$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cafbd8e9-6301-30ef-92ad-1ac0e1d5eb72.roa File: cafbd8e9-6301-30ef-92ad-1ac0e1d5eb72.roa (raw, json) Hash identifier: f+EvqlqhFN3iteodEKheJACOr6JNpl82bE1Qw4cRPPY= Subject key identifier: 3F:03:D2:5D:36:AC:82:91:15:DB:8C:CA:2A:DA:22:66:11:BC:64:EC Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F43285849F17FC6E774EBADAD34F9A380 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cafbd8e9-6301-30ef-92ad-1ac0e1d5eb72.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 30104 IP address blocks: 24.38.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:c6:e7:74:eb:ad:ad:34:f9:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=a230d4bc-0ffd-4af1-be4a-d86e65d8800c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:14:79:3b:5d:35:cf:84:96:42:a3:53:27:f6: 4c:12:e4:97:bd:ab:a8:e4:b8:3c:6b:0f:17:b4:cd: 86:1f:b6:1e:1b:51:e6:bc:79:67:f2:f9:c3:24:ac: 56:d4:41:b4:e0:4e:76:c9:bb:7a:81:e1:cb:4c:a6: fb:2c:22:eb:03:bd:da:43:0e:ee:55:d8:09:f6:b5: 69:10:4b:fe:fa:bb:95:0b:ef:ea:cd:3b:12:a0:20: 8d:ef:a6:93:ff:65:b3:e3:e6:cb:43:a1:2f:d3:a0: 38:51:09:17:b7:13:4f:74:b1:0b:37:ea:05:e1:f7: 1b:f5:d9:1c:8b:86:c7:95:39:59:55:82:1c:57:4b: 49:09:3d:f9:de:4b:5b:e0:12:90:46:e8:3b:9d:09: 25:7e:d5:a2:50:e0:85:1f:71:bb:5f:a1:8f:34:a2: a8:a3:4d:ce:c7:db:10:3d:c8:80:2a:64:f2:18:3a: 28:22:f4:19:db:bb:dd:88:75:ff:75:2f:05:a7:86: e5:97:db:77:20:7e:a3:5e:1d:89:b5:07:5e:ab:26: fc:a3:d4:85:ae:c3:5f:52:0a:78:f6:f4:8f:77:57: 2b:56:42:50:84:52:0b:8f:7b:75:4d:ab:fc:c1:ca: 7c:bd:4b:ac:f6:6a:ac:cc:b0:4f:fe:f5:d2:d8:f0: 7c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:03:D2:5D:36:AC:82:91:15:DB:8C:CA:2A:DA:22:66:11:BC:64:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/cafbd8e9-6301-30ef-92ad-1ac0e1d5eb72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 24.38.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e5:90:2a:7c:eb:c3:eb:1a:28:05:05:4e:32:7c:7e:4f:cf: 48:c2:dc:db:96:ab:08:9b:27:66:b7:db:72:c6:9b:61:f8:1c: 97:98:dc:24:60:58:88:39:bc:8b:ae:47:84:94:be:a9:a9:64: 5c:20:63:67:69:5b:6c:5f:96:c0:91:fd:9f:39:af:4e:25:59: 8d:c3:7b:b3:a0:5d:b3:09:fd:b7:c4:62:54:d5:fb:e8:a0:64: 33:b1:db:c9:b1:c7:57:a8:cf:b1:f6:9e:88:ac:fa:ab:39:22: dc:1c:b9:2f:76:f0:fc:10:ed:15:1f:4b:51:41:dc:79:25:98: 99:b6:f3:1f:31:6b:28:e8:64:2e:ea:62:ce:54:b5:54:18:ca: d8:56:20:09:74:03:99:1e:71:2f:f9:cf:92:cf:e4:4a:1f:f3: 52:85:34:ad:43:d3:22:6b:86:dc:3f:b2:80:1b:5c:64:d1:4b: bb:02:b9:7c:2b:2d:33:bc:ea:c3:dc:f7:1c:30:29:51:48:0f: 83:28:fe:a9:93:19:92:eb:10:21:8a:9c:94:8a:74:6e:05:74: a8:2b:3b:fe:58:47:5f:5a:30:4b:87:eb:8f:68:f5:8c:30:1b: 55:4c:33:32:ea:25:00:9b:8b:97:93:50:f4:f1:07:33:73:47: ca:2f:8d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8bndOutrTT5o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk YTIzMGQ0YmMtMGZmZC00YWYxLWJlNGEtZDg2ZTY1ZDg4MDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhR5O101z4SWQqNTJ/ZMEuSXvauo5Lg8aw8X tM2GH7YeG1HmvHln8vnDJKxW1EG04E52ybt6geHLTKb7LCLrA73aQw7uVdgJ9rVp EEv++ruVC+/qzTsSoCCN76aT/2Wz4+bLQ6Ev06A4UQkXtxNPdLELN+oF4fcb9dkc i4bHlTlZVYIcV0tJCT353ktb4BKQRug7nQklftWiUOCFH3G7X6GPNKKoo03Ox9sQ PciAKmTyGDooIvQZ27vdiHX/dS8Fp4bll9t3IH6jXh2JtQdeqyb8o9SFrsNfUgp4 9vSPd1crVkJQhFILj3t1Tav8wcp8vUus9mqszLBP/vXS2PB8NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8D0l02rIKRFduMyiraImYRvGTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvY2FmYmQ4ZTktNjMwMS0z MGVmLTkyYWQtMWFjMGUxZDVlYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGCZaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnlkCp868PrGigFBU4yfH5Pz0jC3NuWqwibJ2a323LGm2H4HJeY3CRg WIg5vIuuR4SUvqmpZFwgY2dpW2xflsCR/Z85r04lWY3De7OgXbMJ/bfEYlTV++ig ZDOx28mxx1eoz7H2nois+qs5ItwcuS928PwQ7RUfS1FB3HklmJm28x8xayjoZC7q Ys5UtVQYythWIAl0A5kecS/5z5LP5Eof81KFNK1D0yJrhtw/soAbXGTRS7sCuXwr LTO86sPc9xwwKVFID4Mo/qmTGZLrECGKnJSKdG4FdKgrO/5YR19aMEuH649o9Yww G1VMMzLqJQCbi5eTUPTxBzNzR8ovjds= -----END CERTIFICATE-----Generated at Sun Jun 15 05:01:43 2025 by rpki-client