$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa File: 047692f9-4c45-3534-9455-58a8a7660d58.roa (raw, json) Hash identifier: u1m6iNUOY+Rhergqh5LgmnUy0KEqIz0Cgx4nUrj3AAA= Subject key identifier: 5B:94:2F:9B:2B:D2:BE:4C:56:C8:0F:5F:8A:D9:A4:55:D9:AA:55:8B Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5820F8681D840D9D93A26C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 208.76.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0f:86:81:d8:40:d9:d9:3a:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f162b84e-fe8b-40a9-8ba7-b2000f73cdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d5:c6:13:eb:5f:34:1b:14:6f:80:6d:e4:45: 54:0a:e9:8f:83:9d:16:d9:64:ee:08:66:a8:45:07: 47:72:12:ac:03:2e:78:e0:93:0e:09:a9:1a:0b:24: 1b:64:3a:80:0f:9b:cf:ab:79:27:ba:58:75:0c:2f: 2f:34:95:a5:a5:59:ba:b3:14:b9:a5:59:03:46:9c: 76:73:3d:04:f3:bd:28:c7:2c:6a:7e:b8:25:47:91: c5:13:f9:09:6b:06:ae:25:c2:51:89:bf:4e:df:7b: d5:78:dc:2b:b9:36:59:5e:5b:7c:f6:f4:65:09:39: 8a:3e:83:5a:c1:8e:75:3f:1c:9e:99:d8:4f:77:3e: c5:4a:fa:2e:90:7e:a8:42:4b:42:fe:fe:b4:7a:08: fb:93:c6:bd:e9:0a:9b:b3:fc:18:dd:9a:b7:14:69: e7:4a:b1:0e:30:eb:cc:53:f6:5d:54:8a:eb:e0:61: a9:28:84:a9:15:b7:00:36:f5:7b:bc:fe:4d:08:cf: fb:53:f6:ad:e3:f9:01:07:bb:4e:c8:fb:0e:23:3b: 54:ab:e5:65:dd:d5:84:0b:bc:62:02:af:8d:24:83: 3f:31:61:2b:1a:03:75:2a:c5:ad:47:7d:75:71:3f: 68:43:2c:20:08:fb:ff:f7:88:f5:39:0e:a3:bc:26: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:94:2F:9B:2B:D2:BE:4C:56:C8:0F:5F:8A:D9:A4:55:D9:AA:55:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047692f9-4c45-3534-9455-58a8a7660d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:69:bf:b5:d1:98:1b:37:82:10:75:f6:d2:95:50:71:6c:dd: 84:33:f9:fb:28:ee:0d:fc:31:71:76:8f:85:75:cb:77:4e:48: 4a:9f:ba:f1:e9:bf:b5:12:ba:d0:68:f9:1c:d5:95:1d:7a:14: 99:df:e0:59:a3:e3:16:4e:04:ef:ea:cc:09:6f:fa:d2:82:b6: 11:12:55:29:31:bf:0c:94:d4:96:b0:53:cb:fe:30:d3:ee:ae: be:bd:27:0e:d2:71:bf:c0:71:4b:91:9a:2b:32:09:00:e3:ee: cb:07:67:f7:12:6b:ad:57:31:35:18:14:eb:69:73:ec:a5:71: 06:85:25:8c:b2:13:b7:a4:7a:20:a7:d2:d3:fa:a7:f2:97:24: 13:73:09:ae:75:84:52:ca:ba:04:ca:8a:53:8a:14:28:35:5b: e1:d9:ef:34:39:84:88:f2:d8:ce:b1:dc:02:d3:96:b2:ad:59: e8:b9:2f:a4:28:e9:93:b2:6c:7f:26:f2:b7:f0:56:74:b9:0d: 27:34:fa:a1:f1:e1:bb:54:42:fb:67:7c:a6:42:d4:14:c4:03: bd:6b:50:7b:97:69:c7:71:99:74:84:5d:88:84:c6:cd:39:6f: ef:69:a6:29:a0:a3:99:62:2e:c5:52:24:fd:9c:1e:43:72:11: 67:29:4f:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgg+GgdhA2dk6JsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjE2MmI4NGUtZmU4Yi00MGE5LThiYTctYjIwMDBmNzNjZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNXGE+tfNBsUb4Bt5EVUCumPg50W2WTuCGao RQdHchKsAy544JMOCakaCyQbZDqAD5vPq3knulh1DC8vNJWlpVm6sxS5pVkDRpx2 cz0E870oxyxqfrglR5HFE/kJawauJcJRib9O33vVeNwruTZZXlt89vRlCTmKPoNa wY51PxyemdhPdz7FSvoukH6oQktC/v60egj7k8a96Qqbs/wY3Zq3FGnnSrEOMOvM U/ZdVIrr4GGpKISpFbcANvV7vP5NCM/7U/at4/kBB7tOyPsOIztUq+Vl3dWEC7xi Aq+NJIM/MWErGgN1KsWtR311cT9oQywgCPv/94j1OQ6jvCZIRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuUL5sr0r5MVsgPX4rZpFXZqlWLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDQ3NjkyZjktNGM0NS0z NTM0LTk0NTUtNThhOGE3NjYwZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhpv7XRmBs3ghB19tKVUHFs3YQz+fso7g38MXF2j4V1y3dOSEqfuvHp v7USutBo+RzVlR16FJnf4Fmj4xZOBO/qzAlv+tKCthESVSkxvwyU1JawU8v+MNPu rr69Jw7Scb/AcUuRmisyCQDj7ssHZ/cSa61XMTUYFOtpc+ylcQaFJYyyE7ekeiCn 0tP6p/KXJBNzCa51hFLKugTKilOKFCg1W+HZ7zQ5hIjy2M6x3ALTlrKtWei5L6Qo 6ZOybH8m8rfwVnS5DSc0+qHx4btUQvtnfKZC1BTEA71rUHuXacdxmXSEXYiExs05 b+9ppimgo5liLsVSJP2cHkNyEWcpT0E= -----END CERTIFICATE-----Generated at Fri Mar 14 10:47:31 2025 by rpki-client