE5eY+A4+z+mQbafbsTl Us6iiLtZDdodb+mzvlu1z8tTCJV8146GZ91bF6vIAPFWUlojBWyFmDdFdDjacW7j +7EjnZuyDpJ8YnxZpuyayWr0gLU5YxUrxogeCwwsi2dxZyKP4AUw0vSR1MMpnBXk dUdDi4zUXOT9OimqUb5RwskPyaOnPFrpofbOKZBZuCwI/1JWjBfgRgAZ50Slgrqa zsIQhpe0mp5lzUqt1lg7ei4eKAZLCTyhAatcpdsrqInAo9hSN9T+N/tlhPFI/X+j 5kh87Hczq1h2xvbM6quUvV3kINpWwNFmdID9Hxr4S8xWgXPjxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATMG8ruElkSU1+3xeNxx9S9oc4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWU1MjFlMTAtMDVmNS0z MWYxLWE0OWEtOWE3YTg0NGNiYTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQfZW2SbeTKiKbNPOoeMJD//4aadFVB3VKoka12snH8H1u2lVIwcL4k X813OIV4hsJECW1pWwnEkDwp5Q5ih8+eFNu8OKeXdESSM/60BMpAB8zlYh3TdM4L dU7HY2GGg5gH1orG52LH2w79SYpz50f5R6NjlBsYrZfPDAc8SxV+BkSY03qgQtkV eiIRkWRljs9GRvatL8QD8Oiv3llO5HlhS9AAvA4k9XBXY1tWrprq7fCnICWrI/ma rM8gHAc/oAMnTTpPIUhhZyh2FwTE6IfNfxOt52/aKhP+C9V+U9XQYZDGSYClwpnr xV7MnxR9VozouIOZpRv+HGeA5TsQ/v4= -----END CERTIFICATE-----Generated at Fri Apr 4 09:55:53 2025 by rpki-client