$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa File: c0ac2f53-beae-3b05-97d0-d26974f3905b.roa (raw, json) Hash identifier: Lw+x1eHCkddixHEwU/29ZcmZqMsmAEayvgCyW4cR/CM= Subject key identifier: 9A:69:35:9D:D1:2E:61:01:BC:A4:94:FB:54:DC:CB:E9:C5:83:6A:3C Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F43285848F4F697283F067524682867C0 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 16713 IP address blocks: 208.70.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:97:28:3f:06:75:24:68:28:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d83f3ef2-6813-4c9c-a2e5-4827cf771134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6e:a2:42:5b:bf:54:79:54:83:6b:72:6c:10: e3:e2:63:d8:45:6a:fa:ac:54:8f:df:67:5d:9a:c3: 77:e5:88:fb:0e:c5:d1:ff:00:23:07:a2:46:d3:cb: 73:7f:31:b8:ae:36:14:ac:62:f2:17:33:f1:2d:c3: b9:61:96:d5:19:61:75:75:dd:42:03:75:85:c6:25: 2d:32:82:51:23:2a:cf:4d:65:c7:f4:4c:84:8d:36: 57:17:bb:a1:2e:c5:2a:da:5c:7b:bd:41:ec:bc:96: 24:38:5a:99:29:cb:04:10:3c:06:95:fb:83:ee:f8: 3b:26:ba:c2:00:1a:97:fe:e8:68:28:a6:b8:04:28: 44:19:89:ac:75:67:45:e1:20:95:f9:12:69:00:54: 92:cc:72:36:a3:e0:7d:cd:20:9a:b4:fd:f9:12:01: 88:4b:0e:09:53:21:c3:b4:73:09:c7:b9:15:41:29: 78:db:02:99:74:7a:7f:3b:3d:81:77:18:35:4f:8d: bc:90:46:ac:24:c5:41:78:02:63:bf:6c:76:c8:fa: 16:f1:1e:46:6b:ff:5a:dd:9c:1e:1b:4e:9b:22:7f: ba:79:31:c2:ff:4b:6b:88:d3:e4:03:7e:a7:de:b7: 68:fb:e9:e3:6b:8b:c9:c9:51:84:23:50:df:a9:b7: 17:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:69:35:9D:D1:2E:61:01:BC:A4:94:FB:54:DC:CB:E9:C5:83:6A:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 208.70.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5f:e8:14:f8:3b:af:c5:ea:88:35:d4:12:ef:7c:ab:38:33: 11:97:01:58:92:fd:7d:82:55:a3:18:b0:87:25:f4:a0:24:3b: 9d:78:59:83:71:81:cd:53:7e:eb:5d:fc:b6:3d:29:e7:aa:df: 10:db:c1:1d:e2:c1:a2:eb:ba:a5:63:40:de:a5:dd:63:98:db: 5c:e8:02:47:d6:9c:cd:3e:14:42:06:ea:01:f3:d4:16:a7:40: 92:41:d1:4e:a9:de:ee:16:06:02:99:bf:d3:4f:33:41:c8:df: 4c:16:45:a4:f4:30:8b:25:c8:85:58:ee:db:7b:57:e9:82:81: 18:98:c4:49:c8:3c:86:14:45:e2:1a:e2:dd:16:5d:68:f7:83: a7:67:17:15:0c:60:3e:1d:01:fd:32:6a:45:62:f4:80:b0:29: cd:6e:e6:ff:11:3c:9d:de:26:e4:88:4c:03:ca:6c:f7:82:01: 2d:39:9e:3f:7f:97:84:f2:62:3c:fc:20:a4:e2:cd:17:37:4a: e6:f6:aa:33:0b:42:82:ec:fa:97:5b:ad:dd:c4:c2:ef:9b:55: 3d:dc:ab:1b:82:c8:59:8c:f7:c3:37:d0:69:a6:83:94:11:c2: cd:13:51:cb:97:73:da:a5:da:ad:92:d7:f5:03:30:fa:5d:92: cc:5f:e1:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pcoPwZ1JGgoZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDgzZjNlZjItNjgxMy00YzljLWEyZTUtNDgyN2NmNzcxMTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA326iQlu/VHlUg2tybBDj4mPYRWr6rFSP32dd msN35Yj7DsXR/wAjB6JG08tzfzG4rjYUrGLyFzPxLcO5YZbVGWF1dd1CA3WFxiUt MoJRIyrPTWXH9EyEjTZXF7uhLsUq2lx7vUHsvJYkOFqZKcsEEDwGlfuD7vg7JrrC ABqX/uhoKKa4BChEGYmsdWdF4SCV+RJpAFSSzHI2o+B9zSCatP35EgGISw4JUyHD tHMJx7kVQSl42wKZdHp/Oz2Bdxg1T428kEasJMVBeAJjv2x2yPoW8R5Ga/9a3Zwe G06bIn+6eTHC/0triNPkA36n3rdo++nja4vJyVGEI1DfqbcX2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJppNZ3RLmEBvKSU+1Tcy+nFg2o8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvYzBhYzJmNTMtYmVhZS0z YjA1LTk3ZDAtZDI2OTc0ZjM5MDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpf6BT4O6/F6og11BLvfKs4MxGXAViS/X2CVaMYsIcl9KAkO514WYNx gc1Tfutd/LY9Keeq3xDbwR3iwaLruqVjQN6l3WOY21zoAkfWnM0+FEIG6gHz1Ban QJJB0U6p3u4WBgKZv9NPM0HI30wWRaT0MIslyIVY7tt7V+mCgRiYxEnIPIYUReIa 4t0WXWj3g6dnFxUMYD4dAf0yakVi9ICwKc1u5v8RPJ3eJuSITAPKbPeCAS05nj9/ l4TyYjz8IKTizRc3Sub2qjMLQoLs+pdbrd3Ewu+bVT3cqxuCyFmM98M30Gmmg5QR ws0TUcuXc9ql2q2S1/UDMPpdksxf4QY= -----END CERTIFICATE-----Generated at Fri Apr 11 21:36:43 2025 by rpki-client