$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/c78c3086-40c9-3df8-aba6-4ce5cd51c536.roa File: c78c3086-40c9-3df8-aba6-4ce5cd51c536.roa (raw, json) Hash identifier: 17FSnfOXDn7WMUy9VkygsupAb+78d/OnjewW20dlZwE= Subject key identifier: 73:5F:CA:31:8D:E7:6C:A0:96:8D:84:85:89:46:84:E5:A9:8A:BE:60 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F432858490881781EF175FF11A1C42680 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/c78c3086-40c9-3df8-aba6-4ce5cd51c536.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 7265 IP address blocks: 216.47.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:78:1e:f1:75:ff:11:a1:c4:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=52be5fc0-8c4f-4444-9d8f-d5a081ae3e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d4:12:b7:38:92:80:fc:b4:97:9c:73:c5:d9: a9:21:6b:96:38:aa:ff:6d:8b:b2:f6:55:25:0e:ab: 03:6a:95:29:9d:a9:17:8b:41:57:c6:43:9d:ac:48: d6:e5:ac:ca:ea:8c:72:84:84:c1:28:a7:4f:f0:3b: c0:8a:65:06:96:b1:ce:ed:6a:13:b6:ae:07:89:c2: 4b:86:b4:c5:fe:64:48:e2:72:ad:ad:4e:aa:77:06: 77:65:9b:bc:1e:e7:34:d3:ad:d5:bf:dc:b0:dd:ea: 5d:13:5b:5d:3f:f5:76:c9:68:a5:f6:b3:89:c5:9f: 1a:a6:35:19:97:de:b5:a4:ec:65:71:45:27:d4:23: 27:00:9e:12:07:7a:a3:63:49:99:8e:0e:00:92:cb: c8:f8:e8:a3:b9:93:b4:73:75:f8:41:47:87:07:1c: 43:fd:70:09:3d:89:a0:60:85:f0:cf:0d:d9:7f:fd: 2a:78:9c:ba:4b:a6:3d:d7:fc:1c:cc:ce:8c:d0:45: c7:1c:2f:36:58:8e:1d:a8:7d:35:c4:56:6f:c6:23: f4:76:df:1d:05:7b:47:63:77:53:c9:c0:90:80:13: 96:21:07:14:3c:06:f1:74:42:02:42:4e:6a:c5:40: 52:dd:db:16:96:17:c2:8c:f8:a7:76:46:44:3d:1f: 99:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5F:CA:31:8D:E7:6C:A0:96:8D:84:85:89:46:84:E5:A9:8A:BE:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/c78c3086-40c9-3df8-aba6-4ce5cd51c536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 216.47.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:e0:83:f9:57:86:17:ba:5d:c3:23:13:91:53:b0:ae:7f:47: 9e:3c:2a:d7:fb:01:eb:54:71:2c:50:a4:32:1b:8e:fd:30:e2: e7:7b:4e:90:a3:6f:a8:7e:19:cc:2c:2f:78:29:47:4b:91:4a: 8c:ae:d2:43:ce:c3:c5:f2:85:80:c0:c2:72:bd:a3:db:9e:da: 5c:ca:ae:a7:d6:b4:56:58:4a:72:c3:f9:e8:22:bf:6a:63:d7: 1b:56:4d:df:2c:85:b8:63:c7:72:83:28:ba:79:59:ae:25:c1: 52:24:dc:3a:ed:44:24:da:d5:14:6b:6a:63:8f:3a:3d:c8:fc: b9:b2:8f:83:da:df:28:0b:29:c0:55:84:3a:26:1b:f4:cb:01: e6:d8:cc:17:36:56:19:a8:d6:df:2b:21:e4:a1:4f:40:7d:7b: b1:e5:de:6b:1d:79:24:d4:f1:fc:8f:a5:e0:c2:c6:2c:ce:b1: 48:a3:72:7d:d1:3d:ae:47:97:c9:2f:cb:52:65:03:ba:5a:26: b5:12:74:d4:95:c2:97:cd:da:d7:6c:b7:9b:9d:21:f8:bb:a1: aa:dd:d7:6b:2e:d3:91:7d:85:8c:c4:37:04:72:d0:27:02:7d: a1:86:10:0b:7b:45:45:6e:1d:84:29:91:98:6e:0c:2c:2c:75: b4:51:7f:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXge8XX/EaHEJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NTJiZTVmYzAtOGM0Zi00NDQ0LTlkOGYtZDVhMDgxYWUzZTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodQStziSgPy0l5xzxdmpIWuWOKr/bYuy9lUl DqsDapUpnakXi0FXxkOdrEjW5azK6oxyhITBKKdP8DvAimUGlrHO7WoTtq4HicJL hrTF/mRI4nKtrU6qdwZ3ZZu8Huc0063Vv9yw3epdE1tdP/V2yWil9rOJxZ8apjUZ l961pOxlcUUn1CMnAJ4SB3qjY0mZjg4AksvI+OijuZO0c3X4QUeHBxxD/XAJPYmg YIXwzw3Zf/0qeJy6S6Y91/wczM6M0EXHHC82WI4dqH01xFZvxiP0dt8dBXtHY3dT ycCQgBOWIQcUPAbxdEICQk5qxUBS3dsWlhfCjPindkZEPR+ZyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNfyjGN52yglo2EhYlGhOWpir5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvYzc4YzMwODYtNDBjOS0z ZGY4LWFiYTYtNGNlNWNkNTFjNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2C/eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILgg/lXhhe6XcMjE5FTsK5/R548Ktf7AetUcSxQpDIbjv0w4ud7TpCj b6h+GcwsL3gpR0uRSoyu0kPOw8XyhYDAwnK9o9ue2lzKrqfWtFZYSnLD+egiv2pj 1xtWTd8shbhjx3KDKLp5Wa4lwVIk3DrtRCTa1RRramOPOj3I/Lmyj4Pa3ygLKcBV hDomG/TLAebYzBc2Vhmo1t8rIeShT0B9e7Hl3msdeSTU8fyPpeDCxizOsUijcn3R Pa5Hl8kvy1JlA7paJrUSdNSVwpfN2tdst5udIfi7oard12su05F9hYzENwRy0CcC faGGEAt7RUVuHYQpkZhuDCwsdbRRfwg= -----END CERTIFICATE-----Generated at Sat Apr 5 12:12:54 2025 by rpki-client