$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa File: f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa (raw, json) Hash identifier: W+1ArigeJgiIHVT8m+duOffp239pvxJxqGECpn7fLTw= Subject key identifier: D1:55:28:10:7E:45:72:8E:AC:E5:E9:5F:B9:32:56:5A:F8:77:FF:9A Certificate issuer: /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Certificate serial: 010D0C9F432858492CAE7EFA84B2275D9AA54400 Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 3561 IP address blocks: 207.170.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:7e:fa:84:b2:27:5d:9a:a5:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a1463005-06e4-4d95-a60c-838608fd6b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2b:c1:51:cb:94:de:fa:41:3e:ac:23:a0:5e: b3:d6:0a:72:53:bc:33:bb:ad:c2:17:77:c1:79:85: 43:3f:98:8c:de:65:96:f8:c8:48:03:a8:29:1a:fe: ee:94:1d:7e:67:ca:89:4a:04:09:66:3c:32:0c:0e: 15:91:09:d3:27:02:66:8e:f5:4f:cd:7f:2d:1a:7c: 89:c6:d1:e4:77:20:52:bf:33:3f:5f:5c:ec:68:ba: 16:bc:b6:f2:01:1e:90:6d:42:e0:69:be:4b:e6:31: 0e:a1:23:17:c5:e1:84:21:77:8d:5c:33:16:0a:cd: 91:80:fc:43:f7:4d:96:1f:19:cd:05:45:2a:ea:6f: d1:2b:db:fe:19:84:c5:b5:56:e8:cd:c1:d5:b7:3c: bd:65:45:5c:be:cc:01:48:0e:bf:4e:0a:db:02:b3: 10:f5:ba:aa:c7:46:48:36:9e:05:66:ef:2e:73:fc: c3:ba:6e:a2:6a:2e:6c:15:73:26:57:50:42:63:c7: 9b:3c:1a:22:11:6a:b4:8e:d7:3e:19:dd:66:8b:11: d6:e0:68:f7:7e:f6:61:45:1d:7e:91:18:63:bc:f3: 79:ef:6f:f6:be:d2:64:3d:57:18:7a:b7:7d:54:c9: cf:cb:32:9b:cc:74:eb:0d:29:41:98:9f:16:3b:01: da:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:55:28:10:7E:45:72:8E:AC:E5:E9:5F:B9:32:56:5A:F8:77:FF:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/f9db3b81-c9ae-3fc4-9a09-da235717f7ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl X509v3 Authority Key Identifier: keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer sbgp-ipAddrBlock: critical IPv4: 207.170.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:3f:88:55:78:9f:19:dc:36:3a:71:69:80:4d:5d:df:96:2b: 12:59:f5:7f:79:f6:ca:4c:42:95:5b:6c:f3:5f:50:c4:db:2c: 34:d3:ff:dd:08:10:a2:0f:f3:a2:46:52:e1:bf:cd:3c:aa:63: 7e:d0:13:ae:4a:26:28:1d:23:3e:6d:0f:d3:79:f6:69:be:3b: f2:64:c1:47:fa:ef:bd:9b:f7:e4:af:8a:92:c2:1d:ef:57:98: 83:5c:bb:39:9d:64:b0:03:94:1f:21:a4:26:34:f5:c8:c9:22: 61:d0:b3:45:89:c7:df:9a:b2:22:d2:54:b1:eb:fd:8d:f9:82: 9c:10:14:e2:b4:09:16:72:5b:9c:61:13:a9:57:7f:8b:5f:9f: 1b:37:23:47:b8:09:9c:0a:a3:2b:72:07:a8:b4:f6:2f:1e:ea: d1:3d:2f:a9:6a:0b:e2:8a:e1:97:5e:11:71:30:ca:0d:00:55: 52:6a:03:63:d2:6f:a1:46:97:83:2a:7f:a4:98:1b:da:15:15: 4d:d5:77:74:73:42:ce:1e:29:7c:c0:93:9b:c8:4f:5d:ad:9d: 80:33:e1:16:81:46:87:c8:72:ff:48:fa:90:67:94:33:15:d2: 75:29:36:79:47:ba:0c:17:de:d5:37:59:d9:f1:02:89:f0:2d: 03:34:38:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrn76hLInXZqlRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZhYjYzNzgtZTE1ZC00NDcxLWIwMWYtYmUxNWZjNWJm YTA0MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTE0NjMwMDUtMDZlNC00ZDk1LWE2MGMtODM4NjA4ZmQ2Yjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnivBUcuU3vpBPqwjoF6z1gpyU7wzu63CF3fB eYVDP5iM3mWW+MhIA6gpGv7ulB1+Z8qJSgQJZjwyDA4VkQnTJwJmjvVPzX8tGnyJ xtHkdyBSvzM/X1zsaLoWvLbyAR6QbULgab5L5jEOoSMXxeGEIXeNXDMWCs2RgPxD 902WHxnNBUUq6m/RK9v+GYTFtVbozcHVtzy9ZUVcvswBSA6/TgrbArMQ9bqqx0ZI Np4FZu8uc/zDum6iai5sFXMmV1BCY8ebPBoiEWq0jtc+Gd1mixHW4Gj3fvZhRR1+ kRhjvPN572/2vtJkPVcYerd9VMnPyzKbzHTrDSlBmJ8WOwHaKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFVKBB+RXKOrOXpX7kyVlr4d/+aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFi NjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1ZmM1YmZhMDQvZjlkYjNiODEtYzlhZS0z ZmM0LTlhMDktZGEyMzU3MTdmN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWZhYjYzNzgtZTE1ZC00NDcxLWIw MWYtYmUxNWZjNWJmYTA0LzVmYWI2Mzc4LWUxNWQtNDQ3MS1iMDFmLWJlMTVmYzVi ZmEwNC5jcmwwHwYDVR0jBBgwFoAUYUBDv+JQs0dk/NFzD2KYA1AyGNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmFiNjM3OC1lMTVkLTQ0NzEtYjAxZi1iZTE1 ZmM1YmZhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz6qwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALc/iFV4nxncNjpxaYBNXd+WKxJZ9X959spMQpVbbPNfUMTbLDTT/90I EKIP86JGUuG/zTyqY37QE65KJigdIz5tD9N59mm+O/JkwUf6772b9+SvipLCHe9X mINcuzmdZLADlB8hpCY09cjJImHQs0WJx9+asiLSVLHr/Y35gpwQFOK0CRZyW5xh E6lXf4tfnxs3I0e4CZwKoytyB6i09i8e6tE9L6lqC+KK4ZdeEXEwyg0AVVJqA2PS b6FGl4Mqf6SYG9oVFU3Vd3RzQs4eKXzAk5vIT12tnYAz4RaBRofIcv9I+pBnlDMV 0nUpNnlHugwX3tU3WdnxAonwLQM0OB4= -----END CERTIFICATE-----Generated at Sat Apr 5 09:42:39 2025 by rpki-client