$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/76a627dc-0e4b-385d-96f1-a22fbed0c65e.roa File: 76a627dc-0e4b-385d-96f1-a22fbed0c65e.roa (raw, json) Hash identifier: NLiHcQjtoUqX3yU7Ff7pCSk+qhxpWlznpTqpXPxZkk0= Subject key identifier: 03:2D:E5:D5:8A:14:E2:6B:75:30:16:BF:C3:55:85:E7:26:49:5F:68 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285849A4BAC334874E93DB4267D540 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/76a627dc-0e4b-385d-96f1-a22fbed0c65e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 209.107.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c3:34:87:4e:93:db:42:67:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3eadaf76-b761-48d1-8faa-7740a362fbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:36:4a:f4:09:74:bb:12:a4:85:d0:ab:f9:87: 11:33:fd:af:3d:5a:4a:e4:ce:65:41:16:76:5e:af: bb:44:63:99:82:f8:86:0a:91:53:7e:20:6a:d0:11: b1:24:4b:b5:74:44:64:18:40:bc:54:b6:33:59:47: e4:9f:51:59:86:e5:e3:6c:08:b8:4f:f8:0c:7f:99: 8f:14:5e:b0:ae:eb:6b:ff:8c:3a:5f:e6:af:24:2f: 3a:fa:99:1f:32:9a:48:6f:1e:62:94:9f:92:90:fa: 5a:fa:71:1b:e5:84:d3:61:ec:05:29:56:31:68:ae: 39:c0:19:e7:9f:8c:ac:1c:4f:4e:79:f5:b2:08:0a: bf:ef:b3:b9:ac:f1:f3:a2:34:1a:76:17:a4:cb:67: 30:8b:9e:fd:3c:79:8f:4e:31:55:b4:62:62:0e:0b: 8a:51:9f:a8:82:28:37:b0:e8:d6:38:30:57:02:41: d4:e0:02:ec:5e:a9:75:60:ad:b0:d2:18:09:46:a0: 58:ea:8a:d7:b9:99:1e:53:96:6a:8d:b0:2a:f3:b7: 98:e0:84:c4:ac:1a:9c:cf:70:21:14:d0:83:bb:94: 35:07:b2:4c:f8:eb:2d:6e:49:1f:e3:6a:8b:d9:48: a7:71:12:59:2c:7d:50:eb:4c:26:03:25:3b:cb:f6: 2e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2D:E5:D5:8A:14:E2:6B:75:30:16:BF:C3:55:85:E7:26:49:5F:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/76a627dc-0e4b-385d-96f1-a22fbed0c65e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 209.107.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:69:2e:3e:ef:46:68:c3:e2:23:92:a4:92:8c:96:26:da:0a: 5b:60:24:57:f7:b4:d8:10:a6:5f:f9:38:c8:31:06:4b:53:f4: fd:be:16:f5:16:3b:a7:aa:2f:4e:ed:90:32:f1:0c:8f:76:43: 58:61:15:0b:d4:6d:05:04:5b:e8:bf:11:c7:d4:6a:a6:17:90: 29:40:41:75:8a:9b:45:c4:52:a7:0d:ac:41:2d:28:b3:d6:de: 22:53:fd:09:d8:7f:a2:2f:f1:e0:a7:9f:29:3a:43:20:e4:88: 65:d5:a0:66:85:84:a3:3d:fc:ba:97:12:b7:e7:99:ba:da:40: 40:3f:e9:49:39:2c:44:ee:a2:d1:95:28:d2:e0:b7:f2:c6:60: 19:7f:e1:6e:bd:ed:40:0f:f8:78:1e:b8:67:e6:a1:da:db:90: 43:db:f2:3c:a9:f9:11:5a:53:f3:e8:66:de:49:f8:22:d8:98: 44:51:60:e7:76:35:0d:73:a5:3c:20:88:76:8c:ef:1f:a2:fc: 0d:3a:a7:16:b1:d2:07:1d:aa:19:1d:44:e6:76:fa:4c:16:df: 70:35:d6:97:ae:69:64:6f:da:9f:cc:30:89:ed:93:d6:bf:61: 81:39:06:91:b1:e8:3a:73:2e:75:c4:a3:47:12:76:19:ab:2e: 00:55:57:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusM0h06T20Jn1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2VhZGFmNzYtYjc2MS00OGQxLThmYWEtNzc0MGEzNjJmYmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjZK9Al0uxKkhdCr+YcRM/2vPVpK5M5lQRZ2 Xq+7RGOZgviGCpFTfiBq0BGxJEu1dERkGEC8VLYzWUfkn1FZhuXjbAi4T/gMf5mP FF6wrutr/4w6X+avJC86+pkfMppIbx5ilJ+SkPpa+nEb5YTTYewFKVYxaK45wBnn n4ysHE9OefWyCAq/77O5rPHzojQadheky2cwi579PHmPTjFVtGJiDguKUZ+ogig3 sOjWODBXAkHU4ALsXql1YK2w0hgJRqBY6orXuZkeU5ZqjbAq87eY4ITErBqcz3Ah FNCDu5Q1B7JM+Ostbkkf42qL2UincRJZLH1Q60wmAyU7y/YurQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMt5dWKFOJrdTAWv8NVhecmSV9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvNzZhNjI3ZGMtMGU0Yi0z ODVkLTk2ZjEtYTIyZmJlZDBjNjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRpLj7vRmjD4iOSpJKMlibaCltgJFf3tNgQpl/5OMgxBktT9P2+FvUW O6eqL07tkDLxDI92Q1hhFQvUbQUEW+i/EcfUaqYXkClAQXWKm0XEUqcNrEEtKLPW 3iJT/QnYf6Iv8eCnnyk6QyDkiGXVoGaFhKM9/LqXErfnmbraQEA/6Uk5LETuotGV KNLgt/LGYBl/4W697UAP+HgeuGfmodrbkEPb8jyp+RFaU/PoZt5J+CLYmERRYOd2 NQ1zpTwgiHaM7x+i/A06pxax0gcdqhkdROZ2+kwW33A11peuaWRv2p/MMIntk9a/ YYE5BpGx6DpzLnXEo0cSdhmrLgBVV8M= -----END CERTIFICATE-----Generated at Sun May 4 18:40:40 2025 by rpki-client