$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/da18fc62-4f84-3557-bb3d-b3791cd1ee79.roa File: da18fc62-4f84-3557-bb3d-b3791cd1ee79.roa (raw, json) Hash identifier: dRcVoeKla8GAoNQtXYe2AMnEzvXI3Lt8V0DFGsALbUI= Subject key identifier: EA:C0:C1:AD:8E:40:1B:C3:EA:0F:2B:DC:6A:FC:E6:CC:75:ED:1B:B0 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584961B99F7A72021F02EDFF9400 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/da18fc62-4f84-3557-bb3d-b3791cd1ee79.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 12083 IP address blocks: 24.35.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:9f:7a:72:02:1f:02:ed:ff:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=7c79af4d-4dee-4e97-9842-becc38ff4cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:15:f8:05:8d:8e:a3:3c:0c:e1:fd:d5:5f: db:2b:1a:fa:ab:14:66:3a:aa:3c:f5:cf:5d:16:95: 4e:70:a7:77:8a:94:32:19:79:55:7b:54:52:ab:55: 37:e4:86:6c:34:54:2f:e6:f3:ef:20:0d:ba:84:d1: 7c:69:a5:ae:1f:a8:48:1b:5d:28:a7:a1:fc:6e:22: 1d:7a:2e:91:45:5a:0f:ba:91:b7:85:ac:de:66:fa: a9:36:dc:8c:ff:71:7d:c8:c5:cb:76:09:b0:0b:ad: 16:f2:a9:46:3c:34:9e:1e:70:0c:91:5d:58:60:ea: a1:87:0e:01:2a:eb:f6:01:74:ac:b2:42:b2:3c:19: a4:44:ca:d5:f3:46:01:20:7e:bd:2d:39:e9:83:e9: 74:ad:0e:e0:a8:77:47:db:56:17:f7:0d:68:f6:0d: 46:9b:3f:5d:6a:67:0f:d1:59:01:d7:a0:83:66:11: a5:6a:e6:0c:59:51:01:d5:ff:43:8e:87:3f:e7:bd: 14:c8:fd:82:9d:ee:77:0e:ae:06:7d:f6:03:c5:e4: f2:12:20:cb:71:d0:df:ce:2e:25:87:d8:13:3f:25: 65:c7:31:25:e4:42:28:fb:14:ea:ce:43:b6:92:2d: 27:b5:95:ec:3a:02:d2:58:9f:5a:27:9f:fc:c5:9b: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C0:C1:AD:8E:40:1B:C3:EA:0F:2B:DC:6A:FC:E6:CC:75:ED:1B:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/da18fc62-4f84-3557-bb3d-b3791cd1ee79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 24.35.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:13:17:82:22:71:cc:d6:ba:75:4a:37:4b:32:ea:ad:07:a9: ef:7d:38:f2:0c:b6:fe:4a:2d:be:ab:17:86:25:61:79:78:6e: a8:5b:48:58:90:db:48:7a:ab:78:01:98:a3:83:34:f2:00:2c: 7d:fc:ce:8a:72:16:3f:9a:71:c5:16:e8:db:d2:0b:cc:5d:43: bf:ae:60:a5:cc:35:5c:3c:6a:b0:8b:71:fa:97:22:aa:80:90: 74:d9:9f:a7:ff:f2:f9:04:76:25:e6:a2:14:d5:05:64:78:ef: 51:3f:01:ce:80:49:8d:2c:47:18:3d:3b:0c:f7:1c:ee:28:9a: 96:f7:31:94:a4:ad:fc:e9:de:e2:a6:f7:a5:95:de:f1:51:02: 95:7c:e1:b0:e3:84:16:9e:47:b3:72:fd:4e:94:a4:b2:ae:3a: 3a:09:f5:14:56:a5:e2:66:b0:53:a1:2b:f1:dc:61:e7:87:cf: c4:2f:86:07:98:4e:17:eb:8a:bc:96:b3:a4:1d:00:c4:c5:2b: da:3d:2e:d2:f6:3f:00:c2:d3:3a:22:c2:ca:40:ac:52:1d:80: 1f:02:42:df:76:b5:18:16:0e:ab:7e:66:77:a9:50:b9:aa:e2: 13:82:d9:c4:89:ae:16:9e:26:36:bb:e5:96:a0:ef:28:5d:85: 93:c2:6d:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZ96cgIfAu3/lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk N2M3OWFmNGQtNGRlZS00ZTk3LTk4NDItYmVjYzM4ZmY0Y2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZYV+AWNjqM8DOH91V/bKxr6qxRmOqo89c9d FpVOcKd3ipQyGXlVe1RSq1U35IZsNFQv5vPvIA26hNF8aaWuH6hIG10op6H8biId ei6RRVoPupG3hazeZvqpNtyM/3F9yMXLdgmwC60W8qlGPDSeHnAMkV1YYOqhhw4B Kuv2AXSsskKyPBmkRMrV80YBIH69LTnpg+l0rQ7gqHdH21YX9w1o9g1Gmz9damcP 0VkB16CDZhGlauYMWVEB1f9Djoc/570UyP2Cne53Dq4GffYDxeTyEiDLcdDfzi4l h9gTPyVlxzEl5EIo+xTqzkO2ki0ntZXsOgLSWJ9aJ5/8xZsK1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrAwa2OQBvD6g8r3Gr85sx17RuwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvZGExOGZjNjItNGY4NC0z NTU3LWJiM2QtYjM3OTFjZDFlZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGCMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUTF4IicczWunVKN0sy6q0Hqe99OPIMtv5KLb6rF4YlYXl4bqhbSFiQ 20h6q3gBmKODNPIALH38zopyFj+accUW6NvSC8xdQ7+uYKXMNVw8arCLcfqXIqqA kHTZn6f/8vkEdiXmohTVBWR471E/Ac6ASY0sRxg9Owz3HO4ompb3MZSkrfzp3uKm 96WV3vFRApV84bDjhBaeR7Ny/U6UpLKuOjoJ9RRWpeJmsFOhK/HcYeeHz8QvhgeY ThfriryWs6QdAMTFK9o9LtL2PwDC0zoiwspArFIdgB8CQt92tRgWDqt+ZnepULmq 4hOC2cSJrhaeJja75Zag7yhdhZPCbQ8= -----END CERTIFICATE-----Generated at Tue Apr 29 20:33:26 2025 by rpki-client