$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d723720-c1b1-3ded-94bb-35dc56996c9f.roa File: 8d723720-c1b1-3ded-94bb-35dc56996c9f.roa (raw, json) Hash identifier: W30tMDpeKNRpFAcOhZmerJQliDN2tsGWQEoNbOPT1mA= Subject key identifier: 71:38:7B:1C:E3:0A:C3:91:50:22:49:4C:47:F9:8B:C6:2B:D4:33:14 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C58171649798AC237A172D80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d723720-c1b1-3ded-94bb-35dc56996c9f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 208.76.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:71:64:97:98:ac:23:7a:17:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=924ab177-a0cc-4de1-b0bb-55bcd40eb81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3e:e3:1b:64:cd:07:0b:79:5d:18:bd:1d:12: 1b:9b:e0:f5:69:44:ae:e5:c0:21:5d:05:f1:39:1a: 28:32:01:db:d2:98:e6:fc:4d:62:94:d2:ef:87:1e: c5:14:42:53:d4:d9:f6:48:10:eb:b0:6c:8b:c3:7a: c9:9a:c9:55:7b:54:1b:4e:d7:5f:83:c0:05:14:71: f9:c0:44:cb:fa:4f:70:f2:ce:24:47:45:a7:68:ed: 80:11:d2:52:8a:6c:df:37:4c:04:f4:79:9f:18:24: 65:ce:f2:55:ae:5b:29:a3:ac:1f:5d:cf:34:1a:f5: 1f:a7:eb:7e:b7:8c:22:9b:2b:e8:7a:43:9c:9a:cb: 22:fb:4b:e7:de:d2:5a:1d:1a:0a:cb:6e:f8:59:91: 82:bf:f2:e1:b8:5a:3d:ee:be:a3:67:06:e7:c1:b4: 5b:dd:79:a4:06:3b:8a:63:87:0d:5f:37:7b:af:4b: c8:90:7d:37:99:01:1d:28:9d:da:9a:c2:84:46:35: b4:c5:41:ac:38:16:4e:2c:e7:cf:ff:84:d5:9b:dd: 2e:de:53:fe:43:4b:3d:02:27:d2:6a:63:a8:8c:d4: 3c:c7:3c:7d:c3:8b:c7:ed:8e:89:d7:6c:ed:d0:c8: 4a:5a:4b:b4:be:c0:ed:12:3c:05:d7:0b:62:05:ee: 89:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:38:7B:1C:E3:0A:C3:91:50:22:49:4C:47:F9:8B:C6:2B:D4:33:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d723720-c1b1-3ded-94bb-35dc56996c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:07:6b:40:31:2e:03:55:5c:40:a8:80:7b:19:f8:d6:cb:c1: 8e:85:fb:ac:9e:e6:f4:10:ab:bb:4b:29:04:6f:3c:c7:46:a4: c9:df:fa:62:d0:8a:41:69:1d:f2:05:fe:66:64:af:45:04:23: cc:4d:06:e9:6c:e9:94:f9:7e:c7:6c:bf:0f:b6:95:6e:1b:49: 16:77:71:d5:d5:cb:29:cb:a7:24:eb:13:4e:58:2a:51:d6:14: ad:69:2c:7d:a8:fb:0c:10:d2:b2:e9:b9:62:16:e2:2b:56:0f: a8:ad:a8:93:f0:94:0f:2b:8a:b3:c0:53:59:a4:f9:88:d9:2b: 8d:be:46:b3:6a:a2:01:a7:33:24:67:89:14:46:9d:41:3b:f7: 1c:86:1a:3e:8e:a1:2e:c0:f7:b1:73:d7:a8:ba:97:c7:95:87: af:00:1c:c4:82:e6:91:ff:c3:25:79:0d:e2:0d:f5:9c:22:b3: 95:cb:49:f2:ff:74:35:8e:b4:84:15:03:36:45:31:c0:c6:b3: 3d:9d:23:91:ae:50:3d:6b:b3:92:54:8b:64:f5:bc:8d:aa:cd: a3:fc:d4:21:09:e0:9c:a1:e3:5f:c8:8c:e0:ff:e1:0a:cc:fb: f0:38:a7:90:e9:a9:7b:7f:68:29:4a:86:73:60:80:1c:c7:c2: a0:32:27:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXFkl5isI3oXLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTI0YWIxNzctYTBjYy00ZGUxLWIwYmItNTViY2Q0MGViODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj7jG2TNBwt5XRi9HRIbm+D1aUSu5cAhXQXx ORooMgHb0pjm/E1ilNLvhx7FFEJT1Nn2SBDrsGyLw3rJmslVe1QbTtdfg8AFFHH5 wETL+k9w8s4kR0WnaO2AEdJSimzfN0wE9HmfGCRlzvJVrlspo6wfXc80GvUfp+t+ t4wimyvoekOcmssi+0vn3tJaHRoKy274WZGCv/LhuFo97r6jZwbnwbRb3XmkBjuK Y4cNXzd7r0vIkH03mQEdKJ3amsKERjW0xUGsOBZOLOfP/4TVm90u3lP+Q0s9AifS amOojNQ8xzx9w4vH7Y6J12zt0MhKWku0vsDtEjwF1wtiBe6JQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE4exzjCsORUCJJTEf5i8Yr1DMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGQ3MjM3MjAtYzFiMS0z ZGVkLTk0YmItMzVkYzU2OTk2YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwHa0AxLgNVXECogHsZ+NbLwY6F+6ye5vQQq7tLKQRvPMdGpMnf+mLQ ikFpHfIF/mZkr0UEI8xNBuls6ZT5fsdsvw+2lW4bSRZ3cdXVyynLpyTrE05YKlHW FK1pLH2o+wwQ0rLpuWIW4itWD6itqJPwlA8rirPAU1mk+YjZK42+RrNqogGnMyRn iRRGnUE79xyGGj6OoS7A97Fz16i6l8eVh68AHMSC5pH/wyV5DeIN9Zwis5XLSfL/ dDWOtIQVAzZFMcDGsz2dI5GuUD1rs5JUi2T1vI2qzaP81CEJ4Jyh41/IjOD/4QrM +/A4p5DpqXt/aClKhnNggBzHwqAyJ0E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:55 2025 by rpki-client