$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f3df7ee1-e88a-32d0-9f46-73ddedc546a6.roa File: f3df7ee1-e88a-32d0-9f46-73ddedc546a6.roa (raw, json) Hash identifier: R5pypkNl4rDQtJtXJ3uHGYv+6pZ23Xoj9yhhuLx+5G8= Subject key identifier: 1C:15:E0:F2:65:3C:0B:C2:CE:72:44:F5:1D:31:4E:59:C2:1D:45:2B Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584944694C39C099B670C6496100 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f3df7ee1-e88a-32d0-9f46-73ddedc546a6.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 4922 IP address blocks: 24.56.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4c:39:c0:99:b6:70:c6:49:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=85226785-0d3b-44e8-999e-a8cda9e4fa47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:96:4a:8c:72:39:ef:47:2a:f2:d3:f9:af: 67:c3:ff:8b:b2:e8:48:b4:05:c9:0f:bd:31:48:32: 7e:01:6d:30:ec:99:19:fb:5b:e9:37:f2:f1:2d:6a: b6:11:40:28:e9:5d:50:48:2f:4e:dd:c9:c0:36:e7: 0d:7a:76:8c:85:82:3f:b5:7f:cc:43:cc:71:2c:6c: 65:a8:5c:f5:b4:f5:c3:cb:81:6c:69:5d:d2:1b:10: ea:fe:a4:62:65:4c:b6:2a:05:9e:04:24:aa:69:27: 12:05:8b:62:e6:04:1c:b7:04:a7:d0:01:fd:54:79: 40:8b:7e:27:92:c9:81:20:97:f2:6a:da:f0:36:7c: 62:dd:bd:22:49:63:92:64:99:f9:74:c6:21:00:e3: 07:a8:1a:0f:1e:10:c4:64:54:74:07:49:5f:07:0a: 62:59:ae:16:e7:9a:cf:96:23:4e:51:49:bf:c9:1a: ab:65:95:a0:6e:9c:9b:58:76:56:65:3b:b9:cc:31: 77:1e:b8:73:9f:50:42:c7:63:c3:bb:03:65:73:54: cf:75:cc:7e:61:95:86:fc:ed:c0:46:f8:79:c5:c8: 57:84:22:38:45:3a:0f:f6:2d:44:7a:d0:73:e9:32: 64:1a:40:b4:1c:f8:3f:7c:ce:12:10:65:0b:cb:62: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:15:E0:F2:65:3C:0B:C2:CE:72:44:F5:1D:31:4E:59:C2:1D:45:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/f3df7ee1-e88a-32d0-9f46-73ddedc546a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 24.56.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8d:22:d3:9c:71:1b:e5:56:39:e7:35:5e:0c:4c:e9:a3:fd: 68:5c:08:b3:04:bb:61:e3:85:88:60:d3:8a:ea:83:e5:68:62: a0:05:3a:7d:23:23:fa:4d:ce:23:cc:e0:d5:c7:03:2f:6c:4f: 72:41:43:65:1c:33:33:ed:0d:04:9d:de:a7:24:d3:af:13:ea: b3:cd:a9:bd:6a:4e:0b:a0:2c:c1:c4:a6:c4:73:83:c9:48:2b: 29:4b:48:99:2a:da:93:62:6a:72:4e:b7:9d:1e:a2:82:a3:eb: e5:eb:18:fd:f7:ae:09:49:4c:a6:b2:6c:71:c7:73:fb:9f:73: 1b:9f:2e:42:4a:4c:6c:57:62:09:5a:7d:3a:84:55:12:c1:40: df:27:5e:f2:c7:3e:5a:f1:58:ce:46:b2:d4:33:11:12:4f:b7: 5f:06:90:9a:f7:7b:3d:a7:98:a6:1a:e4:77:d5:09:b6:a4:ac: a6:cf:75:ea:f8:c1:86:5d:5c:dc:3c:b3:b4:93:17:85:4f:68: 88:14:21:aa:ab:64:8f:f0:b9:3c:0c:c1:2f:ef:e9:1e:07:3a: eb:b0:08:df:19:41:85:c4:5d:78:6b:f7:2d:23:1c:3c:00:b5: b1:fc:01:07:1c:56:9f:a7:84:d6:c3:69:23:d0:4d:83:ec:8e: 7c:2b:9d:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUw5wJm2cMZJYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk ODUyMjY3ODUtMGQzYi00NGU4LTk5OWUtYThjZGE5ZTRmYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9KWSoxyOe9HKvLT+a9nw/+LsuhItAXJD70x SDJ+AW0w7JkZ+1vpN/LxLWq2EUAo6V1QSC9O3cnANucNenaMhYI/tX/MQ8xxLGxl qFz1tPXDy4FsaV3SGxDq/qRiZUy2KgWeBCSqaScSBYti5gQctwSn0AH9VHlAi34n ksmBIJfyatrwNnxi3b0iSWOSZJn5dMYhAOMHqBoPHhDEZFR0B0lfBwpiWa4W55rP liNOUUm/yRqrZZWgbpybWHZWZTu5zDF3Hrhzn1BCx2PDuwNlc1TPdcx+YZWG/O3A Rvh5xchXhCI4RToP9i1EetBz6TJkGkC0HPg/fM4SEGULy2IckQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwV4PJlPAvCznJE9R0xTlnCHUUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvZjNkZjdlZTEtZTg4YS0z MmQwLTlmNDYtNzNkZGVkYzU0NmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGDh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuNItOccRvlVjnnNV4MTOmj/WhcCLMEu2HjhYhg04rqg+VoYqAFOn0j I/pNziPM4NXHAy9sT3JBQ2UcMzPtDQSd3qck068T6rPNqb1qTgugLMHEpsRzg8lI KylLSJkq2pNianJOt50eooKj6+XrGP33rglJTKaybHHHc/ufcxufLkJKTGxXYgla fTqEVRLBQN8nXvLHPlrxWM5GstQzERJPt18GkJr3ez2nmKYa5HfVCbakrKbPder4 wYZdXNw8s7STF4VPaIgUIaqrZI/wuTwMwS/v6R4HOuuwCN8ZQYXEXXhr9y0jHDwA tbH8AQccVp+nhNbDaSPQTYPsjnwrnSg= -----END CERTIFICATE-----Generated at Mon Apr 28 08:25:10 2025 by rpki-client