$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa File: f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa (raw, json) Hash identifier: Nrka6iIU6m3ovVA7gHStiepd3os6AWnUPIiwuZoUbI4= Subject key identifier: 27:23:6E:2F:9C:7B:68:CE:33:13:D1:27:67:E5:63:7D:A2:07:57:ED Certificate issuer: /CN=76554884-d362-4eab-82d1-ed9e4c9b289a Certificate serial: 010D0C9F43285848C37ABE8B82BA27530E1E6080 Authority key identifier: 04:95:91:7C:FE:2D:FF:E0:7B:45:BF:CD:0E:72:A9:8C:A2:C4:25:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa Signing time: Mon 03 Feb 2025 20:36:50 +0000 ROA not before: Mon 03 Feb 2025 20:36:50 +0000 ROA not after: Sun 04 May 2025 19:36:50 +0000 asID: 36363 IP address blocks: 216.170.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c3:7a:be:8b:82:ba:27:53:0e:1e:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76554884-d362-4eab-82d1-ed9e4c9b289a Validity Not Before: Feb 3 20:36:50 2025 GMT Not After : May 4 19:36:50 2025 GMT Subject: CN=1c0873d3-3946-44c8-a20b-593184f30501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:43:9d:0e:18:cd:97:66:67:e5:cb:cc:3a: 30:ec:d5:6a:9d:84:86:1b:7e:17:ca:87:8c:04:cb: d7:c1:58:0a:25:96:76:f2:f7:83:33:72:c3:49:3a: 07:8e:d9:cd:29:5e:fe:24:84:ec:90:11:34:b2:f9: 83:43:76:dc:9c:53:97:f1:75:03:9b:77:ef:0a:e9: b5:f5:b3:c0:ef:25:6c:7f:e6:3a:cc:1e:a4:7e:da: 50:d1:9c:30:1f:6b:60:7e:fc:09:b0:c2:0c:ab:d8: d5:ca:6b:e6:66:f7:86:46:71:d9:55:d9:03:60:d7: 00:b1:66:d1:6a:6a:fd:62:8e:cd:b9:4a:4e:27:10: 2c:bc:6a:00:05:81:50:70:f6:a8:ba:57:0c:77:f1: d3:eb:39:d4:dd:67:aa:30:c5:7b:04:bb:25:cc:18: 39:07:9a:46:60:37:a1:80:fa:b1:9d:04:e0:f5:9e: 2e:76:8b:b4:75:c6:b1:a6:e0:fe:4d:7f:5c:05:d9: 92:ec:27:74:af:48:cb:b8:95:c2:51:5c:a0:73:7e: 59:5a:a3:a5:19:f4:ec:38:9b:99:e2:80:dd:eb:a9: a7:7d:1b:29:e9:56:52:f8:8f:2b:81:99:02:2e:e8: 66:ff:1b:8e:78:c5:4f:25:ba:f1:05:61:e2:45:fe: 40:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:23:6E:2F:9C:7B:68:CE:33:13:D1:27:67:E5:63:7D:A2:07:57:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.crl X509v3 Authority Key Identifier: keyid:04:95:91:7C:FE:2D:FF:E0:7B:45:BF:CD:0E:72:A9:8C:A2:C4:25:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a.cer sbgp-ipAddrBlock: critical IPv4: 216.170.