$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48cc5098-b9ab-3fe5-8f52-f944b864b648.roa File: 48cc5098-b9ab-3fe5-8f52-f944b864b648.roa (raw, json) Hash identifier: CuSZVuG6qRZlWjqLYWBFAqcXvt4ZeuXiR4rMG5C3s4w= Subject key identifier: 49:B7:F8:C9:CB:F2:BF:F8:C2:54:5D:29:C2:91:42:AE:17:20:D2:86 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6421D006FA72B2BB1EE400 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48cc5098-b9ab-3fe5-8f52-f944b864b648.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 76.14.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:21:d0:06:fa:72:b2:bb:1e:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=2ad09243-8512-42f9-a550-dc089a3b2566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:df:1b:36:6f:1a:4c:2c:4d:c4:c5:59:a5:51: b4:b0:f0:0c:f0:d1:79:60:60:a1:97:3e:f3:6f:30: cb:23:f7:e7:fe:98:5c:ea:e0:29:89:5f:1d:6e:28: 30:45:03:5f:01:11:03:8d:62:9e:d4:69:38:58:25: 9f:e7:24:01:97:dc:e3:69:ac:61:58:f5:a5:0e:94: 59:95:d5:a9:6e:e4:bb:ff:d3:46:85:6f:cd:25:b5: 81:05:6d:1a:92:e3:71:38:fb:aa:44:b0:17:46:7a: e9:14:ec:87:59:7e:67:9d:3d:d5:20:6e:d0:7e:11: 2f:46:f6:94:59:ad:ca:56:e6:47:78:34:e9:5d:de: 6d:63:fb:cb:19:a0:76:b5:99:a0:84:d6:07:56:bf: 81:75:6a:59:11:62:67:f0:cf:7a:d1:f7:50:77:15: 35:43:8f:fc:4c:ab:2a:a4:69:17:58:54:fd:e6:a3: fe:d8:82:93:f0:ef:7e:7c:fc:00:69:95:da:c9:6a: c9:ec:55:e9:f9:31:4d:2f:4c:e4:b9:15:98:34:8c: 43:29:cb:03:8b:a6:20:c0:4d:fe:63:a3:11:ff:50: 56:76:89:7f:7c:6a:c4:b1:d0:7b:00:a4:7a:e8:15: 12:48:30:26:be:88:cb:49:8d:64:8b:56:5d:f1:9f: 76:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B7:F8:C9:CB:F2:BF:F8:C2:54:5D:29:C2:91:42:AE:17:20:D2:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/48cc5098-b9ab-3fe5-8f52-f944b864b648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 76.14.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:71:53:2f:1c:be:6a:1f:7b:8f:78:b4:30:03:ba:8a:d5:7d: 7d:4a:e0:88:de:98:08:85:0b:92:24:9b:25:d6:2c:31:51:f7: 40:17:3c:76:fd:d2:d4:12:ce:3c:80:bb:34:56:3d:40:b9:60: 66:36:ab:07:bb:e1:e4:1a:8c:3a:ec:db:74:7d:25:df:79:8f: cf:8a:97:34:64:3d:90:55:5b:2e:68:4f:f2:6f:98:b1:8e:74: 08:f4:23:6e:8d:ce:09:cd:d1:e7:4e:76:54:91:e8:e1:ca:fe: ac:cc:a8:de:75:93:56:c8:69:28:d3:ad:2a:77:58:c1:33:5c: 6f:a1:1c:d4:20:69:f1:56:9b:b6:36:a4:c0:16:c3:9b:e0:da: eb:9a:c0:03:ce:b6:49:77:7a:59:62:7a:9c:1d:a4:7a:5c:63: f4:65:38:1c:92:67:f1:79:9d:f2:b2:b1:02:30:40:b2:aa:a1: 55:2c:30:4f:49:a2:8f:a0:be:3a:93:6c:52:4c:ca:70:72:18: 9b:e3:06:33:97:7f:18:b8:84:b9:0d:46:c3:25:3a:7b:1f:65: 42:2d:08:da:c7:56:b4:4c:50:15:51:c7:df:e7:f4:a1:a0:1d: 02:00:84:c1:ff:75:70:90:11:8d:43:20:4c:6e:25:b3:b0:f1: bb:8e:21:4e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElLZCHQBvpysrse5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MmFkMDkyNDMtODUxMi00MmY5LWE1NTAtZGMwODlhM2IyNTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAid8bNm8aTCxNxMVZpVG0sPAM8NF5YGChlz7z bzDLI/fn/phc6uApiV8dbigwRQNfAREDjWKe1Gk4WCWf5yQBl9zjaaxhWPWlDpRZ ldWpbuS7/9NGhW/NJbWBBW0akuNxOPuqRLAXRnrpFOyHWX5nnT3VIG7QfhEvRvaU Wa3KVuZHeDTpXd5tY/vLGaB2tZmghNYHVr+BdWpZEWJn8M960fdQdxU1Q4/8TKsq pGkXWFT95qP+2IKT8O9+fPwAaZXayWrJ7FXp+TFNL0zkuRWYNIxDKcsDi6YgwE3+ Y6MR/1BWdol/fGrEsdB7AKR66BUSSDAmvojLSY1ki1Zd8Z92BQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEm3+MnL8r/4wlRdKcKRQq4XINKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNDhjYzUwOTgtYjlhYi0z ZmU1LThmNTItZjk0NGI4NjRiNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMATA4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZXFTLxy+ah97j3i0MAO6itV9fUrgiN6YCIULkiSbJdYsMVH3QBc8dv3S 1BLOPIC7NFY9QLlgZjarB7vh5BqMOuzbdH0l33mPz4qXNGQ9kFVbLmhP8m+YsY50 CPQjbo3OCc3R5052VJHo4cr+rMyo3nWTVshpKNOtKndYwTNcb6Ec1CBp8Vabtjak wBbDm+Da65rAA862SXd6WWJ6nB2kelxj9GU4HJJn8Xmd8rKxAjBAsqqhVSwwT0mi j6C+OpNsUkzKcHIYm+MGM5d/GLiEuQ1GwyU6ex9lQi0I2sdWtExQFVHH3+f0oaAd AgCEwf91cJARjUMgTG4ls7Dxu44hTg== -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:21 2025 by rpki-client