$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df2ac65c-7d1c-3158-9dee-79f9e3a06b70.roa File: df2ac65c-7d1c-3158-9dee-79f9e3a06b70.roa (raw, json) Hash identifier: XDvvqGvXDW8s+r+6KOG0pvZYDpuKGSj6iWfyxcMc0nk= Subject key identifier: BA:F5:01:33:AF:D2:04:75:0E:AB:D1:0A:7D:72:B8:87:86:A7:79:F7 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6421B238EA7FBA2405DD80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df2ac65c-7d1c-3158-9dee-79f9e3a06b70.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 76.191.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:21:b2:38:ea:7f:ba:24:05:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=533fa8c3-7b9e-4446-825f-e59a3425cd21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:ba:9b:7c:16:91:c0:4b:19:b3:06:c2:33: 81:2e:80:39:78:4b:41:8b:1a:7b:0c:41:bf:af:93: d4:87:b4:9b:b2:7c:61:8d:e5:91:d9:e5:d1:19:68: 86:2a:88:59:f0:9a:58:cc:27:48:a1:20:1f:dd:cf: a6:1a:14:72:cf:37:b0:a9:2a:85:90:5f:96:44:58: 37:f1:7c:73:2e:d6:45:c9:a7:21:50:df:e7:db:57: 82:75:8c:7a:8e:96:b8:a2:6b:fa:ad:24:54:65:b6: f6:14:6a:a2:c2:1c:e9:e2:3d:07:26:73:3d:2f:c7: 56:a6:48:0a:03:3a:8e:75:ca:35:ab:99:6a:29:ba: 04:e8:9c:95:f0:bd:ec:42:b3:e3:5e:f6:d5:15:15: 17:cf:5c:2c:10:fe:5c:17:13:df:38:53:54:42:d1: 16:61:a3:33:68:79:c5:a6:e2:48:bd:04:48:62:bb: bd:31:ef:65:a3:45:50:28:eb:63:d6:9b:c3:e7:5b: 76:92:b3:de:99:90:69:e2:e9:49:b7:3b:61:28:0f: a4:94:fc:9c:e3:6a:3d:29:49:39:66:e7:4f:2c:c2: 89:b6:7d:80:ea:92:ad:fd:f0:cd:2b:17:f4:3d:6d: 6b:28:35:51:51:d9:d0:a6:3b:7f:eb:f8:8d:21:41: 98:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F5:01:33:AF:D2:04:75:0E:AB:D1:0A:7D:72:B8:87:86:A7:79:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df2ac65c-7d1c-3158-9dee-79f9e3a06b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 76.191.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ff:7e:2d:a2:a4:6c:f6:ed:78:16:8d:5d:c8:69:b4:8d:08: aa:7d:60:b4:3d:4b:2b:b3:5d:ca:42:5d:24:f2:a5:7d:63:df: ef:48:a4:2c:73:65:ef:34:de:6f:6a:2a:a4:c6:4b:a7:60:a9: db:c6:8d:c3:75:9e:32:30:fa:be:b0:b4:17:4e:50:7d:ba:c2: 64:23:30:c9:22:16:87:b5:8a:a6:c7:bc:32:f5:66:fe:2e:67: 14:78:bf:79:dd:fe:bb:55:95:82:49:a6:d0:cc:cc:9a:47:f0: f2:c5:91:b8:17:87:d7:93:3f:86:1f:12:f8:f4:21:4a:8f:01: 7d:69:28:cf:3c:0f:dc:e2:0f:26:e7:ba:44:46:aa:ce:39:41: 3f:16:49:87:19:56:ef:a7:82:f5:b9:8e:df:fe:2e:d2:62:5b: 3c:68:68:ef:d1:15:45:49:4d:b4:a3:d5:4d:0a:b5:75:6a:dd: ea:ad:c0:c5:5e:3d:9d:0b:c4:e5:bd:1e:91:bb:cf:9b:a9:88: 7f:2f:e8:61:f4:c7:a9:97:6f:6d:f5:f1:37:f0:ad:5b:f5:8a: 1a:8d:52:a5:4c:3e:e5:f8:c7:a6:48:de:73:4b:2b:1e:bb:b5: 1e:99:1c:e9:c2:69:f2:61:01:58:be:fe:bd:61:2e:58:49:c9: 14:d4:1d:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCGyOOp/uiQF3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NTMzZmE4YzMtN2I5ZS00NDQ2LTgyNWYtZTU5YTM0MjVjZDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOa6m3wWkcBLGbMGwjOBLoA5eEtBixp7DEG/ r5PUh7SbsnxhjeWR2eXRGWiGKohZ8JpYzCdIoSAf3c+mGhRyzzewqSqFkF+WRFg3 8XxzLtZFyachUN/n21eCdYx6jpa4omv6rSRUZbb2FGqiwhzp4j0HJnM9L8dWpkgK AzqOdco1q5lqKboE6JyV8L3sQrPjXvbVFRUXz1wsEP5cFxPfOFNUQtEWYaMzaHnF puJIvQRIYru9Me9lo0VQKOtj1pvD51t2krPemZBp4ulJtzthKA+klPyc42o9KUk5 ZudPLMKJtn2A6pKt/fDNKxf0PW1rKDVRUdnQpjt/6/iNIUGYjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLr1ATOv0gR1DqvRCn1yuIeGp3n3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZGYyYWM2NWMtN2QxYy0z MTU4LTlkZWUtNzlmOWUzYTA2YjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGTL9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGL/fi2ipGz27XgWjV3IabSNCKp9YLQ9SyuzXcpCXSTypX1j3+9IpCxz Ze803m9qKqTGS6dgqdvGjcN1njIw+r6wtBdOUH26wmQjMMkiFoe1iqbHvDL1Zv4u ZxR4v3nd/rtVlYJJptDMzJpH8PLFkbgXh9eTP4YfEvj0IUqPAX1pKM88D9ziDybn ukRGqs45QT8WSYcZVu+ngvW5jt/+LtJiWzxoaO/RFUVJTbSj1U0KtXVq3eqtwMVe PZ0LxOW9HpG7z5upiH8v6GH0x6mXb2318TfwrVv1ihqNUqVMPuX4x6ZI3nNLKx67 tR6ZHOnCafJhAVi+/r1hLlhJyRTUHRw= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:31 2025 by rpki-client