$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/a8c8fef7-555d-38a4-bee2-8c67532cf18d.roa File: a8c8fef7-555d-38a4-bee2-8c67532cf18d.roa (raw, json) Hash identifier: k4WjqIOpCOSfdjR+kXGmsoffmVoN+t6CKjWQNoT8CbM= Subject key identifier: EF:5A:1B:9F:2C:D5:55:68:6C:B1:D2:EA:6D:4E:B2:10:92:B2:74:F4 Certificate issuer: /CN=90084646-f74e-42c1-9557-3764d36b8bb6 Certificate serial: 010D0C9F4328584905B6A74D8E62305E3208E580 Authority key identifier: 31:62:95:A9:A8:FD:F7:CA:B2:C2:89:BC:47:64:7D:FC:1E:A0:7D:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/a8c8fef7-555d-38a4-bee2-8c67532cf18d.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 396238 IP address blocks: 172.82.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:a7:4d:8e:62:30:5e:32:08:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90084646-f74e-42c1-9557-3764d36b8bb6 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=359d477c-0f7f-422c-951c-b55c9e91c8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:3a:91:0c:8e:96:75:dc:5b:18:c4:48:7c: ff:70:c4:eb:a9:7a:a8:e2:98:93:69:a4:c6:86:43: 36:7f:3f:f9:cc:e4:5a:62:60:eb:d6:96:4f:05:30: 2e:17:96:3e:44:d5:a5:ad:e3:c5:46:e6:82:7e:86: ec:3c:a5:1b:b5:50:8a:41:6a:c7:23:89:b2:29:3c: 8a:8c:cc:be:ab:0b:b1:0b:c3:be:70:a3:97:de:d6: d7:e4:21:45:d5:d7:fb:11:62:ef:1a:eb:90:c4:bc: 62:d0:b9:e8:f0:4e:ee:33:80:41:ed:6a:8a:83:51: 7c:ba:ad:b9:cd:e5:9b:ca:b0:92:61:bf:1a:24:1b: fb:71:43:ba:2f:0e:1a:ce:f0:35:02:ee:b8:61:bf: 2a:b0:2a:fd:83:dd:3a:2d:c2:eb:11:71:81:41:79: 33:14:d5:83:5c:28:14:02:db:8b:dc:be:05:0b:10: 8d:b0:02:87:88:8f:f8:43:06:b1:36:a4:2c:29:11: 19:99:d0:20:66:42:0c:59:83:c3:59:52:6f:36:aa: 32:c6:69:dc:29:a9:18:2e:da:62:26:f0:78:97:57: 92:8a:35:b9:2b:73:59:40:fc:45:49:86:05:ef:9a: 16:58:92:94:c5:e8:13:c5:7d:14:e5:bb:c4:64:2b: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5A:1B:9F:2C:D5:55:68:6C:B1:D2:EA:6D:4E:B2:10:92:B2:74:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/a8c8fef7-555d-38a4-bee2-8c67532cf18d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.crl X509v3 Authority Key Identifier: keyid:31:62:95:A9:A8:FD:F7:CA:B2:C2:89:BC:47:64:7D:FC:1E:A0:7D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer sbgp-ipAddrBlock: critical IPv4: 172.82.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:77:28:c9:ed:77:6f:54:4f:fe:e4:02:22:bc:3e:69:88:62: ae:0f:94:e0:42:78:cb:dd:d7:38:9f:ed:39:fb:d2:b8:ed:4e: eb:07:f1:d8:60:b2:6a:56:a2:dd:ee:ef:92:c5:84:9a:f9:f5: 22:89:38:9f:55:32:b7:b1:3b:7b:04:6a:97:5c:45:ae:eb:8e: b4:7f:e4:75:95:c7:09:41:6c:3e:37:48:44:63:78:24:eb:b7: b1:41:d5:49:7c:8e:5f:5f:f4:fb:0c:b8:62:3d:6d:0f:64:f5: ca:4c:be:c2:ca:f9:36:61:7c:ff:b4:f6:8b:bc:d6:67:7b:98: 84:07:4e:61:04:07:db:a4:32:4c:c2:09:07:ee:b0:9b:1b:1d: 7b:b3:81:9f:4e:97:76:fc:5f:43:84:d7:13:f4:d1:04:7c:4e: 53:06:c8:f3:72:ca:68:31:ef:ed:a6:99:12:2d:84:c8:0c:76: 66:db:20:42:9e:a0:11:71:e3:1f:c6:1d:93:0e:2e:5e:ef:18: ed:12:e5:63:82:68:95:6f:61:2a:6f:02:1f:d6:63:c7:dd:1c: 32:37:29:41:8b:d2:0b:03:ed:7c:c0:ae:92:7c:9f:54:b1:f6: a7:32:02:7a:1e:b3:f5:4d:39:83:b9:b6:47:a7:ff:89:8e:15: de:69:13:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtqdNjmIwXjII5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwODQ2NDYtZjc0ZS00MmMxLTk1NTctMzc2NGQzNmI4 YmI2MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MzU5ZDQ3N2MtMGY3Zi00MjJjLTk1MWMtYjU1YzllOTFjOGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwko6kQyOlnXcWxjESHz/cMTrqXqo4piTaaTG hkM2fz/5zORaYmDr1pZPBTAuF5Y+RNWlrePFRuaCfobsPKUbtVCKQWrHI4myKTyK jMy+qwuxC8O+cKOX3tbX5CFF1df7EWLvGuuQxLxi0Lno8E7uM4BB7WqKg1F8uq25 zeWbyrCSYb8aJBv7cUO6Lw4azvA1Au64Yb8qsCr9g906LcLrEXGBQXkzFNWDXCgU AtuL3L4FCxCNsAKHiI/4QwaxNqQsKREZmdAgZkIMWYPDWVJvNqoyxmncKakYLtpi JvB4l1eSijW5K3NZQPxFSYYF75oWWJKUxegTxX0U5bvEZCtTqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9aG58s1VVobLHS6m1OshCSsnT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85MDA4 NDY0Ni1mNzRlLTQyYzEtOTU1Ny0zNzY0ZDM2YjhiYjYvYThjOGZlZjctNTU1ZC0z OGE0LWJlZTItOGM2NzUzMmNmMThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTAwODQ2NDYtZjc0ZS00MmMxLTk1 NTctMzc2NGQzNmI4YmI2LzkwMDg0NjQ2LWY3NGUtNDJjMS05NTU3LTM3NjRkMzZi OGJiNi5jcmwwHwYDVR0jBBgwFoAUMWKVqaj998qywom8R2R9/B6gfZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85MDA4NDY0Ni1mNzRlLTQyYzEtOTU1Ny0zNzY0 ZDM2YjhiYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK13KMntd29UT/7kAiK8PmmIYq4PlOBCeMvd1zif7Tn70rjtTusH8dhg smpWot3u75LFhJr59SKJOJ9VMrexO3sEapdcRa7rjrR/5HWVxwlBbD43SERjeCTr t7FB1Ul8jl9f9PsMuGI9bQ9k9cpMvsLK+TZhfP+09ou81md7mIQHTmEEB9ukMkzC CQfusJsbHXuzgZ9Ol3b8X0OE1xP00QR8TlMGyPNyymgx7+2mmRIthMgMdmbbIEKe oBFx4x/GHZMOLl7vGO0S5WOCaJVvYSpvAh/WY8fdHDI3KUGL0gsD7XzArpJ8n1Sx 9qcyAnoes/VNOYO5tken/4mOFd5pE8o= -----END CERTIFICATE-----Generated at Tue Apr 29 01:41:55 2025 by rpki-client