$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa File: 9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa (raw, json) Hash identifier: EpodoMl10A1X3QTUagyc/n3pPDjg55tVzj/4YmL0qvQ= Subject key identifier: 11:76:2D:A6:0E:32:6A:8D:A0:C2:1E:1D:D0:AE:98:F5:9C:43:21:F3 Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F432858499829D6204A8996F2F4207F80 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 63306 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:d6:20:4a:89:96:f2:f4:20:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=b7285740-1147-46d1-829b-48feaf7b4c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f5:65:81:c3:58:56:df:4d:8e:3f:36:60:ae: 50:51:91:d6:c8:d1:d3:96:bb:a0:e9:7b:42:e8:a4: a5:9d:b0:67:b1:db:13:b0:f2:3a:44:d4:35:33:cc: 00:b0:3f:e6:90:5f:2b:be:de:83:33:c3:a8:f1:14: 08:75:2d:89:44:e8:12:cb:7b:47:c9:60:c6:9d:25: b4:a7:93:e9:f1:8b:a3:41:b6:96:a7:2d:52:0b:80: f0:f1:50:4b:a3:b3:7b:9d:46:f1:a4:e3:36:2c:b9: df:3b:b0:06:1d:cf:01:44:04:cf:7c:3d:ff:b3:c2: eb:47:de:61:c9:e6:67:2d:6c:9d:27:1a:f6:33:84: b0:24:04:66:20:aa:4c:b1:39:ee:bb:75:98:4e:93: 21:9d:7d:c6:38:6a:d7:12:98:e9:22:2f:5c:4d:dc: f1:d0:8b:86:80:92:7d:50:2b:46:87:b6:75:0d:03: eb:59:b8:d7:1a:1d:c7:f1:b9:8f:dc:50:ba:ff:3a: 32:3e:ea:2e:f3:29:44:60:31:a2:08:9a:8e:a1:f4: 45:ae:8a:87:b3:58:ca:ae:8e:cc:12:67:4f:68:3a: 86:0e:88:c4:1a:e8:6e:fd:ac:33:86:f9:65:27:38: 10:19:28:98:c0:f8:07:9a:c7:73:71:cf:e5:2b:2a: 00:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:76:2D:A6:0E:32:6A:8D:A0:C2:1E:1D:D0:AE:98:F5:9C:43:21:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:2f:13:af:e1:6e:b0:34:19:15:7a:a4:d9:16:a7:1c:72:8a: a5:3a:2e:15:74:f7:29:52:6a:8d:23:0d:23:f6:64:4f:59:7a: 1b:37:94:8b:62:b8:dc:ec:9c:5a:6b:6b:83:9a:32:76:85:38: d5:36:4d:e2:f9:b6:71:50:42:51:d4:55:2f:e5:d4:34:bf:41: a5:75:be:8b:50:ff:75:bd:03:e0:55:94:8e:bb:de:14:01:14: a4:78:a5:44:3b:33:c9:75:25:c7:ad:d1:8d:c7:bc:c5:a9:94: d7:53:0c:c7:54:4c:24:51:1b:42:2d:c8:32:45:12:6a:8c:94: 4a:86:65:86:24:bf:8a:18:bd:8f:99:fc:da:09:65:63:0c:18: d0:45:dc:1e:8d:54:57:79:5b:91:de:89:04:ab:ba:b7:24:f2: cf:aa:74:40:18:3f:af:5a:97:31:3a:1d:5c:a5:3d:14:6c:d0: f3:25:c7:a2:e3:1a:d3:1e:7e:57:ad:05:bd:e8:f0:82:45:f0: 9c:5a:d8:c8:86:c6:5c:1a:1c:cb:f9:70:f1:68:df:9b:df:a7: 6f:ba:41:76:12:95:5f:71:8f:0c:3c:87:b6:ce:09:89:d5:04: b4:bf:37:91:bf:65:2e:6e:77:02:52:0f:32:62:9f:13:17:cb: d2:31:c7:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKdYgSomW8vQgf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YjcyODU3NDAtMTE0Ny00NmQxLTgyOWItNDhmZWFmN2I0YzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvVlgcNYVt9Njj82YK5QUZHWyNHTlrug6XtC 6KSlnbBnsdsTsPI6RNQ1M8wAsD/mkF8rvt6DM8Oo8RQIdS2JROgSy3tHyWDGnSW0 p5Pp8YujQbaWpy1SC4Dw8VBLo7N7nUbxpOM2LLnfO7AGHc8BRATPfD3/s8LrR95h yeZnLWydJxr2M4SwJARmIKpMsTnuu3WYTpMhnX3GOGrXEpjpIi9cTdzx0IuGgJJ9 UCtGh7Z1DQPrWbjXGh3H8bmP3FC6/zoyPuou8ylEYDGiCJqOofRFroqHs1jKro7M EmdPaDqGDojEGuhu/awzhvllJzgQGSiYwPgHmsdzcc/lKyoA3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBF2LaYOMmqNoMIeHdCumPWcQyHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvOWJhZTQ1YWUtY2JjMy0z ZDgxLTg3MmMtN2Q2NTU4ZDAxNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIvE6/hbrA0GRV6pNkWpxxyiqU6LhV09ylSao0jDSP2ZE9Zehs3lIti uNzsnFpra4OaMnaFONU2TeL5tnFQQlHUVS/l1DS/QaV1votQ/3W9A+BVlI673hQB FKR4pUQ7M8l1Jcet0Y3HvMWplNdTDMdUTCRRG0ItyDJFEmqMlEqGZYYkv4oYvY+Z /NoJZWMMGNBF3B6NVFd5W5HeiQSrurck8s+qdEAYP69alzE6HVylPRRs0PMlx6Lj GtMefletBb3o8IJF8Jxa2MiGxlwaHMv5cPFo35vfp2+6QXYSlV9xjww8h7bOCYnV BLS/N5G/ZS5udwJSDzJinxMXy9Ixx4s= -----END CERTIFICATE-----Generated at Mon Apr 28 02:16:04 2025 by rpki-client