$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6b0d4b7a-9cda-33f9-a820-773849923e4f.roa File: 6b0d4b7a-9cda-33f9-a820-773849923e4f.roa (raw, json) Hash identifier: 4LdB6jS2pZKLNOWy8sfmSbz4Ns1P4TzaRjRBbHEbQcE= Subject key identifier: 14:17:3B:2E:18:45:6B:11:83:A0:F2:3C:94:DF:96:06:4C:DF:88:A1 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584929E3C9EC98F715AD8B34D3C0 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6b0d4b7a-9cda-33f9-a820-773849923e4f.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 13768 IP address blocks: 76.74.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:c9:ec:98:f7:15:ad:8b:34:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=f63d398c-52ca-423d-b8df-c318796896a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:39:e1:59:c6:5f:f4:06:e8:63:10:c7:0b:fc: 18:3a:8a:c2:5e:2b:36:23:d6:cd:9a:ab:f5:64:25: eb:77:b3:d0:14:79:20:93:9b:74:2d:bc:c5:37:d3: 8a:42:35:0b:51:e1:c7:a3:cc:bc:5f:6a:c3:95:11: 98:22:0d:7e:78:b8:dd:93:dc:52:69:be:e1:99:b1: 70:5f:3f:de:1b:48:28:46:e6:ee:29:52:77:76:bb: 8d:4e:6d:86:25:d9:0e:22:7d:94:4a:d8:34:a8:7e: 9e:c8:2e:74:24:04:6a:82:b7:6a:ef:33:71:02:57: 27:73:5f:40:6c:2d:c6:63:a1:c6:c2:19:bb:14:3c: 4a:cc:5a:bc:e6:6b:db:99:76:4d:ec:1c:40:7d:48: a9:c1:77:05:58:f7:25:38:3f:9f:84:17:27:35:62: 24:77:c9:1a:57:d9:43:a2:8d:bc:7a:eb:b5:70:e2: 51:a2:fb:2a:86:22:90:bb:b6:eb:12:ec:8d:df:39: 6e:78:d4:f3:7a:54:11:ee:19:44:80:72:86:e6:d0: 5b:ec:07:cc:25:9f:43:30:dd:c7:67:3a:c5:5a:9c: 8d:fd:f1:41:bb:90:c5:8b:f6:49:a9:29:21:1f:db: cd:39:42:e5:f2:c2:f9:ee:7b:3e:10:2f:ac:c9:4e: 82:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:17:3B:2E:18:45:6B:11:83:A0:F2:3C:94:DF:96:06:4C:DF:88:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6b0d4b7a-9cda-33f9-a820-773849923e4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 76.74.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d3:69:04:b2:20:0a:d8:68:fa:ff:f7:3c:a1:17:fe:9a:db: 8e:1c:5e:d3:5e:98:6e:8b:30:11:32:df:2c:fd:44:7b:d8:c9: d9:05:16:bb:7c:31:6c:5d:72:b8:a4:d2:99:12:76:57:45:03: ca:85:6d:38:a6:6f:a7:9c:b9:c2:52:f7:14:4c:54:5a:1a:0e: 4c:94:54:b3:32:2e:38:2f:69:c5:d7:a4:87:be:45:1c:38:54: 7a:77:06:1c:0c:61:3f:4a:9e:2e:09:33:98:bd:bd:6a:71:d7: 44:fe:b7:51:50:db:a7:eb:3e:a4:1b:c8:57:cf:bd:ee:e0:89: d7:c0:b1:a6:ab:fb:19:9a:50:08:3c:a1:b8:44:4e:af:85:63: 1a:cc:ee:8a:a5:1a:89:31:95:d9:17:8e:4e:ed:6c:b1:2c:03: f9:80:d4:4b:46:ae:9f:0d:d2:b7:50:8e:d5:3c:de:0c:f1:c7: d1:b8:44:24:5b:c9:33:b4:f8:6c:50:dc:86:98:36:d1:7d:fe: 15:0b:68:14:d0:7f:7c:50:cd:35:c8:84:77:b5:23:e7:c7:2c: aa:49:cd:37:bf:1f:4c:71:c6:67:71:59:b7:4d:9d:db:f9:13: 2e:fa:92:57:9b:32:eb:f3:c6:68:1e:65:cc:d8:0d:96:92:91: de:48:52:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp48nsmPcVrYs008AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk ZjYzZDM5OGMtNTJjYS00MjNkLWI4ZGYtYzMxODc5Njg5NmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjnhWcZf9AboYxDHC/wYOorCXis2I9bNmqv1 ZCXrd7PQFHkgk5t0LbzFN9OKQjULUeHHo8y8X2rDlRGYIg1+eLjdk9xSab7hmbFw Xz/eG0goRubuKVJ3druNTm2GJdkOIn2UStg0qH6eyC50JARqgrdq7zNxAlcnc19A bC3GY6HGwhm7FDxKzFq85mvbmXZN7BxAfUipwXcFWPclOD+fhBcnNWIkd8kaV9lD oo28euu1cOJRovsqhiKQu7brEuyN3zlueNTzelQR7hlEgHKG5tBb7AfMJZ9DMN3H ZzrFWpyN/fFBu5DFi/ZJqSkhH9vNOULl8sL57ns+EC+syU6CzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQXOy4YRWsRg6DyPJTflgZM34ihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNmIwZDRiN2EtOWNkYS0z M2Y5LWE4MjAtNzczODQ5OTIzZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATEqJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjTaQSyIArYaPr/9zyhF/6a244cXtNemG6LMBEy3yz9RHvYydkFFrt8 MWxdcrik0pkSdldFA8qFbTimb6ecucJS9xRMVFoaDkyUVLMyLjgvacXXpIe+RRw4 VHp3BhwMYT9Kni4JM5i9vWpx10T+t1FQ26frPqQbyFfPve7gidfAsaar+xmaUAg8 obhETq+FYxrM7oqlGokxldkXjk7tbLEsA/mA1EtGrp8N0rdQjtU83gzxx9G4RCRb yTO0+GxQ3IaYNtF9/hULaBTQf3xQzTXIhHe1I+fHLKpJzTe/H0xxxmdxWbdNndv5 Ey76klebMuvzxmgeZczYDZaSkd5IUog= -----END CERTIFICATE-----Generated at Fri Mar 14 11:16:42 2025 by rpki-client