$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/76ae0f66-8f1d-3ccb-bdc3-5f0d961473ef.roa File: 76ae0f66-8f1d-3ccb-bdc3-5f0d961473ef.roa (raw, json) Hash identifier: ZrhpUcZGCxgdVIRMT032Ta9VpybRoaK+50bzYki1+YM= Subject key identifier: 87:8F:76:1A:AD:BE:EB:D8:29:82:93:EA:62:E2:BB:DD:01:01:3F:BE Certificate issuer: /CN=d416e28d-79e4-4432-b727-97e9702afe09 Certificate serial: 010D0C9F43285849B57A0A75CA9D6CE102CBD080 Authority key identifier: AC:C0:26:32:04:53:92:DE:62:BB:D8:A7:6C:D2:76:DB:05:52:3A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/76ae0f66-8f1d-3ccb-bdc3-5f0d961473ef.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 60326 IP address blocks: 208.73.212.0/23 maxlen: 24 208.73.214.0/24 maxlen: 24 2602:fb92::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:0a:75:ca:9d:6c:e1:02:cb:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d416e28d-79e4-4432-b727-97e9702afe09 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=d393a655-7818-4d47-a21c-c37136c1f3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d4:63:90:c0:c4:b9:19:7d:b3:5c:9a:fe:73: ea:ef:16:d5:3d:9f:3b:a9:fd:c2:fc:75:86:cd:58: dc:d6:dc:3d:2e:f0:1d:f1:b0:60:43:af:af:25:0d: ad:2b:68:5a:44:c3:51:64:29:6c:2c:d7:be:d9:a3: 27:e3:10:5d:c0:ac:68:ae:fd:4b:a8:85:fe:73:ae: d8:ac:33:06:85:1b:fb:2b:d2:90:a9:88:c8:a7:07: 2e:7f:00:ce:e1:e0:38:3d:ee:39:ca:c4:37:95:82: 8d:62:7a:7e:bc:65:2a:29:e2:7f:fc:2c:a3:6f:3f: c5:8a:da:43:a3:96:18:9d:eb:14:87:c0:47:37:85: d4:78:c0:5a:5a:b4:69:ff:3c:51:03:c0:7a:22:ea: cb:f6:1a:d9:e1:42:3a:48:08:9a:a5:b6:5f:3b:e9: ab:c8:ef:30:70:6f:64:8d:17:46:cc:17:2e:94:7d: 55:be:15:e9:07:96:86:3e:05:89:5a:dd:67:f7:c5: 10:8a:2a:66:62:88:4c:9c:48:07:0f:f4:dd:9e:66: 5c:45:e6:1b:64:59:30:62:0a:c0:e1:8d:e9:cf:78: 95:18:c4:6c:4a:fc:53:1f:bf:14:cd:ab:98:8e:72: c3:a1:48:44:f4:03:a0:4e:4d:d9:37:14:dc:44:7c: 9e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8F:76:1A:AD:BE:EB:D8:29:82:93:EA:62:E2:BB:DD:01:01:3F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/76ae0f66-8f1d-3ccb-bdc3-5f0d961473ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.crl X509v3 Authority Key Identifier: keyid:AC:C0:26:32:04:53:92:DE:62:BB:D8:A7:6C:D2:76:DB:05:52:3A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer sbgp-ipAddrBlock: critical IPv4: 208.73.212.0-208.73.214.255 IPv6: 2602:fb92::/38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e7:d9:09:fb:59:7d:8d:c3:81:50:26:69:e0:d3:b5:a4:f3: b3:74:3d:5d:92:6b:f7:02:ea:33:11:e1:8d:76:76:3e:ab:da: 