$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a91da2ff-48f4-3dfb-8de7-8a14d706856b.roa File: a91da2ff-48f4-3dfb-8de7-8a14d706856b.roa (raw, json) Hash identifier: NtOGeGRy50ocPPQ9lJRYUhiEHHLsyyg8hhr4PZEIM8w= Subject key identifier: A9:4D:48:D7:F9:2E:0F:E0:57:C7:07:71:EE:D2:0E:46:93:42:B9:BF Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584902EC0868B75CACF70B76FC40 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a91da2ff-48f4-3dfb-8de7-8a14d706856b.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 11260 IP address blocks: 24.142.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:08:68:b7:5c:ac:f7:0b:76:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=a307fff6-6a5f-404f-aadc-ebbb764cf675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5a:3f:15:43:e8:17:5d:6b:74:83:7a:a3:ba: 4d:2a:e8:f2:b5:30:d7:41:44:ed:1c:5f:7a:23:51: b8:e6:6e:24:62:60:17:eb:ae:67:ba:88:5b:31:3d: f4:03:a1:f1:96:89:25:1a:6d:40:ec:3b:48:81:fe: 5c:1f:34:f0:bd:f4:c7:02:8b:eb:80:cd:be:56:50: 6d:00:40:17:08:59:b0:b0:da:07:2d:b9:b3:87:9d: 3f:b1:ee:d8:58:07:c3:bd:4a:1a:02:ee:13:04:4a: 8c:2d:7f:a4:9f:17:02:34:30:c1:d7:87:d2:17:e3: a6:67:32:be:4d:1e:b9:8f:a4:31:af:2e:b2:a8:fe: 2d:ea:09:4a:09:eb:2e:97:92:36:b7:33:4e:81:af: 0f:11:57:d6:f6:1d:7d:76:62:2d:60:ee:c1:e7:9b: 77:9f:95:22:6b:da:8c:a1:56:96:7b:cd:ef:06:c8: 67:01:a3:04:1a:c7:02:c3:11:96:55:61:e1:95:17: 5f:57:9b:17:96:13:f6:ce:db:15:5d:df:a1:8f:82: ca:21:de:0d:ef:ff:a3:a2:92:55:c9:39:8b:6e:80: f1:7a:dc:4b:6e:d3:e6:ea:3d:3b:7e:ea:c2:f1:62: 70:4f:df:88:a7:bd:13:d6:4a:06:f8:fc:f8:16:0e: 1f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4D:48:D7:F9:2E:0F:E0:57:C7:07:71:EE:D2:0E:46:93:42:B9:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/a91da2ff-48f4-3dfb-8de7-8a14d706856b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 24.142.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3c:c2:fa:c7:f6:63:b0:1d:7b:a9:a1:6f:ae:3f:3f:5e:38: 3e:29:6c:44:04:d0:62:14:a6:9a:ed:7b:ac:14:71:2b:d5:07: b3:db:61:28:9a:66:bd:05:9b:c7:61:97:d0:20:d4:fc:ab:57: f2:92:fc:69:5d:c5:7d:b4:96:e6:89:e8:10:d2:14:69:fd:ab: 41:59:30:f5:53:c2:92:67:d0:a6:42:cb:c9:77:fb:0e:89:63: 0a:ef:17:ac:4d:10:48:c6:4a:f6:be:77:b2:b1:08:73:8b:5e: 96:8e:b8:99:bc:cd:65:40:e2:60:bc:2a:71:37:e5:c8:5f:0c: 39:4a:ee:98:35:b8:54:ae:ac:1e:55:fa:38:7b:59:5f:f1:73: ab:04:00:15:59:1f:7d:fc:1d:ca:8e:be:a5:16:70:d0:76:19: 27:2b:85:98:97:7c:60:6e:f5:30:94:24:a4:eb:97:2e:5b:8c: 3f:0d:5b:1e:2c:38:cc:c0:be:32:8a:b5:7b:33:fd:55:69:1d: de:92:9b:a7:c7:cd:cc:a4:10:b3:93:db:7c:0f:ac:68:65:94: 7d:65:57:03:d8:57:a0:0e:65:0e:54:93:01:96:1c:64:05:83: ba:f8:bc:e3:a0:af:1c:cc:89:4c:9f:22:9f:9c:e6:ed:02:cd: a0:3a:d6:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7Ahot1ys9wt2/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YTMwN2ZmZjYtNmE1Zi00MDRmLWFhZGMtZWJiYjc2NGNmNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlo/FUPoF11rdIN6o7pNKujytTDXQUTtHF96 I1G45m4kYmAX665nuohbMT30A6HxloklGm1A7DtIgf5cHzTwvfTHAovrgM2+VlBt AEAXCFmwsNoHLbmzh50/se7YWAfDvUoaAu4TBEqMLX+knxcCNDDB14fSF+OmZzK+ TR65j6Qxry6yqP4t6glKCesul5I2tzNOga8PEVfW9h19dmItYO7B55t3n5Uia9qM oVaWe83vBshnAaMEGscCwxGWVWHhlRdfV5sXlhP2ztsVXd+hj4LKId4N7/+jopJV yTmLboDxetxLbtPm6j07furC8WJwT9+Ip70T1koG+Pz4Fg4fzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlNSNf5Lg/gV8cHce7SDkaTQrm/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvYTkxZGEyZmYtNDhmNC0z ZGZiLThkZTctOGExNGQ3MDY4NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGI4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE8wvrH9mOwHXupoW+uPz9eOD4pbEQE0GIUpprte6wUcSvVB7PbYSia Zr0Fm8dhl9Ag1PyrV/KS/GldxX20luaJ6BDSFGn9q0FZMPVTwpJn0KZCy8l3+w6J YwrvF6xNEEjGSva+d7KxCHOLXpaOuJm8zWVA4mC8KnE35chfDDlK7pg1uFSurB5V +jh7WV/xc6sEABVZH338HcqOvqUWcNB2GScrhZiXfGBu9TCUJKTrly5bjD8NWx4s OMzAvjKKtXsz/VVpHd6Sm6fHzcykELOT23wPrGhllH1lVwPYV6AOZQ5UkwGWHGQF g7r4vOOgrxzMiUyfIp+c5u0CzaA61uE= -----END CERTIFICATE-----Generated at Mon Apr 28 12:31:30 2025 by rpki-client