$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0572660c-7907-3fa4-b38a-51aed93af276.roa File: 0572660c-7907-3fa4-b38a-51aed93af276.roa (raw, json) Hash identifier: OWna87jMogs1z4m+GhTRO0XQdX4OtJk2qY/SekZ6ZHo= Subject key identifier: 31:9D:46:25:37:DE:40:76:15:29:26:A1:35:1A:AF:44:AB:3C:FE:83 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5818A9FAF42FC080291C020 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0572660c-7907-3fa4-b38a-51aed93af276.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 208.76.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:8a:9f:af:42:fc:08:02:91:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=ff402b94-0cd9-4c01-9842-cdfb433d940c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3d:3c:d8:cf:d3:d5:63:90:a3:75:64:2c:56: 7f:e4:c2:bf:7a:b2:13:03:68:1f:15:4e:40:54:08: 76:3f:a6:f0:e2:64:bf:bb:5e:2a:bd:99:c3:2c:39: 58:02:32:92:e3:6a:61:c4:dc:55:1b:69:0c:41:f9: b8:67:cb:56:44:50:b6:37:e8:88:56:a7:5e:b3:75: 34:c9:ed:98:bc:d6:a9:b7:64:b6:dd:16:be:a5:71: 6f:34:45:0f:e2:3c:c2:2b:9a:71:86:dd:8d:57:19: d3:47:7a:f3:7e:0c:c9:52:01:b0:05:65:f1:71:1d: 66:d1:da:80:db:e3:43:5b:63:65:11:86:d9:73:33: d4:94:e6:45:02:5a:ac:bf:8f:6a:d0:0a:7a:de:7d: a6:4d:a7:5e:c3:02:70:58:e0:a3:d4:3b:80:5d:d6: 54:ab:2b:a7:80:55:de:f5:20:54:ea:ce:83:0c:3f: 70:bb:81:17:a1:9d:c3:22:ec:56:ad:8f:15:70:63: ec:1e:a8:5b:cd:c4:ff:47:6d:31:ee:b1:64:75:68: 9e:f0:5e:89:f9:a4:2a:2e:1f:70:8c:91:92:50:3c: 3e:57:fc:7a:55:2b:15:d9:c4:ee:81:70:3a:02:a8: 41:c9:2c:e6:12:88:2f:29:09:71:ae:2c:fe:c0:00: f7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9D:46:25:37:DE:40:76:15:29:26:A1:35:1A:AF:44:AB:3C:FE:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0572660c-7907-3fa4-b38a-51aed93af276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:29:b6:4b:63:47:3e:1b:b0:9b:1d:50:8a:9b:1c:1c:e4:6a: d2:cc:6d:17:66:aa:de:3a:0b:d1:c8:d7:f6:41:5c:47:f6:00: 79:d3:05:8d:ef:db:a8:9a:38:96:09:e4:f4:2a:2b:62:29:5d: 14:83:f0:43:55:55:c1:1a:3f:e0:b9:16:60:16:a9:26:95:e4: 9e:14:bd:15:31:d6:e4:e1:2b:d0:b5:64:c6:48:b3:85:db:11: de:28:11:af:0f:c4:38:13:be:b1:52:b5:8c:cd:bc:e7:1f:a2: ce:33:46:9e:20:99:b3:20:0a:bf:d7:55:04:6e:d6:1c:ad:14: b6:4e:6c:82:6d:58:fc:34:3d:bb:95:40:dc:3a:dc:11:3e:98: 71:90:e1:e1:3f:c6:2e:9a:3e:db:9b:28:f6:7e:3c:f6:0a:e3: 89:ee:2a:67:df:3d:1a:19:dc:20:46:0c:6a:b2:16:3c:92:ed: 46:d5:14:6e:ee:3b:d3:67:7a:7b:a8:32:ff:f4:17:3e:6c:6c: 5d:8e:9c:f4:61:02:e3:10:c3:64:3f:9b:0e:12:d8:05:16:73: 58:88:52:48:b9:30:24:c1:e2:3f:86:0b:bc:37:1e:e8:ef:06: 80:12:f6:22:a1:4d:d6:75:7e:28:17:3e:a5:e9:cd:4d:65:b2: 60:c1:bb:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYqfr0L8CAKRwCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmY0MDJiOTQtMGNkOS00YzAxLTk4NDItY2RmYjQzM2Q5NDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD082M/T1WOQo3VkLFZ/5MK/erITA2gfFU5A VAh2P6bw4mS/u14qvZnDLDlYAjKS42phxNxVG2kMQfm4Z8tWRFC2N+iIVqdes3U0 ye2YvNapt2S23Ra+pXFvNEUP4jzCK5pxht2NVxnTR3rzfgzJUgGwBWXxcR1m0dqA 2+NDW2NlEYbZczPUlOZFAlqsv49q0Ap63n2mTadewwJwWOCj1DuAXdZUqyungFXe 9SBU6s6DDD9wu4EXoZ3DIuxWrY8VcGPsHqhbzcT/R20x7rFkdWie8F6J+aQqLh9w jJGSUDw+V/x6VSsV2cTugXA6AqhBySzmEogvKQlxriz+wAD3BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGdRiU33kB2FSkmoTUar0SrPP6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDU3MjY2MGMtNzkwNy0z ZmE0LWIzOGEtNTFhZWQ5M2FmMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0ptktjRz4bsJsdUIqbHBzkatLMbRdmqt46C9HI1/ZBXEf2AHnTBY3v 26iaOJYJ5PQqK2IpXRSD8ENVVcEaP+C5FmAWqSaV5J4UvRUx1uThK9C1ZMZIs4Xb Ed4oEa8PxDgTvrFStYzNvOcfos4zRp4gmbMgCr/XVQRu1hytFLZObIJtWPw0PbuV QNw63BE+mHGQ4eE/xi6aPtubKPZ+PPYK44nuKmffPRoZ3CBGDGqyFjyS7UbVFG7u O9NnenuoMv/0Fz5sbF2OnPRhAuMQw2Q/mw4S2AUWc1iIUki5MCTB4j+GC7w3Hujv BoAS9iKhTdZ1figXPqXpzU1lsmDBuzA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:29 2025 by rpki-client