$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4ca87eca-36d1-3ced-8f7c-a3311ed514ba.roa File: 4ca87eca-36d1-3ced-8f7c-a3311ed514ba.roa (raw, json) Hash identifier: MNQkwxVRNgg08ip5GDEIH0oxLYxcko9lafJboqzGoh8= Subject key identifier: EE:EE:1F:0C:31:A1:9E:F7:62:32:2D:31:0D:A5:3B:78:7A:84:2B:3C Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858486C2B31E9245C5E44A48861C0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4ca87eca-36d1-3ced-8f7c-a3311ed514ba.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 54128 IP address blocks: 76.191.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:31:e9:24:5c:5e:44:a4:88:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=e7fa1e99-dbc5-4a9c-9992-970075a5343a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:97:bb:b7:ea:e6:65:05:67:e9:96:15:ff:51: a6:6c:6e:a5:a5:ac:d8:e1:8f:f4:c6:4f:db:b1:8e: b8:85:03:54:d0:b1:d4:d3:95:69:81:f7:3c:47:af: 4f:ae:80:f9:cc:8c:88:c5:98:5d:26:1a:0f:4f:a1: 8f:c1:6b:ca:13:7e:75:e8:c9:70:12:bb:a5:29:c7: 1f:dc:a3:cd:5e:6d:d8:7c:01:24:b6:9f:52:6f:f8: 77:90:36:dc:dd:0f:5d:af:17:42:8e:38:b9:3f:5f: 15:b2:07:ca:dd:be:18:a0:98:f4:d1:4f:8e:7f:fc: e7:e5:c8:0c:ea:26:67:7f:b9:66:78:8d:34:90:ff: 2f:65:8b:c7:35:ad:f4:25:0c:e7:cb:76:71:63:7c: 85:ad:c6:ad:74:64:b8:14:d1:5f:3e:2c:1a:5a:34: a4:dd:df:cf:29:af:cb:b5:f5:87:56:95:a5:07:e4: 46:9e:03:b2:18:47:57:81:8e:89:54:d6:48:39:3a: 33:42:21:a8:e3:90:ec:23:3c:8b:39:b4:7c:dc:bc: d1:c7:9c:cd:dd:e0:2e:c1:a8:f9:a4:5e:91:aa:24: df:4b:4b:27:99:49:9c:b1:73:55:ab:61:4d:33:e6: 9b:c6:5c:1e:5d:0e:f9:fd:06:e5:7d:bc:b1:4a:5d: 89:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EE:1F:0C:31:A1:9E:F7:62:32:2D:31:0D:A5:3B:78:7A:84:2B:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4ca87eca-36d1-3ced-8f7c-a3311ed514ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 76.191.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:3f:05:d4:d9:51:f5:4e:fd:f2:f7:2e:22:e7:99:a1:d0:35: 47:39:f6:8c:72:0c:55:3e:f8:90:4c:ac:55:d0:7a:f8:56:39: a3:df:38:47:b2:0f:54:ab:ac:36:9d:8a:d6:3e:6b:d4:ef:40: 53:9d:d0:50:de:62:13:d9:73:5b:fb:53:0f:1f:2d:c7:dd:b5: ef:c0:10:e7:cb:b6:59:0d:54:4a:85:d4:d3:8c:4e:6b:f9:99: ce:48:c4:28:c3:0e:2f:36:44:14:f6:67:59:1f:c7:4d:f1:27: e0:c8:f2:38:f6:c4:ed:95:ee:ad:7c:16:82:fb:49:e0:b6:83: 1a:63:f6:0a:b6:74:50:c7:77:dc:6f:02:57:75:92:d3:56:5f: 90:45:43:ea:0d:31:68:2b:fd:14:47:20:15:5d:86:72:bf:9c: d6:2e:b4:7b:92:05:5e:58:3f:49:41:84:20:45:62:f5:bd:f7: 6b:38:f9:58:7c:10:a3:e6:2f:d1:86:21:b8:39:9e:2a:79:34: 85:60:e1:83:0b:02:47:8f:e0:13:30:aa:2c:ce:78:d5:69:38: eb:55:91:14:b3:94:36:33:ad:ec:dc:58:d3:0b:b0:74:f7:3b: 29:4d:9a:7d:29:d0:46:46:ed:8a:fb:85:51:97:ea:66:02:ec: 27:ec:68:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKzHpJFxeRKSIYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk ZTdmYTFlOTktZGJjNS00YTljLTk5OTItOTcwMDc1YTUzNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pe7t+rmZQVn6ZYV/1GmbG6lpazY4Y/0xk/b sY64hQNU0LHU05Vpgfc8R69ProD5zIyIxZhdJhoPT6GPwWvKE3516MlwErulKccf 3KPNXm3YfAEktp9Sb/h3kDbc3Q9drxdCjji5P18VsgfK3b4YoJj00U+Of/zn5cgM 6iZnf7lmeI00kP8vZYvHNa30JQzny3ZxY3yFrcatdGS4FNFfPiwaWjSk3d/PKa/L tfWHVpWlB+RGngOyGEdXgY6JVNZIOTozQiGo45DsIzyLObR83LzRx5zN3eAuwaj5 pF6RqiTfS0snmUmcsXNVq2FNM+abxlweXQ75/QblfbyxSl2JmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7uHwwxoZ73YjItMQ2lO3h6hCs8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNGNhODdlY2EtMzZkMS0z Y2VkLThmN2MtYTMzMTFlZDUxNGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATL9XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0/BdTZUfVO/fL3LiLnmaHQNUc59oxyDFU++JBMrFXQevhWOaPfOEey D1SrrDaditY+a9TvQFOd0FDeYhPZc1v7Uw8fLcfdte/AEOfLtlkNVEqF1NOMTmv5 mc5IxCjDDi82RBT2Z1kfx03xJ+DI8jj2xO2V7q18FoL7SeC2gxpj9gq2dFDHd9xv Ald1ktNWX5BFQ+oNMWgr/RRHIBVdhnK/nNYutHuSBV5YP0lBhCBFYvW992s4+Vh8 EKPmL9GGIbg5nip5NIVg4YMLAkeP4BMwqizOeNVpOOtVkRSzlDYzrezcWNMLsHT3 OylNmn0p0EZG7Yr7hVGX6mYC7CfsaEQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:53 2025 by rpki-client