$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b1b5ded0-aa47-3bb8-8943-90d1eb40c42e.roa File: b1b5ded0-aa47-3bb8-8943-90d1eb40c42e.roa (raw, json) Hash identifier: 1knAL6WMCcQ1DiIYvfqFpLhAk/ydOB08GhSWVWMyU64= Subject key identifier: CD:87:C8:AD:85:20:C3:00:8E:6B:21:D6:1C:18:D1:98:D7:9C:D5:07 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584961B9A0768400D4A737F63680 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b1b5ded0-aa47-3bb8-8943-90d1eb40c42e.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 12083 IP address blocks: 75.76.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a0:76:84:00:d4:a7:37:f6:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=638674b0-fb08-4460-9689-ec04a2be323f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d9:b1:05:59:90:d9:20:1c:4c:c7:68:6b:08: 50:ec:a2:f3:5e:64:ca:b0:b9:7c:1c:54:09:d5:91: 87:70:63:c1:70:61:07:90:a9:7d:a0:22:76:9c:00: 17:c3:7c:a9:4f:a9:fa:27:79:8a:8c:da:cd:00:0a: 9c:ae:e5:e2:bc:73:7e:5d:7f:90:c6:7a:fb:0a:47: 01:c8:59:39:17:62:76:18:e7:87:d5:7f:d6:3d:f9: 00:fc:ab:32:f2:21:48:14:7d:9b:c8:f4:a4:09:a3: ce:03:30:30:29:32:95:ed:7b:72:1a:e3:a9:35:0f: 04:f1:c6:a4:c8:83:0b:6a:23:69:bc:32:78:02:a5: 47:b5:87:10:7a:af:59:53:3e:c1:96:0e:e6:7f:17: fd:3b:27:7e:cb:76:07:cb:b4:90:16:90:62:b2:fa: 2b:09:ae:2d:4b:48:88:34:89:a9:f5:af:53:87:95: f0:fc:bb:bf:0e:ad:bb:b3:2e:a7:8a:d6:58:69:6c: 40:d3:2a:e8:d0:c2:69:99:65:c1:54:ae:6d:19:8d: c9:28:ca:1a:6f:aa:96:69:08:16:f5:e8:d0:63:36: c5:40:14:05:a5:c1:a4:69:ca:f5:80:53:92:2f:fb: d1:d4:d1:c8:54:ef:c3:b9:56:03:5a:96:e4:aa:fa: 1a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:87:C8:AD:85:20:C3:00:8E:6B:21:D6:1C:18:D1:98:D7:9C:D5:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b1b5ded0-aa47-3bb8-8943-90d1eb40c42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 75.76.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e9:43:94:e9:f9:d1:33:e6:0e:6c:0a:a8:dd:7e:b4:ef:b5: ec:e8:ed:44:43:f5:16:17:41:b7:05:f7:93:d8:d7:4d:ac:40: 2d:bb:e0:9e:69:0f:d5:c8:4d:4d:8d:b2:87:e1:a5:0d:b1:67: fa:82:85:08:45:42:60:60:14:6e:06:ec:9f:75:ec:b5:0a:da: ae:88:31:59:ca:cd:36:39:61:2a:e2:f2:50:c8:99:f7:d8:dc: e7:e8:47:0a:1f:d9:4d:69:e6:c1:99:7c:e2:62:e2:b0:20:dd: 53:b1:bf:15:b0:fb:6b:09:bc:2e:8d:3c:8b:59:75:e5:e4:6a: a3:29:5a:59:10:3c:a0:46:6a:03:65:c3:ce:72:e5:8f:c5:ee: 84:65:a4:d0:cd:2d:11:64:9d:c6:46:2f:d2:b5:33:07:bb:60: 2a:e3:44:10:95:11:ab:2b:0e:75:02:7f:e5:f1:ac:bb:ec:60: 81:dd:69:8d:1d:f4:0d:ef:ca:4e:06:36:3d:70:b0:a1:15:14: 50:9f:48:7a:ec:54:98:bf:4d:95:19:44:07:ce:28:49:04:da: bd:48:8b:fe:f4:df:f9:6b:69:08:33:4d:8f:7a:86:b7:47:13: ac:c0:9a:9e:ef:72:10:62:a3:6b:5b:14:38:ca:7d:0e:f0:df: da:98:e9:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuaB2hADUpzf2NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk NjM4Njc0YjAtZmIwOC00NDYwLTk2ODktZWMwNGEyYmUzMjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9mxBVmQ2SAcTMdoawhQ7KLzXmTKsLl8HFQJ 1ZGHcGPBcGEHkKl9oCJ2nAAXw3ypT6n6J3mKjNrNAAqcruXivHN+XX+Qxnr7CkcB yFk5F2J2GOeH1X/WPfkA/Ksy8iFIFH2byPSkCaPOAzAwKTKV7XtyGuOpNQ8E8cak yIMLaiNpvDJ4AqVHtYcQeq9ZUz7Blg7mfxf9Oyd+y3YHy7SQFpBisvorCa4tS0iI NImp9a9Th5Xw/Lu/Dq27sy6nitZYaWxA0yro0MJpmWXBVK5tGY3JKMoab6qWaQgW 9ejQYzbFQBQFpcGkacr1gFOSL/vR1NHIVO/DuVYDWpbkqvoarQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2HyK2FIMMAjmsh1hwY0ZjXnNUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvYjFiNWRlZDAtYWE0Ny0z YmI4LTg5NDMtOTBkMWViNDBjNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFS0wAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzpQ5Tp+dEz5g5sCqjdfrTvtezo7URD9RYXQbcF95PY102sQC274J5p D9XITU2NsofhpQ2xZ/qChQhFQmBgFG4G7J917LUK2q6IMVnKzTY5YSri8lDImffY 3OfoRwof2U1p5sGZfOJi4rAg3VOxvxWw+2sJvC6NPItZdeXkaqMpWlkQPKBGagNl w85y5Y/F7oRlpNDNLRFkncZGL9K1Mwe7YCrjRBCVEasrDnUCf+XxrLvsYIHdaY0d 9A3vyk4GNj1wsKEVFFCfSHrsVJi/TZUZRAfOKEkE2r1Ii/703/lraQgzTY96hrdH E6zAmp7vchBio2tbFDjKfQ7w39qY6bE= -----END CERTIFICATE-----Generated at Sat Apr 5 12:14:47 2025 by rpki-client