$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5844de8a-d678-323d-916e-7e54edbffbd9.roa File: 5844de8a-d678-323d-916e-7e54edbffbd9.roa (raw, json) Hash identifier: +To/Z2u27hyn70k1TtgneKKlUF0Mj1ti9A0TMKWbE7g= Subject key identifier: 69:9F:95:6F:04:47:81:49:F7:41:09:89:75:D9:10:F0:C3:EB:48:7E Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F43285849088177AF44988D08A386FF00 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5844de8a-d678-323d-916e-7e54edbffbd9.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 7265 IP address blocks: 216.47.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:77:af:44:98:8d:08:a3:86:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=5bf3749b-74e8-4068-826f-b1b7f8c05811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:95:36:7c:5f:cc:a8:8a:eb:81:4c:7a:94:c3: 1e:2a:39:30:aa:e3:5c:22:0f:00:83:c0:8e:3b:31: f8:6d:38:73:91:b4:2f:2e:7e:2c:68:e1:47:5e:4a: 60:f3:e9:49:74:29:1b:d8:0f:8b:7c:77:b4:4d:18: 24:c9:30:07:b0:50:3c:b1:fb:e3:7b:aa:51:43:24: 27:d5:46:21:9a:b1:e1:19:00:a6:af:48:d0:1a:13: 63:78:32:b9:65:73:46:9a:e1:ab:47:4a:e6:e2:5f: 95:b6:4f:06:e7:20:5a:45:94:de:be:d1:6a:17:f4: ec:49:e7:e2:a9:68:41:f8:2e:59:27:3e:eb:ca:52: 40:a3:95:8b:87:58:c0:37:53:14:92:a3:e1:c1:00: 15:bb:eb:86:30:97:5b:4c:91:77:b4:d6:23:e0:e6: a4:98:00:5c:b8:8e:e4:a9:e4:7d:b4:f4:7f:b4:ce: 7e:39:2e:34:be:34:19:6e:ff:cb:42:cf:8a:de:a8: 55:50:55:e0:d4:21:0f:16:0b:ad:f3:24:11:1b:52: dc:c0:f3:2f:39:22:93:64:8e:a7:d8:d9:21:cb:6d: 79:c8:66:70:54:44:23:87:23:4b:a5:9e:66:9e:78: c6:e6:a7:25:ed:c2:84:74:af:db:c2:7a:45:d4:3c: d2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9F:95:6F:04:47:81:49:F7:41:09:89:75:D9:10:F0:C3:EB:48:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5844de8a-d678-323d-916e-7e54edbffbd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 216.47.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:78:ea:a3:e1:d9:17:dc:ef:81:cf:21:09:ee:d2:9b:18:54: 1e:9b:60:59:6a:ef:06:49:17:b8:0b:d8:1d:88:7a:91:c1:10: ff:cb:91:24:dc:4f:c7:6c:b5:8c:a2:08:5e:dc:dc:5a:3a:a8: 4a:ea:78:ed:ee:b8:a2:d4:11:7c:1f:08:ad:85:30:0a:6e:1d: 1f:c5:e8:3a:1e:18:cd:bf:2c:79:3c:0e:fd:bb:19:a8:86:1f: 50:cd:3a:a6:92:5a:0d:19:86:dd:ae:9a:52:2e:ae:2e:64:14: f1:6f:45:a3:a2:84:9f:b8:97:11:a3:63:b9:84:c8:fb:38:13: 10:9d:af:09:40:eb:95:0b:68:b7:33:4f:a6:a8:4f:0b:56:2d: 9f:28:1a:31:3b:2e:b6:06:ab:a7:e9:ee:75:12:fc:78:1d:74: b9:de:a9:22:e2:b3:17:cc:1b:95:3e:ed:79:af:37:ec:3f:b0: ff:7d:4d:d8:a0:2f:30:67:b7:84:5a:4e:f7:d7:61:66:ed:38: 6f:b1:25:57:78:01:aa:7d:4d:43:b6:24:56:e2:b8:3a:1a:54: 46:42:68:de:0c:8f:5f:41:2d:77:15:3b:fb:d5:42:15:5d:bc: 44:59:51:b3:f0:d1:b8:cd:bb:26:e3:f9:3d:0c:cf:f8:fe:b0: 9b:0a:8a:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXevRJiNCKOG/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NWJmMzc0OWItNzRlOC00MDY4LTgyNmYtYjFiN2Y4YzA1ODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZU2fF/MqIrrgUx6lMMeKjkwquNcIg8Ag8CO OzH4bThzkbQvLn4saOFHXkpg8+lJdCkb2A+LfHe0TRgkyTAHsFA8sfvje6pRQyQn 1UYhmrHhGQCmr0jQGhNjeDK5ZXNGmuGrR0rm4l+Vtk8G5yBaRZTevtFqF/TsSefi qWhB+C5ZJz7rylJAo5WLh1jAN1MUkqPhwQAVu+uGMJdbTJF3tNYj4OakmABcuI7k qeR9tPR/tM5+OS40vjQZbv/LQs+K3qhVUFXg1CEPFgut8yQRG1LcwPMvOSKTZI6n 2Nkhy215yGZwVEQjhyNLpZ5mnnjG5qcl7cKEdK/bwnpF1DzSuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmflW8ER4FJ90EJiXXZEPDD60h+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvNTg0NGRlOGEtZDY3OC0z MjNkLTkxNmUtN2U1NGVkYmZmYmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2C/TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIt46qPh2Rfc74HPIQnu0psYVB6bYFlq7wZJF7gL2B2IepHBEP/LkSTc T8dstYyiCF7c3Fo6qErqeO3uuKLUEXwfCK2FMApuHR/F6DoeGM2/LHk8Dv27GaiG H1DNOqaSWg0Zht2umlIuri5kFPFvRaOihJ+4lxGjY7mEyPs4ExCdrwlA65ULaLcz T6aoTwtWLZ8oGjE7LrYGq6fp7nUS/HgddLneqSLisxfMG5U+7XmvN+w/sP99Tdig LzBnt4RaTvfXYWbtOG+xJVd4Aap9TUO2JFbiuDoaVEZCaN4Mj19BLXcVO/vVQhVd vERZUbPw0bjNuybj+T0Mz/j+sJsKioI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:16 2025 by rpki-client