$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e42c8ee3-9f14-309f-b237-3f747b0b165c.roa File: e42c8ee3-9f14-309f-b237-3f747b0b165c.roa (raw, json) Hash identifier: lqTqO0ayANO/PdLX0KH6FHRhZvF1ESnI9YhEmiE8IGw= Subject key identifier: 96:26:01:BA:49:9B:74:04:0A:A1:D9:1C:E6:DF:7C:FA:38:3F:5C:70 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6431831F96AAB55A312229 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e42c8ee3-9f14-309f-b237-3f747b0b165c.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 208.76.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:31:83:1f:96:aa:b5:5a:31:22:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=a933eedb-3564-43fd-9652-3589af0b1b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b6:a2:c9:08:d0:9d:1c:55:70:8d:09:87:f5: bc:1a:5e:e9:01:78:66:ac:48:e3:42:1f:7f:2b:a0: 64:92:0a:c9:ab:66:6c:b2:65:23:67:e3:e6:d0:5f: 1b:01:3f:4f:22:9e:e7:94:fb:fa:b8:d2:e2:d6:2a: eb:66:78:2f:08:c3:ef:02:9a:a6:96:56:fb:1f:6f: 0e:94:5d:0f:87:83:ac:19:5d:00:a4:6e:e8:bc:12: ba:45:a9:7b:05:14:35:5e:45:d9:7b:3a:c4:48:a8: c3:0a:92:59:6f:12:65:42:5e:f3:92:51:06:52:8e: c3:04:b0:a4:20:d4:3f:99:da:a1:88:c3:52:d2:db: 80:e6:c3:fa:36:da:22:37:63:a5:2d:b4:12:7d:3d: 1f:b5:e2:f6:13:e2:fa:34:7f:75:6a:f7:93:61:bd: fe:b7:7a:43:1f:f9:13:9c:92:9f:5f:70:26:75:ac: 1f:45:7d:a4:00:42:b5:1c:85:92:cb:84:ad:62:2e: 48:6a:45:fd:3a:21:dc:b8:05:90:cc:2d:ce:1b:15: 30:df:61:2b:06:0b:91:26:69:73:dd:5a:2c:7e:9f: ef:f8:34:1d:ea:32:50:07:1d:4a:85:ad:55:0c:eb: 84:f2:42:08:ea:7a:51:f6:35:37:66:b2:e9:82:bc: 7d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:26:01:BA:49:9B:74:04:0A:A1:D9:1C:E6:DF:7C:FA:38:3F:5C:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e42c8ee3-9f14-309f-b237-3f747b0b165c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.76.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c3:e9:1d:10:70:60:85:ae:e1:eb:62:f2:0d:dd:a8:16:5b: 0b:3b:df:94:44:74:47:36:81:68:73:85:2a:e0:cf:e0:98:6f: d8:8d:a8:c3:a6:a6:20:fb:75:cb:79:58:af:d4:94:f4:5c:7b: 74:43:0e:fd:90:b3:0f:4e:76:cf:8f:34:a5:76:bf:95:c5:88: 53:99:12:fe:64:5d:04:15:2b:a1:f0:73:ed:06:63:9f:00:f9: ab:a8:c1:23:ef:93:1c:12:55:b7:ac:e4:f2:32:08:4b:e0:85: 11:88:9c:95:16:6b:f4:dc:33:53:d9:64:99:78:14:92:6a:3b: 57:de:f0:31:97:0e:d8:b3:9a:c4:4f:d8:f8:c1:3b:74:79:e6: df:ef:ad:e2:67:2a:27:1d:9f:d3:4c:f8:e3:3c:bd:37:e1:f4: d3:fb:cb:a5:d9:3f:33:64:50:0e:2b:42:b2:a8:53:df:8c:14: ae:da:96:90:6c:69:92:71:b5:cd:36:1f:34:c1:90:49:bc:d9: 02:66:02:e4:6e:20:ae:6a:9b:3f:96:b2:0f:ce:42:50:63:b5: 8c:52:96:4c:2a:63:29:99:da:8c:e8:f5:3c:e7:65:a4:99:8e: 52:14:92:90:05:fa:af:98:3a:86:7d:cc:99:7d:a1:a4:b0:7a: f0:7e:6f:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZDGDH5aqtVoxIikwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YTkzM2VlZGItMzU2NC00M2ZkLTk2NTItMzU4OWFmMGIxYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7aiyQjQnRxVcI0Jh/W8Gl7pAXhmrEjjQh9/ K6BkkgrJq2ZssmUjZ+Pm0F8bAT9PIp7nlPv6uNLi1irrZngvCMPvApqmllb7H28O lF0Ph4OsGV0ApG7ovBK6Ral7BRQ1XkXZezrESKjDCpJZbxJlQl7zklEGUo7DBLCk INQ/mdqhiMNS0tuA5sP6NtoiN2OlLbQSfT0fteL2E+L6NH91aveTYb3+t3pDH/kT nJKfX3AmdawfRX2kAEK1HIWSy4StYi5IakX9OiHcuAWQzC3OGxUw32ErBguRJmlz 3Vosfp/v+DQd6jJQBx1Kha1VDOuE8kII6npR9jU3ZrLpgrx9DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYmAbpJm3QECqHZHObffPo4P1xwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZTQyYzhlZTMtOWYxNC0z MDlmLWIyMzctM2Y3NDdiMGIxNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Ey4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7D6R0QcGCFruHrYvIN3agWWws735REdEc2gWhzhSrgz+CYb9iNqMOm piD7dct5WK/UlPRce3RDDv2Qsw9Ods+PNKV2v5XFiFOZEv5kXQQVK6Hwc+0GY58A +auowSPvkxwSVbes5PIyCEvghRGInJUWa/TcM1PZZJl4FJJqO1fe8DGXDtizmsRP 2PjBO3R55t/vreJnKicdn9NM+OM8vTfh9NP7y6XZPzNkUA4rQrKoU9+MFK7alpBs aZJxtc02HzTBkEm82QJmAuRuIK5qmz+Wsg/OQlBjtYxSlkwqYymZ2ozo9TznZaSZ jlIUkpAF+q+YOoZ9zJl9oaSwevB+b08= -----END CERTIFICATE-----Generated at Sat Apr 12 12:40:35 2025 by rpki-client