$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d640b051-588b-37ef-8b3b-80138312e640.roa File: d640b051-588b-37ef-8b3b-80138312e640.roa (raw, json) Hash identifier: kEjpipEfOvBBoGKqoShRiyga5YstHkxhWz87ar06cdQ= Subject key identifier: F4:1C:20:B1:D9:CF:14:BD:DE:09:60:14:E4:F5:41:B7:4C:41:60:D2 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642EB3CE9AAD47C7779500 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d640b051-588b-37ef-8b3b-80138312e640.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 208.76.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2e:b3:ce:9a:ad:47:c7:77:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=ef118434-fbfc-4a60-84bf-f17ba772ec3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4f:43:9f:5e:f5:c6:b6:b5:e5:84:a8:3c:02: 31:3b:d9:de:5e:31:b3:81:98:d2:50:82:67:a7:2b: d2:50:53:71:b6:a3:f6:c3:03:3e:d8:91:44:e9:f4: 7a:6e:13:5b:94:98:9f:df:45:4f:ad:b7:05:6a:2d: 5a:13:e2:27:a9:b1:00:b0:14:41:91:ad:d2:13:23: 68:e8:64:ce:51:50:3f:40:56:a5:0f:3f:97:7c:74: 48:cd:bb:29:f5:8e:54:7a:75:0b:6b:2b:09:45:c1: 1b:a6:d5:97:d5:13:fa:34:96:f6:f5:9b:ac:ac:74: 64:f7:42:08:34:1c:5b:9b:53:98:25:82:e0:e8:e8: 9b:2a:b1:67:8a:1b:31:cd:b7:c2:be:6a:4f:f0:91: 76:b3:bc:c4:b8:6d:7f:04:cd:b3:30:3c:aa:40:15: 7c:f6:f7:d1:74:cb:02:92:f7:7c:0b:c0:31:1a:7b: 2f:1f:3f:ae:0e:4f:46:33:dc:8a:e8:84:29:cc:3b: 37:dd:2f:05:16:1b:07:37:c8:e6:c7:c3:06:92:b6: 2a:5f:8a:98:15:aa:b7:cb:dc:52:48:0d:3b:81:1b: a8:53:d8:99:45:cc:75:4f:94:51:8f:8c:5f:34:e3: bb:9c:a1:c6:0a:d4:99:aa:40:3f:4c:1b:98:f9:54: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1C:20:B1:D9:CF:14:BD:DE:09:60:14:E4:F5:41:B7:4C:41:60:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d640b051-588b-37ef-8b3b-80138312e640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.76.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:15:fb:0b:5e:86:81:a8:3e:01:a5:29:1e:81:c5:bb:29:6f: cb:b8:90:a9:ca:1d:1f:59:4d:0e:90:fe:22:c6:00:29:be:e8: b8:05:93:fc:d0:55:f4:f0:19:68:f6:48:61:ee:8a:12:ed:bc: 3d:5c:32:b7:e1:77:35:c4:31:a0:8e:e0:db:b5:14:ad:83:43: 59:02:c7:4a:4f:d8:da:2e:77:ba:28:1a:27:38:4b:8b:d7:20: 12:af:2d:15:88:fe:10:a9:38:7e:54:37:58:22:71:5e:96:e8: b9:63:a8:35:24:f9:d6:7d:5b:61:ef:b6:d8:0b:43:d3:7c:1d: ca:69:25:13:62:b1:29:27:b4:94:a8:f5:24:7f:f9:42:9c:d9: b7:f6:3f:f7:a2:d2:d1:25:b7:c7:79:c4:32:58:f4:1a:23:67: 0e:84:c4:cb:ce:68:f6:fe:70:20:d5:c6:0f:96:34:1b:ca:d9: 8d:ff:3b:b0:1b:5f:8f:4e:44:9d:ec:da:b3:e3:79:73:6b:de: 11:46:2d:36:a1:0a:f9:d2:f9:9b:ef:58:be:e9:0c:f4:ff:1c: 9f:ea:a9:d7:82:2e:03:1c:7b:c9:8d:73:4b:be:9b:f5:1d:7a: 34:05:e5:ea:64:53:bc:f9:4a:75:62:27:2e:8a:6e:a7:25:e3: 90:96:f0:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC6zzpqtR8d3lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZWYxMTg0MzQtZmJmYy00YTYwLTg0YmYtZjE3YmE3NzJlYzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk09Dn171xra15YSoPAIxO9neXjGzgZjSUIJn pyvSUFNxtqP2wwM+2JFE6fR6bhNblJif30VPrbcFai1aE+InqbEAsBRBka3SEyNo 6GTOUVA/QFalDz+XfHRIzbsp9Y5UenULaysJRcEbptWX1RP6NJb29ZusrHRk90II NBxbm1OYJYLg6OibKrFnihsxzbfCvmpP8JF2s7zEuG1/BM2zMDyqQBV89vfRdMsC kvd8C8AxGnsvHz+uDk9GM9yK6IQpzDs33S8FFhsHN8jmx8MGkrYqX4qYFaq3y9xS SA07gRuoU9iZRcx1T5RRj4xfNOO7nKHGCtSZqkA/TBuY+VTKcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQcILHZzxS93glgFOT1QbdMQWDSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZDY0MGIwNTEtNTg4Yi0z N2VmLThiM2ItODAxMzgzMTJlNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Ey4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8V+wtehoGoPgGlKR6Bxbspb8u4kKnKHR9ZTQ6Q/iLGACm+6LgFk/zQ VfTwGWj2SGHuihLtvD1cMrfhdzXEMaCO4Nu1FK2DQ1kCx0pP2Noud7ooGic4S4vX IBKvLRWI/hCpOH5UN1gicV6W6LljqDUk+dZ9W2HvttgLQ9N8HcppJRNisSkntJSo 9SR/+UKc2bf2P/ei0tElt8d5xDJY9BojZw6ExMvOaPb+cCDVxg+WNBvK2Y3/O7Ab X49ORJ3s2rPjeXNr3hFGLTahCvnS+ZvvWL7pDPT/HJ/qqdeCLgMce8mNc0u+m/Ud ejQF5epkU7z5SnViJy6Kbqcl45CW8JE= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:16 2025 by rpki-client