$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0a70de16-2bea-3890-b0cf-c8b1e69344cc.roa File: 0a70de16-2bea-3890-b0cf-c8b1e69344cc.roa (raw, json) Hash identifier: pB8BCnIW+fdbyrRQNyw1rspcWrkC5Ur2QZ9qm6o0wVs= Subject key identifier: 94:22:3B:17:E0:E9:77:FD:E9:B3:79:C3:9B:6D:AF:F8:24:0E:C1:FB Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584902EC097CA82B7B9E0A90C940 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0a70de16-2bea-3890-b0cf-c8b1e69344cc.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 11260 IP address blocks: 24.222.0.0/24 maxlen: 24 71.7.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:09:7c:a8:2b:7b:9e:0a:90:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=ae109140-af12-4c48-b978-7e45189d8277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:10:c9:90:9c:86:ae:c6:5d:1e:8f:fa:f9:ed: 03:72:b0:cc:ce:cc:73:9c:2e:62:70:b5:97:12:da: 3c:61:9e:45:a0:2f:a4:f1:84:de:c6:c1:13:d4:00: 0f:d3:c1:01:55:4c:c1:18:36:40:17:f8:f5:3c:ec: 9c:22:73:9b:39:ee:a0:88:7c:90:e2:48:c8:f0:ee: cb:42:aa:4d:a9:6e:ef:1f:bd:57:c4:cd:81:a5:c7: 1e:5c:4b:ca:48:22:37:eb:bb:ad:eb:74:4f:75:e4: fd:e8:bf:6a:70:ba:fc:8b:83:d6:65:20:9d:41:68: 96:40:c7:1c:1a:11:0b:00:95:ca:74:b6:b8:67:1b: 1d:fb:db:0e:47:ed:37:c5:ba:17:c4:3a:3b:69:2a: 41:e3:4a:cd:4b:52:be:f8:57:8f:f1:b2:a1:e0:f6: 71:0c:51:58:02:d6:6f:3b:c8:c7:fa:78:9c:cf:8d: 1b:ed:52:25:dd:aa:d1:ff:89:25:e3:26:cc:6a:16: c0:9b:54:10:1b:0c:9e:85:78:8b:db:ec:2e:99:ff: 92:e1:b3:6c:1e:c6:c4:70:4e:19:25:dd:55:06:14: 7f:22:d3:24:e7:f0:c5:72:bb:47:bd:4f:d7:2b:0e: 1e:00:c4:93:d7:9e:47:1a:c3:10:de:fb:42:57:c0: e4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:22:3B:17:E0:E9:77:FD:E9:B3:79:C3:9B:6D:AF:F8:24:0E:C1:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0a70de16-2bea-3890-b0cf-c8b1e69344cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 24.222.0.0/24 71.7.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:52:39:59:4e:d5:d3:33:e2:f5:b4:a2:5c:2d:03:5c:02:d5: 6f:3b:99:26:86:cd:56:98:27:ab:e7:dc:87:f3:c0:ba:e0:cf: 52:8e:b9:fb:40:10:45:b3:1e:22:76:da:dc:e7:eb:36:ea:91: bd:d5:54:21:16:aa:2d:64:7a:fd:0b:71:4c:80:14:c0:d7:90: b7:cf:ae:df:9f:70:67:3e:70:9a:55:da:42:80:1c:38:c5:5b: 1a:9f:80:7c:47:4f:df:1b:f7:0b:ef:aa:0e:40:df:4a:7a:2e: 77:c4:20:16:01:c0:6c:46:af:b1:47:1b:23:f0:f7:39:80:c4: 50:11:49:87:f8:a8:d0:5e:e0:61:f8:e2:ae:54:e2:24:e0:54: 75:e7:d9:df:96:8e:58:5d:61:80:ba:e8:20:61:07:0d:6f:84: f8:5e:99:5e:22:1e:c1:d4:ba:72:24:97:4a:f4:7b:81:9d:b7: 77:04:33:ce:27:56:69:34:36:05:48:44:4f:eb:e7:53:f0:f3: 09:ec:98:fa:35:30:26:81:e0:c0:29:29:15:d0:f0:aa:e3:df: 4b:ae:5a:b1:d9:5d:9e:78:c2:4f:6a:b5:64:ad:c0:2d:78:3d: 7c:b8:89:f6:6a:7b:60:27:6b:49:1b:d6:df:fe:24:9e:b5:dd: 32:c0:bc:5c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkC7Al8qCt7ngqQyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YWUxMDkxNDAtYWYxMi00YzQ4LWI5NzgtN2U0NTE4OWQ4Mjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRDJkJyGrsZdHo/6+e0DcrDMzsxznC5icLWX Eto8YZ5FoC+k8YTexsET1AAP08EBVUzBGDZAF/j1POycInObOe6giHyQ4kjI8O7L QqpNqW7vH71XxM2BpcceXEvKSCI367ut63RPdeT96L9qcLr8i4PWZSCdQWiWQMcc GhELAJXKdLa4Zxsd+9sOR+03xboXxDo7aSpB40rNS1K++FeP8bKh4PZxDFFYAtZv O8jH+nicz40b7VIl3arR/4kl4ybMahbAm1QQGwyehXiL2+wumf+S4bNsHsbEcE4Z Jd1VBhR/ItMk5/DFcrtHvU/XKw4eAMST155HGsMQ3vtCV8DkkwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJQiOxfg6Xf96bN5w5ttr/gkDsH7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvMGE3MGRlMTYtMmJlYS0z ODkwLWIwY2YtYzhiMWU2OTM0NGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAGN4AAwQA RwfHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFRSOVlO1dMz4vW0olwtA1wC1W87mSaGzVaYJ6vn3IfzwLrg z1KOuftAEEWzHiJ22tzn6zbqkb3VVCEWqi1kev0LcUyAFMDXkLfPrt+fcGc+cJpV 2kKAHDjFWxqfgHxHT98b9wvvqg5A30p6LnfEIBYBwGxGr7FHGyPw9zmAxFARSYf4 qNBe4GH44q5U4iTgVHXn2d+WjlhdYYC66CBhBw1vhPhemV4iHsHUunIkl0r0e4Gd t3cEM84nVmk0NgVIRE/r51Pw8wnsmPo1MCaB4MApKRXQ8Krj30uuWrHZXZ54wk9q tWStwC14PXy4ifZqe2Ana0kb1t/+JJ613TLAvFw= -----END CERTIFICATE-----Generated at Mon Apr 28 10:42:32 2025 by rpki-client