$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/eb861998-933b-39d8-b4de-a7fcd97f739e.roa File: eb861998-933b-39d8-b4de-a7fcd97f739e.roa (raw, json) Hash identifier: HxKV1kS8L5KXkFg2FRxBFwYmHv7HPxjFgO2QyDxx9fg= Subject key identifier: F1:D1:C9:63:4A:CC:42:6B:46:B4:1D:2C:DE:78:54:92:FB:A0:62:25 Certificate issuer: /CN=2522458f-db94-4ba6-8127-005675e4eea9 Certificate serial: 010D0C9F43285849403948F64E52C555C1020D00 Authority key identifier: 59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/eb861998-933b-39d8-b4de-a7fcd97f739e.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 36000 IP address blocks: 208.73.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:48:f6:4e:52:c5:55:c1:02:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2522458f-db94-4ba6-8127-005675e4eea9 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=1d683169-f8ae-448d-af4f-d4b892a9f552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:29:79:b7:41:2c:3a:3c:d9:e1:26:c7:4f:83: 69:bc:19:c4:be:ac:df:c1:2d:17:ee:8a:2e:d1:be: 2c:5d:37:04:fd:36:96:cf:07:51:04:59:58:37:93: 53:4a:96:7c:3a:75:1d:33:07:57:f9:77:21:92:d5: 09:2c:3f:63:41:cb:97:5e:e0:84:8d:d5:a7:69:b7: 28:9d:bb:01:fe:00:45:31:5f:15:72:ca:cc:8a:bf: 9c:2c:57:45:b9:a1:92:16:30:fb:7c:03:56:cd:4a: d1:ae:59:d9:c0:ed:26:56:2e:a8:e5:95:15:d8:ea: 59:a0:16:25:71:3e:d0:f5:c4:6e:ee:90:d7:44:c6: 96:3a:0a:6c:ef:c5:b6:8c:9f:60:29:14:3d:af:fd: 52:d7:96:f9:a6:d1:c9:11:4f:3e:02:b8:ef:d5:03: 43:9c:d7:0a:60:52:10:de:f2:c7:f0:81:c4:76:97: 65:d9:bf:28:46:79:84:5d:07:3a:7c:a5:ba:88:a5: 92:2f:91:25:3d:91:6d:c3:60:39:49:ab:79:b3:a6: 0e:d4:f8:4c:91:c4:50:10:ea:b0:c4:d9:6b:a3:6d: 16:7e:39:95:e3:af:3a:21:6b:35:7e:7e:fe:32:bd: 29:20:0f:67:ab:2c:51:b6:6f:25:13:d2:31:4d:4d: 64:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D1:C9:63:4A:CC:42:6B:46:B4:1D:2C:DE:78:54:92:FB:A0:62:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/eb861998-933b-39d8-b4de-a7fcd97f739e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.crl X509v3 Authority Key Identifier: keyid:59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer sbgp-ipAddrBlock: critical IPv4: 208.73.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f1:38:b6:49:13:fa:31:43:6e:db:95:6d:a7:64:f1:c9:f6: 24:26:be:2f:63:15:59:22:6a:31:75:f9:9f:e5:d1:2d:85:e6: 05:97:89:7f:a7:10:2f:a0:09:80:2c:31:93:69:83:9f:be:5f: d3:db:9e:7a:d7:48:a4:80:3a:03:ca:f7:4c:a5:8d:66:78:d5: 9d:e3:ad:38:b0:b1:f8:9a:aa:fa:1b:42:b0:ad:91:ed:44:a4: bf:bb:5e:0a:83:0d:02:f4:1e:44:ea:f1:10:68:26:69:c6:5a: ae:cb:ba:d6:78:19:e5:e1:20:13:7f:fd:78:1d:4b:64:2a:7e: 89:10:b7:1d:ed:54:e1:69:4d:f0:3d:56:36:a9:58:d0:f3:82: b5:f4:97:33:21:49:9b:68:5a:84:47:59:b9:09:b3:aa:54:55: d9:b1:d2:b2:e5:61:bf:e1:20:9f:66:99:8f:61:58:3f:ce:49: 65:45:90:63:4e:dd:22:5b:88:cb:04:ea:05:11:27:3d:f6:70: e0:8f:7d:35:ed:82:eb:70:92:2e:5b:f9:4f:9a:e4:d2:8a:05: 0b:07:07:56:e5:d2:42:f8:6a:91:6f:8f:81:73:dd:12:2a:bc: 34:76:1e:6b:48:83:21:2a:31:2f:a7:c2:c0:97:43:0b:4a:6f: cb:65:1b:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUj2TlLFVcECDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyMjQ1OGYtZGI5NC00YmE2LTgxMjctMDA1Njc1ZTRl ZWE5MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MWQ2ODMxNjktZjhhZS00NDhkLWFmNGYtZDRiODkyYTlmNTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyl5t0EsOjzZ4SbHT4NpvBnEvqzfwS0X7oou 0b4sXTcE/TaWzwdRBFlYN5NTSpZ8OnUdMwdX+XchktUJLD9jQcuXXuCEjdWnabco nbsB/gBFMV8VcsrMir+cLFdFuaGSFjD7fANWzUrRrlnZwO0mVi6o5ZUV2OpZoBYl cT7Q9cRu7pDXRMaWOgps78W2jJ9gKRQ9r/1S15b5ptHJEU8+Arjv1QNDnNcKYFIQ 3vLH8IHEdpdl2b8oRnmEXQc6fKW6iKWSL5ElPZFtw2A5Sat5s6YO1PhMkcRQEOqw xNlro20WfjmV4686IWs1fn7+Mr0pIA9nqyxRtm8lE9IxTU1kiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHRyWNKzEJrRrQdLN54VJL7oGIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNTIy NDU4Zi1kYjk0LTRiYTYtODEyNy0wMDU2NzVlNGVlYTkvZWI4NjE5OTgtOTMzYi0z OWQ4LWI0ZGUtYTdmY2Q5N2Y3MzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjUyMjQ1OGYtZGI5NC00YmE2LTgx MjctMDA1Njc1ZTRlZWE5LzI1MjI0NThmLWRiOTQtNGJhNi04MTI3LTAwNTY3NWU0 ZWVhOS5jcmwwHwYDVR0jBBgwFoAUWcHcK14el6JVyj5DREmZI+gm5QEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yNTIyNDU4Zi1kYjk0LTRiYTYtODEyNy0wMDU2 NzVlNGVlYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ElMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfxOLZJE/oxQ27blW2nZPHJ9iQmvi9jFVkiajF1+Z/l0S2F5gWXiX+n EC+gCYAsMZNpg5++X9PbnnrXSKSAOgPK90yljWZ41Z3jrTiwsfiaqvobQrCtke1E pL+7XgqDDQL0HkTq8RBoJmnGWq7LutZ4GeXhIBN//XgdS2QqfokQtx3tVOFpTfA9 VjapWNDzgrX0lzMhSZtoWoRHWbkJs6pUVdmx0rLlYb/hIJ9mmY9hWD/OSWVFkGNO 3SJbiMsE6gURJz32cOCPfTXtgutwki5b+U+a5NKKBQsHB1bl0kL4apFvj4Fz3RIq vDR2HmtIgyEqMS+nwsCXQwtKb8tlG74= -----END CERTIFICATE-----Generated at Fri Apr 4 18:54:52 2025 by rpki-client