7c:21:02:09:f2:10:8e:8e:09:2c:51:c9:e3:20:c0:09:0b:bd: e1:0b:a6:7d:0c:05:98:af:41:79:8a:b2:cd:22:d2:18:cf:13: 85:df:c7:57:98:77:2b:28:12:8d:51:3f:49:bd:22:60:c1:97: 93:c1:1d:54:63:c2:3c:7c:ea:83:3f:45:fb:07:88:84:36:e0: 87:9b:62:00:64:4e:7b:9e:16:15:8a:f1:8a:13:28:d4:ce:91: 2b:31:87:9a:c0:df:ad:b1:61:a9:f9:55:d6:fc:24:aa:2b:81: f6:5e:93:3e:c6:21:39:2f:a3:ce:1f:7a:70:0f:68:ff:72:40: 81:69:ce:21:3a:60:9f:3c:8d:c9:b1:6f:eb:35:9c:ba:b9:19: c9:df:56:49:12:c1:0e:46:df:06:56:a3:d8:b0:70:84:4b:06: a5:5a:c4:9a:18:e0:7f:a4:74:86:5d:f5:87:35:07:16:73:74: a6:f0:35:1a:f9:2e:50:6f:90:4c:30:b2:a7:b8:b5:f7:b8:8e: f6:9e:9d:d6:a5:c8:7c:f8:d8:6a:6a:9c:b7:28:85:2d:a4:ab: d8:05:cf:ee -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEm1egp1yp1s4QLL0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxNmUyOGQtNzllNC00NDMyLWI3MjctOTdlOTcwMmFm ZTA5MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk ZDM5M2E2NTUtNzgxOC00ZDQ3LWEyMWMtYzM3MTM2YzFmM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9RjkMDEuRl9s1ya/nPq7xbVPZ87qf3C/HWG zVjc1tw9LvAd8bBgQ6+vJQ2tK2haRMNRZClsLNe+2aMn4xBdwKxorv1LqIX+c67Y rDMGhRv7K9KQqYjIpwcufwDO4eA4Pe45ysQ3lYKNYnp+vGUqKeJ//Cyjbz/FitpD o5YYnesUh8BHN4XUeMBaWrRp/zxRA8B6IurL9hrZ4UI6SAiapbZfO+mryO8wcG9k jRdGzBculH1VvhXpB5aGPgWJWt1n98UQiipmYohMnEgHD/TdnmZcReYbZFkwYgrA 4Y3pz3iVGMRsSvxTH78UzauYjnLDoUhE9AOgTk3ZNxTcRHyeJwIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFIePdhqtvuvYKYKT6mLiu90BAT++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDE2 ZTI4ZC03OWU0LTQ0MzItYjcyNy05N2U5NzAyYWZlMDkvNzZhZTBmNjYtOGYxZC0z Y2NiLWJkYzMtNWYwZDk2MTQ3M2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQxNmUyOGQtNzllNC00NDMyLWI3 MjctOTdlOTcwMmFmZTA5L2Q0MTZlMjhkLTc5ZTQtNDQzMi1iNzI3LTk3ZTk3MDJh ZmUwOS5jcmwwHwYDVR0jBBgwFoAUrMAmMgRTkt5iu9inbNJ22wVSOrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDE2ZTI4ZC03OWU0LTQ0MzItYjcyNy05N2U5 NzAyYWZlMDkuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBALQSdQD BADQSdYwDgQCAAIwCAMGAiYC+5IAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC7n2Qn7WX2Nw4FQJmng07Wk 87N0PV2Sa/cC6jMR4Y12dj6r2nwhAgnyEI6OCSxRyeMgwAkLveELpn0MBZivQXmK ss0i0hjPE4Xfx1eYdysoEo1RP0m9ImDBl5PBHVRjwjx86oM/RfsHiIQ24IebYgBk TnueFhWK8YoTKNTOkSsxh5rA362xYan5Vdb8JKorgfZekz7GITkvo84fenAPaP9y QIFpziE6YJ88jcmxb+s1nLq5GcnfVkkSwQ5G3wZWo9iwcIRLBqVaxJoY4H+kdIZd 9Yc1BxZzdKbwNRr5LlBvkEwwsqe4tfe4jvaendalyHz42GpqnLcohS2kq9gFz+4= -----END CERTIFICATE-----Generated at Sun May 11 09:30:36 2025 by rpki-client