$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa File: db86d00a-9156-38fa-a2ec-a5019abb2c87.roa (raw, json) Hash identifier: 7tRktfHYAamII7GZ5JyBcI7PAwabbDl/N5fvZ+iJLpI= Subject key identifier: 08:2A:64:AF:07:8D:EE:43:AF:3E:E1:0D:B6:38:4A:61:61:D9:90:0E Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285848C5820A213F9DD044BB453100 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 15169 IP address blocks: 208.76.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0a:21:3f:9d:d0:44:bb:45:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5eb97959-4737-4200-835b-a94b031dbf08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:65:02:48:1c:45:e4:ce:32:76:21:ff:6e: 74:f9:d7:15:f3:6f:c0:76:b0:11:50:62:c7:6c:f1: 84:cf:3c:00:90:3b:95:e9:1f:09:c8:e8:21:75:d6: ca:7e:a2:e8:11:bc:05:c7:87:e5:c4:61:5f:9b:76: 99:4f:07:df:cb:49:8a:79:d9:cc:c2:22:40:32:0d: 82:1d:e9:7d:eb:02:c3:49:2c:6b:46:70:7a:7d:b5: 40:ee:f3:ff:24:0c:ca:a4:cc:a6:41:c5:61:f2:7b: 60:8c:4b:6d:b3:fa:6b:ec:2e:8a:f0:fd:42:9c:aa: d3:15:8e:44:40:46:c5:b2:e8:c9:dc:e8:00:34:19: 67:8e:13:0a:20:66:23:b8:8f:74:37:95:26:05:5a: e5:71:14:fe:40:42:8d:1b:ca:03:a0:d6:43:02:f0: d8:87:51:35:dd:01:7e:4a:26:a9:4d:e9:1b:0a:2a: 8a:1d:33:fc:1e:2d:11:31:6d:d2:ab:98:b2:b3:00: cf:48:7e:17:b9:e5:e5:76:bc:41:1a:78:2a:a5:13: 4a:a3:d9:50:87:19:52:9c:95:29:78:79:80:0b:17: 36:3e:db:dd:6e:51:5c:b1:99:c5:de:bd:16:e2:71: 1c:25:23:19:3e:9d:c1:34:f4:2c:65:81:ea:5d:4a: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2A:64:AF:07:8D:EE:43:AF:3E:E1:0D:B6:38:4A:61:61:D9:90:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db86d00a-9156-38fa-a2ec-a5019abb2c87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:62:fd:0f:89:33:39:18:c9:81:33:94:5e:8f:8c:48:c4:b2: ed:3e:45:60:c8:5c:08:72:45:f2:ad:fa:ea:f2:36:e1:20:2a: c9:c2:84:02:89:30:f1:04:ea:27:b5:2d:05:70:a2:11:47:ac: de:51:6a:0a:02:3f:f6:4d:a2:32:09:df:58:2a:1c:e1:4a:32: 6f:44:f4:13:6e:3c:eb:28:7c:9d:38:a1:f5:93:71:68:35:7f: b3:5b:f2:0a:81:66:98:e9:49:e9:0f:1e:a6:56:cf:43:bb:6b: d7:f0:82:bf:40:d8:18:ff:04:39:1c:6c:05:a6:bb:f5:a1:f6: 86:0b:b0:43:5b:5d:36:77:e2:2f:25:24:0d:99:5c:a0:23:e5: e2:bc:ed:da:8a:06:62:93:7d:0f:74:08:8b:cd:f0:a1:0a:f4: fe:db:8a:79:db:2c:72:96:72:15:f7:c1:f9:1c:60:76:23:25: f0:66:ed:b5:52:ba:c8:92:19:06:3a:e5:fd:30:54:da:3a:f9: 44:a7:fc:81:46:21:1a:ca:db:c1:f4:9b:92:fa:c2:42:e1:42: 0a:4b:93:35:93:17:df:6e:c3:5a:af:ef:ed:82:56:1a:cb:c6: 72:3f:54:32:6d:b4:77:04:34:e2:90:52:98:6f:9e:71:29:3b: c1:96:84:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggohP53QRLtFMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NWViOTc5NTktNDczNy00MjAwLTgzNWItYTk0YjAzMWRiZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZRlAkgcReTOMnYh/250+dcV82/AdrARUGLH bPGEzzwAkDuV6R8JyOghddbKfqLoEbwFx4flxGFfm3aZTwffy0mKednMwiJAMg2C Hel96wLDSSxrRnB6fbVA7vP/JAzKpMymQcVh8ntgjEtts/pr7C6K8P1CnKrTFY5E QEbFsujJ3OgANBlnjhMKIGYjuI90N5UmBVrlcRT+QEKNG8oDoNZDAvDYh1E13QF+ SiapTekbCiqKHTP8Hi0RMW3Sq5iyswDPSH4XueXldrxBGngqpRNKo9lQhxlSnJUp eHmACxc2PtvdblFcsZnF3r0W4nEcJSMZPp3BNPQsZYHqXUoTHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgqZK8Hje5Drz7hDbY4SmFh2ZAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGI4NmQwMGEtOTE1Ni0z OGZhLWEyZWMtYTUwMTlhYmIyYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ExEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFi/Q+JMzkYyYEzlF6PjEjEsu0+RWDIXAhyRfKt+uryNuEgKsnChAKJ MPEE6ie1LQVwohFHrN5RagoCP/ZNojIJ31gqHOFKMm9E9BNuPOsofJ04ofWTcWg1 f7Nb8gqBZpjpSekPHqZWz0O7a9fwgr9A2Bj/BDkcbAWmu/Wh9oYLsENbXTZ34i8l JA2ZXKAj5eK87dqKBmKTfQ90CIvN8KEK9P7binnbLHKWchX3wfkcYHYjJfBm7bVS usiSGQY65f0wVNo6+USn/IFGIRrK28H0m5L6wkLhQgpLkzWTF99uw1qv7+2CVhrL xnI/VDJttHcENOKQUphvnnEpO8GWhIw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:16 2025 by rpki-client