$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/345caf48-563b-3fd7-9cb6-6590a57e2d0e.roa File: 345caf48-563b-3fd7-9cb6-6590a57e2d0e.roa (raw, json) Hash identifier: 83IxTJcCtFeZJvtfuxqyAvA1RxKrQ16zjP35Z3Hjlfc= Subject key identifier: CA:3B:7B:71:E6:DA:C2:65:B5:E4:34:2C:D6:92:FA:E1:8F:C0:2B:73 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584961B995F49A0591D313CB7980 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/345caf48-563b-3fd7-9cb6-6590a57e2d0e.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 12083 IP address blocks: 24.214.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:95:f4:9a:05:91:d3:13:cb:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=9bc955ba-663f-491f-bad5-1ec411ce4974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:3b:90:ed:4b:dd:e9:26:4b:80:85:19:8b: 7d:be:92:2d:5c:c7:bb:c0:a2:38:3a:c1:13:29:4f: 6f:9d:10:00:27:08:fb:ea:13:87:d5:fd:cf:0e:90: d7:40:ca:7b:ef:48:a7:d1:53:3b:a2:20:45:21:f5: 57:60:4f:02:1d:f0:83:60:d7:a8:05:bf:ae:ad:e3: 7c:7d:ff:94:bb:44:63:9e:12:eb:7e:42:f9:69:20: 9b:92:71:a4:4f:48:9b:11:c5:f5:69:5c:44:fa:33: 26:d8:6e:dd:bb:51:65:48:51:6b:42:1e:73:81:61: c1:eb:dd:db:51:ed:cf:23:11:0f:5b:06:f7:95:fb: 73:b5:50:70:6f:a9:6e:9a:29:73:70:4d:db:14:6f: e1:55:f6:66:fe:5b:b6:ff:59:07:fd:59:36:5f:8e: 78:c0:b7:a0:d5:6b:5b:f2:65:75:d2:fd:3f:bb:9a: 31:74:f8:b8:bf:62:77:b7:2d:ce:d7:0e:42:0d:00: 7c:40:e6:04:29:ac:0b:77:7c:c9:83:15:bc:ba:d0: 72:04:7c:14:9d:f9:30:4f:97:5c:de:ca:8f:06:a0: cc:b8:39:10:1a:6e:ae:84:d1:75:26:69:01:80:8e: 9a:20:86:ae:52:66:6c:96:84:df:f2:b9:48:ec:0c: 6f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3B:7B:71:E6:DA:C2:65:B5:E4:34:2C:D6:92:FA:E1:8F:C0:2B:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/345caf48-563b-3fd7-9cb6-6590a57e2d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.214.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:58:11:8b:29:02:47:50:d1:c4:5f:a9:c9:25:7e:d6:b4:8b: 0f:b9:bf:29:55:1a:96:74:43:67:e8:2b:e4:bd:97:2b:7d:7f: 58:a8:4e:55:9a:12:36:8a:3d:f7:a9:49:ef:2b:84:b1:48:e0: 3f:93:fc:04:62:66:0a:a0:c7:57:f6:b2:e1:65:4e:3e:22:0e: d2:7a:5f:22:55:64:11:83:c7:a0:83:8b:f4:b6:d1:d5:7e:c9: ea:1f:fe:d0:43:34:04:61:10:8d:dc:65:7a:7e:4d:4e:8b:e4: 78:ae:b1:45:53:f8:7c:59:41:3d:3e:cd:3e:9b:88:c9:81:c0: 10:9c:2d:b3:ab:56:d7:7d:7f:95:cf:f4:85:69:74:20:bc:4f: e4:77:a7:20:d4:1f:0f:ce:47:76:1e:e7:5c:fd:19:00:43:bd: b6:b7:d9:fa:29:96:1a:66:26:7f:8e:c1:b3:9d:07:ec:4d:c8: 9a:d5:32:e4:73:0b:a6:1f:1c:bd:4a:35:f0:dc:1d:64:c0:37: d1:c9:a0:7f:cf:55:6c:a7:4b:03:27:7d:b3:1c:bf:ce:27:0e: 97:84:ed:56:eb:44:68:87:1c:58:d2:3f:9f:76:4b:b0:42:f9: f6:84:17:72:66:47:68:64:c9:3f:d9:f2:00:49:43:39:89:b0: 40:a5:cb:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZX0mgWR0xPLeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk OWJjOTU1YmEtNjYzZi00OTFmLWJhZDUtMWVjNDExY2U0OTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe07kO1L3ekmS4CFGYt9vpItXMe7wKI4OsET KU9vnRAAJwj76hOH1f3PDpDXQMp770in0VM7oiBFIfVXYE8CHfCDYNeoBb+ureN8 ff+Uu0RjnhLrfkL5aSCbknGkT0ibEcX1aVxE+jMm2G7du1FlSFFrQh5zgWHB693b Ue3PIxEPWwb3lftztVBwb6lumilzcE3bFG/hVfZm/lu2/1kH/Vk2X454wLeg1Wtb 8mV10v0/u5oxdPi4v2J3ty3O1w5CDQB8QOYEKawLd3zJgxW8utByBHwUnfkwT5dc 3sqPBqDMuDkQGm6uhNF1JmkBgI6aIIauUmZsloTf8rlI7AxvsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo7e3Hm2sJlteQ0LNaS+uGPwCtzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvMzQ1Y2FmNDgtNTYzYi0z ZmQ3LTljYjYtNjU5MGE1N2UyZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGNZMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFYEYspAkdQ0cRfqcklfta0iw+5vylVGpZ0Q2foK+S9lyt9f1ioTlWa EjaKPfepSe8rhLFI4D+T/ARiZgqgx1f2suFlTj4iDtJ6XyJVZBGDx6CDi/S20dV+ yeof/tBDNARhEI3cZXp+TU6L5HiusUVT+HxZQT0+zT6biMmBwBCcLbOrVtd9f5XP 9IVpdCC8T+R3pyDUHw/OR3Ye51z9GQBDvba32foplhpmJn+OwbOdB+xNyJrVMuRz C6YfHL1KNfDcHWTAN9HJoH/PVWynSwMnfbMcv84nDpeE7VbrRGiHHFjSP592S7BC +faEF3JmR2hkyT/Z8gBJQzmJsEClyyI= -----END CERTIFICATE-----Generated at Tue Apr 29 23:09:38 2025 by rpki-client