$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/c06b68a3-2e52-3ef4-a048-29fac226c21c.roa File: c06b68a3-2e52-3ef4-a048-29fac226c21c.roa (raw, json) Hash identifier: /8q7wGHBWdQQIBQkGqLRch+lmpEV52xpLinU4MO0OPI= Subject key identifier: ED:D9:2F:F5:84:0F:4F:E8:07:D2:AB:1F:5C:5E:3D:34:56:A2:80:0A Certificate issuer: /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Certificate serial: 010D0C9F43285849446937C3F084A30BEE6B9520 Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/c06b68a3-2e52-3ef4-a048-29fac226c21c.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 11626 IP address blocks: 208.71.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:37:c3:f0:84:a3:0b:ee:6b:95:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=5063a584-00f3-408e-8438-3dcdebbeca9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:79:70:6e:83:d1:49:7f:51:23:22:4e:ce:17: 64:93:7a:41:4d:a8:39:32:60:4c:ad:b0:22:1a:75: 4c:23:cd:37:66:32:8a:d8:60:4a:55:70:cc:23:2f: 37:e8:71:50:fd:3d:b7:8c:f0:34:48:17:ba:25:c6: 59:db:5f:64:49:cc:86:b5:cb:16:3e:f3:8e:3d:85: b1:fa:83:1f:ce:08:70:c9:8a:a7:05:d0:8d:b2:c6: 64:8f:c9:97:ba:3f:a6:36:c3:95:3a:7c:f8:c8:15: 3c:3d:56:93:04:72:5c:2f:07:9a:11:2e:f3:9c:c2: d8:bb:ee:bb:b9:4d:c1:1a:42:07:73:ec:8d:3d:88: 73:45:48:13:3d:76:f9:7c:35:6a:c6:02:bb:b6:50: 49:7f:14:4d:d0:cb:d4:84:29:2b:46:ee:08:25:2f: 10:ea:30:44:16:9d:d4:e2:de:6b:54:5a:81:d0:ab: 6e:10:ef:9f:87:14:f3:8d:4f:ef:40:80:81:da:95: 6c:6f:74:cb:1e:dc:5f:4d:27:3f:8a:ca:64:e4:04: 5b:d8:ba:b3:cd:b4:3c:c8:71:e0:ec:df:cf:63:18: 72:c3:2e:ae:e4:5e:4d:2c:01:a5:96:c1:04:93:c6: 9d:d6:84:35:ce:ac:40:02:54:43:b3:a8:aa:8f:ba: 98:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D9:2F:F5:84:0F:4F:E8:07:D2:AB:1F:5C:5E:3D:34:56:A2:80:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/c06b68a3-2e52-3ef4-a048-29fac226c21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl X509v3 Authority Key Identifier: keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer sbgp-ipAddrBlock: critical IPv4: 208.71.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2d:39:9e:d5:aa:3f:0e:b6:aa:ea:8a:20:1c:d5:e7:05:cf: b1:f7:a0:27:1d:51:40:6d:13:77:15:e4:e0:e6:ad:7e:46:8a: 78:5a:92:49:89:8a:47:ef:fd:be:a0:1c:1f:01:51:f2:5d:50: d0:2e:e9:eb:0f:3b:2d:89:d4:82:43:e4:cc:cd:83:09:f1:58: eb:35:4f:e8:ac:e9:4d:3e:40:8e:50:15:cb:e7:a4:c9:b0:82: 31:f2:fe:b7:af:cd:01:70:e9:d3:81:c7:88:f9:6c:06:84:7a: 6c:a3:05:5a:77:36:5b:05:e5:02:d6:cf:89:9a:6f:03:33:a2: bf:08:7e:7b:17:5a:1d:08:b6:71:86:ba:c5:b0:b6:dd:11:1e: 60:2b:f4:b8:df:41:b5:6b:b4:bf:d6:48:d4:6f:25:79:2b:6d: d5:34:d1:40:a5:e5:11:bd:71:ce:21:22:d2:58:d4:8e:0a:a3: 0b:6f:48:ee:79:6a:9e:02:88:18:d8:db:ab:b0:61:b9:fb:cf: f0:e7:e8:e0:5f:01:9b:79:40:c7:f3:61:9a:13:2d:32:48:dd: 2a:cf:15:34:61:d2:8e:b3:20:3a:22:8b:8f:d2:48:88:6c:31: 8f:b8:fa:d6:b8:59:34:30:65:c5:7f:43:98:7e:ff:3b:d2:06: ad:a2:51:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTfD8ISjC+5rlSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE2MWRhNmUtYjdjNi00OGM5LWE4YzAtOTM1YjVjNTkx MDgzMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NTA2M2E1ODQtMDBmMy00MDhlLTg0MzgtM2RjZGViYmVjYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnlwboPRSX9RIyJOzhdkk3pBTag5MmBMrbAi GnVMI803ZjKK2GBKVXDMIy836HFQ/T23jPA0SBe6JcZZ219kScyGtcsWPvOOPYWx +oMfzghwyYqnBdCNssZkj8mXuj+mNsOVOnz4yBU8PVaTBHJcLweaES7znMLYu+67 uU3BGkIHc+yNPYhzRUgTPXb5fDVqxgK7tlBJfxRN0MvUhCkrRu4IJS8Q6jBEFp3U 4t5rVFqB0KtuEO+fhxTzjU/vQICB2pVsb3TLHtxfTSc/ispk5ARb2LqzzbQ8yHHg 7N/PYxhywy6u5F5NLAGllsEEk8ad1oQ1zqxAAlRDs6iqj7qYjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3ZL/WED0/oB9KrH1xePTRWooAKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTYx ZGE2ZS1iN2M2LTQ4YzktYThjMC05MzViNWM1OTEwODMvYzA2YjY4YTMtMmU1Mi0z ZWY0LWEwNDgtMjlmYWMyMjZjMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE2MWRhNmUtYjdjNi00OGM5LWE4 YzAtOTM1YjVjNTkxMDgzLzUxNjFkYTZlLWI3YzYtNDhjOS1hOGMwLTkzNWI1YzU5 MTA4My5jcmwwHwYDVR0jBBgwFoAUi1D25mY1rnqQ/isH1RX3y/o5NQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTYxZGE2ZS1iN2M2LTQ4YzktYThjMC05MzVi NWM1OTEwODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABotOZ7Vqj8OtqrqiiAc1ecFz7H3oCcdUUBtE3cV5ODmrX5GinhakkmJ ikfv/b6gHB8BUfJdUNAu6esPOy2J1IJD5MzNgwnxWOs1T+is6U0+QI5QFcvnpMmw gjHy/revzQFw6dOBx4j5bAaEemyjBVp3NlsF5QLWz4mabwMzor8IfnsXWh0ItnGG usWwtt0RHmAr9LjfQbVrtL/WSNRvJXkrbdU00UCl5RG9cc4hItJY1I4KowtvSO55 ap4CiBjY26uwYbn7z/Dn6OBfAZt5QMfzYZoTLTJI3SrPFTRh0o6zIDoii4/SSIhs MY+4+ta4WTQwZcV/Q5h+/zvSBq2iUQY= -----END CERTIFICATE-----Generated at Fri Apr 11 23:46:12 2025 by rpki-client