$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0572660c-7907-3fa4-b38a-51aed93af276.roa File: 0572660c-7907-3fa4-b38a-51aed93af276.roa (raw, json) Hash identifier: cQwx8m9z5Zq28xqhQ/V+xz2axCqLzRXceIhCJ8+xGGQ= Subject key identifier: C1:77:70:5D:76:8D:2F:AF:C0:D1:26:51:79:C0:D5:3F:21:A6:69:15 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD4A77873A7893C6CBA80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0572660c-7907-3fa4-b38a-51aed93af276.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 208.76.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d4:a7:78:73:a7:89:3c:6c:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9aab4141-9580-46f9-9ae2-29324139dc67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:c0:c4:cc:77:21:92:14:c8:aa:e2:60:ca: 8c:1a:e3:d1:4a:8d:8a:90:c4:22:80:bc:ce:66:48: 2d:2b:55:94:2c:14:62:84:34:65:ad:81:74:35:06: e8:21:45:7b:b5:03:54:ac:50:80:f7:5b:dd:82:21: c7:57:08:f3:3f:bf:d6:ba:8b:33:e0:a1:84:72:40: 41:89:1b:98:18:3f:2c:5b:8c:8f:da:e8:12:2d:02: 80:ed:81:b5:7e:e5:7f:bb:9b:3b:72:a1:a5:00:f5: fc:8c:bd:06:f4:c1:a5:f1:f6:86:30:ba:f2:8c:d5: c0:4c:51:d1:ca:f9:9a:ef:6f:2c:5d:4f:22:fa:e3: 6d:9d:24:c9:7a:db:5b:b3:b6:10:7a:83:7d:14:b7: 8f:f7:b0:d0:93:45:83:1a:e9:ef:cc:8e:ff:86:d4: a8:3d:e9:63:cf:65:fd:19:40:6a:5d:32:e3:cb:6e: 90:4d:8e:10:59:6d:96:4e:4f:e4:a1:19:e2:33:85: 9d:57:75:53:ed:59:54:ab:38:8d:af:0a:6e:23:4f: 1a:01:f9:5f:6e:b1:63:89:6c:5a:ea:39:15:e0:06: 46:5b:09:e5:73:6e:f4:e7:dd:7e:ff:08:9c:49:97: 15:24:3f:5a:fe:9e:eb:42:e4:fb:0d:1f:67:3b:8b: 59:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:77:70:5D:76:8D:2F:AF:C0:D1:26:51:79:C0:D5:3F:21:A6:69:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0572660c-7907-3fa4-b38a-51aed93af276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.76.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:07:a1:22:05:1f:5b:f9:8f:91:db:d8:00:88:62:bb:4a:d5: 55:5d:c2:17:99:33:fc:44:54:f8:97:41:14:31:93:67:df:12: 65:0b:1e:c7:4d:85:3b:fb:3c:60:b1:c2:a4:cb:ce:5f:f2:9b: 39:ff:49:4a:ad:75:02:84:7d:6b:eb:f3:56:48:4b:86:70:2a: 01:6e:53:4f:5f:45:6b:e0:8d:4e:b4:1c:0f:86:05:d7:fd:2f: 58:40:16:da:f6:cb:b6:70:9f:b9:87:ba:4d:8d:5e:0c:49:c5: 19:a7:29:ea:e6:7b:05:80:5f:b6:b8:8e:ce:57:aa:37:a1:bd: ad:2a:68:43:3d:74:0e:13:3d:04:49:d8:a2:63:a6:bd:62:38: a9:3c:75:00:8c:3e:d7:e5:45:96:c7:d8:d3:da:a6:7b:3a:ad: c2:f2:e7:66:6a:45:74:ce:6f:d2:53:b0:54:cc:2e:b3:cd:84: d5:5a:7b:78:46:80:a0:8e:08:37:d8:39:ec:9f:ce:bd:d5:1c: cd:5f:2e:e0:f4:8f:41:f2:62:53:f2:2f:60:26:dc:39:aa:94: c7:41:b6:7e:03:3f:93:6c:5e:ba:d6:74:67:f8:99:20:51:0d: 65:bc:60:83:96:cb:a0:6d:47:97:e2:74:bf:ae:47:cc:8e:8a: 6b:e8:47:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutSneHOniTxsuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWFhYjQxNDEtOTU4MC00NmY5LTlhZTItMjkzMjQxMzlkYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaHAxMx3IZIUyKriYMqMGuPRSo2KkMQigLzO ZkgtK1WULBRihDRlrYF0NQboIUV7tQNUrFCA91vdgiHHVwjzP7/Wuosz4KGEckBB iRuYGD8sW4yP2ugSLQKA7YG1fuV/u5s7cqGlAPX8jL0G9MGl8faGMLryjNXATFHR yvma728sXU8i+uNtnSTJettbs7YQeoN9FLeP97DQk0WDGunvzI7/htSoPeljz2X9 GUBqXTLjy26QTY4QWW2WTk/koRniM4WdV3VT7VlUqziNrwpuI08aAflfbrFjiWxa 6jkV4AZGWwnlc270591+/wicSZcVJD9a/p7rQuT7DR9nO4tZuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMF3cF12jS+vwNEmUXnA1T8hpmkVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDU3MjY2MGMtNzkwNy0z ZmE0LWIzOGEtNTFhZWQ5M2FmMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ExGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcHoSIFH1v5j5Hb2ACIYrtK1VVdwheZM/xEVPiXQRQxk2ffEmULHsdN hTv7PGCxwqTLzl/ymzn/SUqtdQKEfWvr81ZIS4ZwKgFuU09fRWvgjU60HA+GBdf9 L1hAFtr2y7Zwn7mHuk2NXgxJxRmnKermewWAX7a4js5Xqjehva0qaEM9dA4TPQRJ 2KJjpr1iOKk8dQCMPtflRZbH2NPapns6rcLy52ZqRXTOb9JTsFTMLrPNhNVae3hG gKCOCDfYOeyfzr3VHM1fLuD0j0HyYlPyL2Am3DmqlMdBtn4DP5NsXrrWdGf4mSBR DWW8YIOWy6BtR5fidL+uR8yOimvoRyw= -----END CERTIFICATE-----Generated at Sun May 4 11:01:30 2025 by rpki-client