$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d87e36f-8b7d-3ba6-80db-6624533414f3.roa File: 7d87e36f-8b7d-3ba6-80db-6624533414f3.roa (raw, json) Hash identifier: wGZSluHP43TCkHAWC5jvbHB0ZIRpxlOcOS3QzB1wtXo= Subject key identifier: BA:E7:DF:98:0D:37:60:8F:F9:32:9A:EC:01:62:C2:1C:7E:F3:02:2A Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64317735B3464F017DC4C0 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d87e36f-8b7d-3ba6-80db-6624533414f3.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 208.53.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:31:77:35:b3:46:4f:01:7d:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=f2a4fe68-e63e-4f02-bec6-f5d8344f6bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:52:67:27:2f:f6:a7:3b:26:b9:b4:6e:25:a2: 0b:09:ba:2b:4f:73:9a:8e:e4:e1:d8:f7:58:c9:b8: db:73:c9:cc:96:2d:6f:37:49:63:10:2c:61:71:f7: a6:f1:7f:c7:c9:e0:12:2d:96:f5:14:28:d2:77:db: b0:12:c3:3c:13:cd:ad:2d:dd:e1:3f:83:14:de:01: b5:4d:cc:59:19:93:79:00:30:8c:79:cb:ba:d2:d0: 07:9c:f5:4c:4d:ad:4e:f1:d8:42:14:3e:3e:e9:35: ad:ae:b2:75:69:a2:34:d0:e8:a3:25:fa:fc:7c:3e: cf:76:23:ac:3a:4c:dc:09:34:84:65:34:e1:bb:be: e8:5f:d7:2f:98:bd:87:30:51:c9:c8:a0:a8:6b:1b: 60:30:c5:6e:39:b9:01:b7:94:ff:23:80:fa:b6:25: d4:77:9b:ec:e5:52:bb:f1:e4:36:1a:79:e8:7e:44: 21:db:56:e2:50:89:e5:e3:6b:4d:fc:27:70:ee:18: ab:18:41:c8:7d:c5:09:9a:ad:d1:9a:b5:ad:bc:6f: a1:69:4b:cb:3d:34:b0:c8:2d:d7:0f:11:a9:65:af: 7a:0c:7c:5f:c6:2e:96:c7:8d:cc:ff:24:a4:00:5c: 18:c7:8b:e9:c2:b8:f7:27:1d:60:63:3c:32:f5:c7: 25:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E7:DF:98:0D:37:60:8F:F9:32:9A:EC:01:62:C2:1C:7E:F3:02:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d87e36f-8b7d-3ba6-80db-6624533414f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.53.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c5:47:19:c4:15:6b:a4:e1:39:01:8a:77:24:5c:e2:ad:08: 5b:11:f6:39:ab:00:a9:0f:08:f7:9e:6e:64:1a:1b:96:dc:cc: f6:2c:fc:c1:88:73:30:94:39:de:18:71:c1:54:b8:2e:cf:3d: 15:ae:3b:3d:20:c7:64:9f:8b:83:10:c4:74:6b:04:3d:fa:08: f6:37:38:2c:7d:c0:8e:0b:95:58:2b:9f:20:e4:0a:86:08:90: 56:b2:99:59:f1:9b:55:ec:44:2b:16:30:9d:9a:f2:31:c9:f9: 16:b7:b9:53:c9:94:5e:f9:fa:d9:80:0f:b9:7d:ff:ce:84:c6: b6:48:20:e7:a8:a7:c5:24:a5:db:36:43:f6:32:1c:e4:91:bc: 8e:07:07:d3:b8:dc:aa:92:0e:44:3a:e0:93:50:bf:17:d0:7e: 7a:ad:9a:cf:79:c3:f9:d2:81:13:6f:c6:f9:5f:47:4a:1a:79: 41:d4:8d:c8:3f:a8:0f:6a:fe:44:6a:42:9e:42:51:7b:7c:a1: bf:58:72:a1:93:6e:fb:fd:7b:78:86:43:54:3d:24:3f:0c:9f: c0:12:dc:69:6b:9b:5c:3a:f9:ee:38:8e:ef:91:30:31:0e:bf: 15:5e:dd:2d:45:9a:28:e5:43:a4:69:c3:a8:2f:6f:81:80:f5: 35:4d:56:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZDF3NbNGTwF9xMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZjJhNGZlNjgtZTYzZS00ZjAyLWJlYzYtZjVkODM0NGY2YmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlJnJy/2pzsmubRuJaILCborT3OajuTh2PdY ybjbc8nMli1vN0ljECxhcfem8X/HyeASLZb1FCjSd9uwEsM8E82tLd3hP4MU3gG1 TcxZGZN5ADCMecu60tAHnPVMTa1O8dhCFD4+6TWtrrJ1aaI00OijJfr8fD7PdiOs OkzcCTSEZTThu77oX9cvmL2HMFHJyKCoaxtgMMVuObkBt5T/I4D6tiXUd5vs5VK7 8eQ2GnnofkQh21biUInl42tN/Cdw7hirGEHIfcUJmq3RmrWtvG+haUvLPTSwyC3X DxGpZa96DHxfxi6Wx43M/ySkAFwYx4vpwrj3Jx1gYzwy9cclRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrn35gNN2CP+TKa7AFiwhx+8wIqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvN2Q4N2UzNmYtOGI3ZC0z YmE2LTgwZGItNjYyNDUzMzQxNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0DVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbFRxnEFWuk4TkBinckXOKtCFsR9jmrAKkPCPeebmQaG5bczPYs/MGI czCUOd4YccFUuC7PPRWuOz0gx2Sfi4MQxHRrBD36CPY3OCx9wI4LlVgrnyDkCoYI kFaymVnxm1XsRCsWMJ2a8jHJ+Ra3uVPJlF75+tmAD7l9/86ExrZIIOeop8Ukpds2 Q/YyHOSRvI4HB9O43KqSDkQ64JNQvxfQfnqtms95w/nSgRNvxvlfR0oaeUHUjcg/ qA9q/kRqQp5CUXt8ob9YcqGTbvv9e3iGQ1Q9JD8Mn8AS3Glrm1w6+e44ju+RMDEO vxVe3S1FmijlQ6Rpw6gvb4GA9TVNVj4= -----END CERTIFICATE-----Generated at Sat Apr 12 14:48:29 2025 by rpki-client