$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7f3f0971-99fa-32fa-8b18-68a360cecdd3.roa File: 7f3f0971-99fa-32fa-8b18-68a360cecdd3.roa (raw, json) Hash identifier: UblpD81k0oWHa4fOPrD4odO2AiCLxhaiCUt48F8ihik= Subject key identifier: E6:42:8C:ED:FC:65:1C:E3:13:2F:DE:27:5F:83:67:C0:52:3B:59:4D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642318868E85ABBDDAAB80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7f3f0971-99fa-32fa-8b18-68a360cecdd3.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 53472 IP address blocks: 76.191.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:23:18:86:8e:85:ab:bd:da:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=dab9ba30-bb67-49df-8ada-e0d11c86e667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:87:3c:85:6f:e0:1a:10:d9:53:f9:8f:f9: ba:cc:94:1c:be:02:a3:f5:8c:92:0a:da:ca:84:6a: 3a:9e:b8:59:7a:59:88:0d:c2:0c:3c:2a:46:59:eb: 9d:19:63:68:08:96:ad:48:e0:6e:26:12:07:1d:33: fa:b3:a6:6d:20:9c:3f:32:1f:2d:6c:4a:4e:5b:bc: 82:f7:48:36:90:84:53:df:36:e0:b2:55:71:43:64: ef:de:38:45:bc:55:cd:33:0d:96:e0:9d:43:76:26: 69:8d:b7:d6:3e:bd:2c:bf:32:07:eb:24:e1:2c:9a: e8:83:eb:41:c7:df:e4:8a:19:ca:4d:a4:6e:0c:e4: cd:db:ea:02:bc:22:aa:df:8f:17:df:b2:d8:fb:b7: 47:d1:91:8b:df:25:95:a2:3e:cc:6b:ea:07:10:61: 6d:e7:6d:71:f5:12:47:77:b2:04:8e:31:82:be:df: 29:0e:67:3a:20:89:39:b8:47:26:91:d7:5f:50:f1: af:68:13:df:35:73:f7:f0:64:a7:80:94:77:d4:e0: 8c:a2:9c:08:9f:30:7b:d2:52:91:43:b1:81:63:ed: 9c:ca:ad:55:f0:bc:8f:fc:f2:31:ac:dc:44:8b:be: ab:8d:90:f1:67:2b:09:f1:5a:9b:07:1d:d5:a9:7c: c5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:42:8C:ED:FC:65:1C:E3:13:2F:DE:27:5F:83:67:C0:52:3B:59:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7f3f0971-99fa-32fa-8b18-68a360cecdd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 76.191.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:cc:4d:93:51:9b:79:87:cb:b9:b6:68:fd:84:0f:2d:47:6c: f9:00:4f:d5:fe:f2:1d:11:b2:03:a2:96:2a:de:1f:c1:05:cc: 45:74:6e:b8:de:1c:e1:cf:b3:03:74:86:c6:97:98:a1:c4:14: 55:8f:8e:f5:43:f1:ed:c8:a2:9a:c2:55:b6:fa:32:dc:fd:94: a5:c4:44:e5:af:3a:ee:a0:ac:4d:ae:51:12:fa:be:c7:57:9c: 54:e8:09:a7:75:a1:07:3e:cf:9b:67:6d:21:2e:dc:cd:df:1a: 78:f3:43:b3:3f:be:08:dd:cc:61:78:16:14:56:54:c9:3b:ef: 55:b7:b1:b5:55:1a:c1:95:a1:8d:21:6a:94:6e:43:13:97:c7: 56:6c:e8:0e:84:35:74:a6:4d:e8:6d:25:e3:f3:13:86:ed:74: b0:c2:d9:24:2c:92:96:e5:8b:ef:44:bc:cc:6c:ef:12:1a:eb: fc:5d:01:67:dd:ad:76:fb:00:36:d5:f9:3d:2b:5e:7c:92:d3: 47:d4:d2:57:a7:e5:06:02:b3:64:01:e5:38:cf:ef:ee:34:87: a5:bb:6a:2a:ed:06:b9:30:df:a3:09:75:ac:7e:40:f0:e0:1e: 57:32:9b:87:8c:0d:0c:91:08:3d:68:b9:bc:d2:10:8b:c5:ed: db:3a:0a:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCMYho6Fq73aq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZGFiOWJhMzAtYmI2Ny00OWRmLThhZGEtZTBkMTFjODZlNjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOyHPIVv4BoQ2VP5j/m6zJQcvgKj9YySCtrK hGo6nrhZelmIDcIMPCpGWeudGWNoCJatSOBuJhIHHTP6s6ZtIJw/Mh8tbEpOW7yC 90g2kIRT3zbgslVxQ2Tv3jhFvFXNMw2W4J1DdiZpjbfWPr0svzIH6yThLJrog+tB x9/kihnKTaRuDOTN2+oCvCKq348X37LY+7dH0ZGL3yWVoj7Ma+oHEGFt521x9RJH d7IEjjGCvt8pDmc6IIk5uEcmkddfUPGvaBPfNXP38GSngJR31OCMopwInzB70lKR Q7GBY+2cyq1V8LyP/PIxrNxEi76rjZDxZysJ8VqbBx3VqXzFlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZCjO38ZRzjEy/eJ1+DZ8BSO1lNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvN2YzZjA5NzEtOTlmYS0z MmZhLThiMTgtNjhhMzYwY2VjZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATL9JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/MTZNRm3mHy7m2aP2EDy1HbPkAT9X+8h0RsgOilireH8EFzEV0brje HOHPswN0hsaXmKHEFFWPjvVD8e3IoprCVbb6Mtz9lKXEROWvOu6grE2uURL6vsdX nFToCad1oQc+z5tnbSEu3M3fGnjzQ7M/vgjdzGF4FhRWVMk771W3sbVVGsGVoY0h apRuQxOXx1Zs6A6ENXSmTehtJePzE4btdLDC2SQskpbli+9EvMxs7xIa6/xdAWfd rXb7ADbV+T0rXnyS00fU0len5QYCs2QB5TjP7+40h6W7airtBrkw36MJdax+QPDg Hlcym4eMDQyRCD1oubzSEIvF7ds6Cgk= -----END CERTIFICATE-----Generated at Sat Apr 12 15:01:04 2025 by rpki-client