$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5ecdc7e4-d475-3565-9ffa-ecb77be7121b.roa File: 5ecdc7e4-d475-3565-9ffa-ecb77be7121b.roa (raw, json) Hash identifier: 0AVhGqI1hHTkDHca8zorCpzjMflDUEKlleJZoX4lGmw= Subject key identifier: 1C:78:10:70:F8:4D:A8:AA:E9:C6:10:43:16:1E:A2:27:0F:77:58:51 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F43285849088176FC609B23E02B671400 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5ecdc7e4-d475-3565-9ffa-ecb77be7121b.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 7265 IP address blocks: 216.47.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:76:fc:60:9b:23:e0:2b:67:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=7c1f9ad6-1ae6-4311-ab2a-fb6cc335209e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:6a:b8:eb:c6:a8:6f:b4:bd:ea:cc:7e:21: c9:7a:f1:5d:bd:a8:4d:55:97:e7:cb:bd:1b:87:15: 12:e6:f0:2e:57:95:ed:5c:5f:e9:51:98:bf:1c:f3: 2e:d9:4c:f4:d9:e4:d8:0a:15:39:c1:66:69:92:fa: 30:4c:f2:c0:59:f4:b2:ff:c5:aa:ad:45:9f:24:21: f2:7c:fd:36:83:f2:52:7c:36:57:5e:06:17:82:c0: e4:6c:93:6f:a5:26:1a:b9:fd:39:0f:8c:c7:8b:48: ad:a7:2c:9d:70:db:68:33:b7:8d:fd:e2:5e:8f:59: ed:dd:63:ce:19:30:de:33:3f:6b:43:cb:ab:14:ca: 43:14:3d:80:41:fc:5b:4f:b1:f6:3a:6d:d3:b3:6b: ed:e0:1e:41:62:ea:96:60:a8:7c:b3:ca:cb:90:08: 27:80:13:ed:96:bc:f0:6c:03:ac:06:09:a5:ff:28: c7:2b:f7:df:05:c6:34:97:d0:3a:84:b7:97:1a:90: 32:4d:7a:a6:81:af:1d:89:99:27:91:ac:96:72:91: 52:b1:f7:40:c9:00:b2:d9:df:fd:54:51:ef:28:8a: d7:9b:35:b9:cf:de:6e:58:2f:2a:79:0b:bb:cd:c7: e1:04:59:74:08:b6:b5:1d:14:d4:be:e0:0d:56:25: fa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:78:10:70:F8:4D:A8:AA:E9:C6:10:43:16:1E:A2:27:0F:77:58:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5ecdc7e4-d475-3565-9ffa-ecb77be7121b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 216.47.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:73:a0:c6:0a:0e:f5:ab:04:5b:e6:0e:f3:f5:7a:84:71:2c: 22:d6:d9:0a:2c:2d:b8:1f:15:e7:d9:fb:fa:36:73:4c:17:c0: 0b:5f:99:8a:d5:60:c3:a6:82:07:e5:45:91:ea:66:98:02:5d: fc:31:e7:18:a4:a0:9c:f5:db:ab:41:c1:ca:4b:00:bb:66:73: bf:ab:3f:77:4c:87:e3:6b:64:b2:7d:31:48:1e:d0:34:36:13: 12:d6:7e:ef:2a:66:df:e5:08:a4:32:50:ef:b9:99:26:98:8a: 2b:9b:38:68:67:b3:df:b6:0e:90:fe:e7:49:f9:3e:a1:98:77: b1:a5:cb:62:6b:4d:ce:22:b0:73:77:1f:5a:f9:30:b4:52:5c: aa:c4:be:ee:1a:37:b8:3a:8a:37:ed:4f:0d:a4:d9:01:29:55: d6:7b:df:9c:18:7c:f6:34:6d:b5:42:de:a4:ec:f3:0c:53:d0: 2e:e4:f0:98:05:e9:c8:ff:db:c3:7b:a0:5c:c5:80:5c:a7:e2: d1:c2:8a:de:ed:d2:42:18:19:dd:61:57:69:20:92:07:ac:26: c6:c9:df:7f:ca:13:f9:08:f4:72:17:a6:53:0b:4d:76:9f:83: c6:85:36:eb:d8:40:94:fa:7a:84:0a:c7:6d:70:ad:7b:43:df: 9e:e0:e9:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXb8YJsj4CtnFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk N2MxZjlhZDYtMWFlNi00MzExLWFiMmEtZmI2Y2MzMzUyMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtxquOvGqG+0verMfiHJevFdvahNVZfny70b hxUS5vAuV5XtXF/pUZi/HPMu2Uz02eTYChU5wWZpkvowTPLAWfSy/8WqrUWfJCHy fP02g/JSfDZXXgYXgsDkbJNvpSYauf05D4zHi0itpyydcNtoM7eN/eJej1nt3WPO GTDeMz9rQ8urFMpDFD2AQfxbT7H2Om3Ts2vt4B5BYuqWYKh8s8rLkAgngBPtlrzw bAOsBgml/yjHK/ffBcY0l9A6hLeXGpAyTXqmga8diZknkayWcpFSsfdAyQCy2d/9 VFHvKIrXmzW5z95uWC8qeQu7zcfhBFl0CLa1HRTUvuANViX6GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBx4EHD4Taiq6cYQQxYeoicPd1hRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvNWVjZGM3ZTQtZDQ3NS0z NTY1LTlmZmEtZWNiNzdiZTcxMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2C/HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtzoMYKDvWrBFvmDvP1eoRxLCLW2QosLbgfFefZ+/o2c0wXwAtfmYrV YMOmggflRZHqZpgCXfwx5xikoJz126tBwcpLALtmc7+rP3dMh+NrZLJ9MUge0DQ2 ExLWfu8qZt/lCKQyUO+5mSaYiiubOGhns9+2DpD+50n5PqGYd7Gly2JrTc4isHN3 H1r5MLRSXKrEvu4aN7g6ijftTw2k2QEpVdZ735wYfPY0bbVC3qTs8wxT0C7k8JgF 6cj/28N7oFzFgFyn4tHCit7t0kIYGd1hV2kgkgesJsbJ33/KE/kI9HIXplMLTXaf g8aFNuvYQJT6eoQKx21wrXtD357g6Uc= -----END CERTIFICATE-----Generated at Tue May 6 06:10:28 2025 by rpki-client