$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/62543e6b-079e-3a0f-afa0-639713811644.roa File: 62543e6b-079e-3a0f-afa0-639713811644.roa (raw, json) Hash identifier: 03ZmbtFHt1nC8M5UtrifK7f8MNRm+3uZNlufhDEVnU0= Subject key identifier: 7D:8A:2E:98:19:25:6E:52:26:66:0C:63:2F:CC:BD:94:B0:2F:68:E7 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64318F109583182EEB29C0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/62543e6b-079e-3a0f-afa0-639713811644.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 208.76.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:31:8f:10:95:83:18:2e:eb:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=b20aceb6-ff78-4fcd-aa4b-834602c1e2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:96:c9:e9:e2:11:a0:dc:98:59:15:de:2c:e5: c2:db:1c:33:2d:91:89:eb:47:5f:0e:22:d3:3b:76: f2:71:50:79:b2:f9:6a:a7:27:f3:94:9e:bb:ce:5c: 19:17:a0:45:34:05:5d:10:62:38:0c:07:03:b2:67: 61:4e:29:65:8e:9b:d7:c1:42:98:3b:ff:67:f4:37: 6a:05:b6:e0:ae:9a:54:2c:9c:d7:03:fd:38:17:4e: db:1f:e1:09:d8:f1:93:07:02:06:9b:dc:85:02:37: 6c:db:8f:68:0d:85:b7:33:52:16:13:13:38:72:fb: 08:1e:53:73:45:73:93:ef:88:56:15:ca:30:05:1e: e8:b2:6b:4f:00:9d:44:82:d3:7e:7d:de:d6:6b:7a: aa:19:4d:2a:9b:88:5a:6b:7d:68:45:88:d3:8e:9f: 48:f8:13:c9:de:61:39:3a:10:fd:7f:3a:6b:ab:2c: ee:47:cf:b8:75:3a:b3:5d:15:2e:e9:a8:4f:aa:19: 86:f7:04:05:6b:61:44:74:58:b0:5e:ef:ca:e5:ac: 99:b2:af:10:4f:4b:2d:45:b5:fe:20:6d:52:81:09: 93:f1:23:6e:da:e2:bf:3f:e1:77:e2:d7:dd:38:cf: 7f:24:b0:3b:78:9e:f8:20:27:f4:50:e2:6a:e1:5a: a3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8A:2E:98:19:25:6E:52:26:66:0C:63:2F:CC:BD:94:B0:2F:68:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/62543e6b-079e-3a0f-afa0-639713811644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.76.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:04:06:a8:83:4e:ff:31:3a:aa:ce:25:c9:3b:35:a7:33:ca: 6a:1c:15:e4:a4:02:ac:ad:44:ca:52:5f:8c:a3:66:ec:e8:25: b6:5e:aa:1d:3d:d4:65:69:9a:68:1e:cd:16:99:bb:e8:36:a0: 16:23:a9:5b:f4:3a:57:6f:4e:5b:71:de:8a:2f:bd:54:ff:e9: b6:29:1f:7c:59:1c:ff:11:f1:89:6a:60:3a:94:6e:fb:a2:f4: c4:17:5c:5b:e3:62:46:01:7c:a6:02:bb:c6:6f:43:25:6f:4b: 76:b3:f8:ad:da:44:32:ea:b5:6f:52:b0:18:f6:02:bb:a7:8d: 99:60:06:31:69:57:a9:42:15:06:20:b6:71:c2:27:b5:77:9e: 2e:4e:e4:a0:a7:45:e0:f7:f0:6f:b6:1a:ee:c2:84:7a:2f:bd: 88:a8:ab:65:86:ba:6f:c8:50:00:16:95:3a:f1:90:56:7f:77: 67:86:66:ef:82:e3:44:05:a9:44:22:da:d2:8d:e8:e0:6d:c1: 04:05:84:02:8c:63:29:bd:43:54:87:95:20:fd:dc:33:4c:cd: 25:9b:f3:37:c2:93:11:6d:99:c3:38:f7:29:f3:8e:6b:1f:30: dc:fa:ab:c6:c6:57:31:86:5f:3e:91:4d:e1:21:53:3b:d4:8a: 85:58:10:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZDGPEJWDGC7rKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YjIwYWNlYjYtZmY3OC00ZmNkLWFhNGItODM0NjAyYzFlMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpbJ6eIRoNyYWRXeLOXC2xwzLZGJ60dfDiLT O3bycVB5svlqpyfzlJ67zlwZF6BFNAVdEGI4DAcDsmdhTilljpvXwUKYO/9n9Ddq BbbgrppULJzXA/04F07bH+EJ2PGTBwIGm9yFAjds249oDYW3M1IWExM4cvsIHlNz RXOT74hWFcowBR7osmtPAJ1EgtN+fd7Wa3qqGU0qm4haa31oRYjTjp9I+BPJ3mE5 OhD9fzprqyzuR8+4dTqzXRUu6ahPqhmG9wQFa2FEdFiwXu/K5ayZsq8QT0stRbX+ IG1SgQmT8SNu2uK/P+F34tfdOM9/JLA7eJ74ICf0UOJq4VqjBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2KLpgZJW5SJmYMYy/MvZSwL2jnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNjI1NDNlNmItMDc5ZS0z YTBmLWFmYTAtNjM5NzEzODExNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0EBqiDTv8xOqrOJck7NaczymocFeSkAqytRMpSX4yjZuzoJbZeqh09 1GVpmmgezRaZu+g2oBYjqVv0OldvTltx3oovvVT/6bYpH3xZHP8R8YlqYDqUbvui 9MQXXFvjYkYBfKYCu8ZvQyVvS3az+K3aRDLqtW9SsBj2ArunjZlgBjFpV6lCFQYg tnHCJ7V3ni5O5KCnReD38G+2Gu7ChHovvYioq2WGum/IUAAWlTrxkFZ/d2eGZu+C 40QFqUQi2tKN6OBtwQQFhAKMYym9Q1SHlSD93DNMzSWb8zfCkxFtmcM49ynzjmsf MNz6q8bGVzGGXz6RTeEhUzvUioVYENY= -----END CERTIFICATE-----Generated at Sat Apr 12 13:04:30 2025 by rpki-client