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:35:b1:d2:e9:40:a5:a0:92:21:61:88:a4:01:2f:f2:9d:6d: fb:ef:c6:81:ee:f1:58:38:f5:e8:b1:a3:ef:9e:68:f1:57:42: e8:08:91:5c:6f:7c:15:e7:d9:5e:e6:a4:20:e1:5a:ea:23:27: c8:9e:55:5a:fb:03:01:a2:6d:06:24:d5:9d:f5:82:dc:4a:c9: cc:26:e7:41:b7:0c:d8:e7:3b:40:97:28:4f:42:01:1e:e7:7e: a6:ab:d6:e1:42:61:54:2d:7e:73:ab:84:6c:3a:6b:3e:63:88: 14:20:c1:a1:f3:f3:2b:c2:42:c6:d7:70:76:66:99:4b:65:63: d7:4b:b7:b6:15:fb:f1:12:f7:2e:6b:0d:62:41:b9:f8:32:56: 2e:90:97:72:40:30:c6:5d:3f:87:fd:c9:78:0e:62:1c:4c:13: 78:00:30:bf:94:96:cc:0b:1b:5b:61:4a:b6:7c:df:ac:ab:95: fd:03:82:ef:84:a8:d8:e3:a7:76:f3:48:7e:40:08:25:d9:19: 5b:49:f7:49:46:4a:c6:1a:48:2c:7e:31:16:73:79:3b:e4:7c: 61:ce:fd:5f:28:06:14:7f:8d:18:29:49:f4:e3:41:b1:a3:7b: dc:1b:a2:88:aa:6d:db:b9:25:8b:64:d4:d1:64:42:43:19:16: 78:15:5e:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjDer6LgronUw4eYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY1NTQ4ODQtZDM2Mi00ZWFiLTgyZDEtZWQ5ZTRjOWIy ODlhMB4XDTI1MDIwMzIwMzY1MFoXDTI1MDUwNDE5MzY1MFowLzEtMCsGA1UEAxMk MWMwODczZDMtMzk0Ni00NGM4LWEyMGItNTkzMTg0ZjMwNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4RDnQ4YzZdmZ+XLzDow7NVqnYSGG34XyoeM BMvXwVgKJZZ28veDM3LDSToHjtnNKV7+JITskBE0svmDQ3bcnFOX8XUDm3fvCum1 9bPA7yVsf+Y6zB6kftpQ0ZwwH2tgfvwJsMIMq9jVymvmZveGRnHZVdkDYNcAsWbR amr9Yo7NuUpOJxAsvGoABYFQcPaoulcMd/HT6znU3WeqMMV7BLslzBg5B5pGYDeh gPqxnQTg9Z4udou0dcaxpuD+TX9cBdmS7Cd0r0jLuJXCUVygc35ZWqOlGfTsOJuZ 4oDd66mnfRsp6VZS+I8rgZkCLuhm/xuOeMVPJbrxBWHiRf5ASwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcjbi+ce2jOMxPRJ2flY32iB1ftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NjU1 NDg4NC1kMzYyLTRlYWItODJkMS1lZDllNGM5YjI4OWEvZjc4ZTQ3ZDMtZWY2Yy0z MTg1LWI4YzYtNzMzN2E3MGVjZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzY1NTQ4ODQtZDM2Mi00ZWFiLTgy ZDEtZWQ5ZTRjOWIyODlhLzc2NTU0ODg0LWQzNjItNGVhYi04MmQxLWVkOWU0Yzli Mjg5YS5jcmwwHwYDVR0jBBgwFoAUBJWRfP4t/+B7Rb/NDnKpjKLEJbEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NjU1NDg4NC1kMzYyLTRlYWItODJkMS1lZDll NGM5YjI4OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Kp5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAY1sdLpQKWgkiFhiKQBL/KdbfvvxoHu8Vg49eixo++eaPFXQugIkVxv fBXn2V7mpCDhWuojJ8ieVVr7AwGibQYk1Z31gtxKycwm50G3DNjnO0CXKE9CAR7n fqar1uFCYVQtfnOrhGw6az5jiBQgwaHz8yvCQsbXcHZmmUtlY9dLt7YV+/ES9y5r DWJBufgyVi6Ql3JAMMZdP4f9yXgOYhxME3gAML+UlswLG1thSrZ836yrlf0Dgu+E qNjjp3bzSH5ACCXZGVtJ90lGSsYaSCx+MRZzeTvkfGHO/V8oBhR/jRgpSfTjQbGj e9wbooiqbdu5JYtk1NFkQkMZFngVXsc= -----END CERTIFICATE-----Generated at Fri Apr 11 21:43:08 2025 by rpki-client