$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/292446a7-2bf4-39f3-a885-2ea704ebe586.roa File: 292446a7-2bf4-39f3-a885-2ea704ebe586.roa (raw, json) Hash identifier: N9vkS0LvOmiToJ+DriMh3LkkGAvrMrT2ezS/e+PmXao= Subject key identifier: 0A:48:E5:42:C7:0A:90:09:6C:81:E3:98:A3:89:B9:6E:11:06:71:24 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F43285849AD1A02A3A880BB5E2E0DED80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/292446a7-2bf4-39f3-a885-2ea704ebe586.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 22759 IP address blocks: 24.113.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:02:a3:a8:80:bb:5e:2e:0d:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=0aab444f-6c12-4451-b065-c0ed1e3cd83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:04:ac:2c:fa:15:ac:e3:c2:1e:7e:3c:b7: b8:26:16:ef:95:ec:bb:6e:99:a8:b4:a1:5d:b5:4e: 99:42:db:f2:26:0b:fb:15:b5:e4:df:9f:e3:c8:1c: c4:2b:c8:73:2c:26:80:d7:c1:32:22:f1:d8:42:3e: e7:e6:84:74:ac:50:1e:46:40:df:90:2f:cf:2c:0f: b7:ee:50:21:9a:86:53:5b:2f:6b:f4:20:75:ac:b7: 3b:bd:69:7d:5d:ca:1d:a9:37:54:5d:b1:7e:19:1d: 69:3e:03:9c:39:35:8f:f4:7a:12:ac:b2:6e:ef:ab: dd:10:8a:80:a4:da:34:a6:2a:bf:e9:b8:b3:51:b8: 1f:20:70:cc:e8:3e:30:f9:9e:ee:39:18:fe:8b:14: 1c:14:ba:f2:eb:35:f0:24:ac:81:4e:e3:6a:7e:95: f8:ab:28:21:eb:34:9e:49:21:61:f5:13:04:00:64: 90:92:d3:03:1f:88:cf:17:c5:9d:ff:6a:d2:2e:5e: ad:eb:46:f8:65:ea:48:4d:80:e3:29:be:17:65:b3: 8c:d3:09:ab:34:d1:f3:ab:ec:e0:b8:a4:a5:25:ff: cc:ae:ea:ca:08:7b:ad:2e:78:8e:e2:72:1e:69:4f: 4e:b1:a2:36:d2:58:7e:50:b2:25:37:1b:63:88:bd: 72:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:48:E5:42:C7:0A:90:09:6C:81:E3:98:A3:89:B9:6E:11:06:71:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/292446a7-2bf4-39f3-a885-2ea704ebe586.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 24.113.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c4:6a:af:03:c5:f8:15:6c:8a:dd:4f:e6:18:32:2c:4a:78: a6:1a:29:fd:4d:49:72:0f:9a:6d:64:1d:3f:fb:23:b2:a9:ea: 0a:65:df:24:6d:dc:e9:1f:b5:ce:86:a1:03:4a:be:27:25:dd: 07:46:f1:81:ec:e4:0e:38:59:5e:25:cf:fd:20:ef:d7:97:ec: d6:2c:13:49:46:49:41:7c:d5:b2:60:80:f5:bf:b8:3b:6b:db: 47:dd:23:51:4d:9a:15:db:ee:e4:21:05:74:06:5d:ca:5c:5b: 52:9f:5e:92:12:d0:fe:52:72:55:ca:13:f5:f3:fa:8a:92:0c: 08:20:e4:6a:c9:d2:32:c2:0f:e4:e3:1d:28:b4:26:2f:ac:85: 19:6b:8b:91:3c:22:c0:46:21:2b:69:d9:29:a8:34:f4:09:1e: 3c:38:49:b2:ac:52:9b:ef:0d:7a:2d:d7:b7:4f:b0:3f:d1:49: 75:b9:ba:ff:61:29:a7:25:2d:13:d4:ca:59:97:3c:33:c4:72: f0:04:c1:2e:5a:92:6b:7f:ba:58:29:19:61:ff:a4:f6:8e:6a: a8:66:2d:f1:af:4a:13:a2:d7:fc:2f:5d:e3:7c:8d:56:b4:60: b8:cf:1d:a6:5e:8e:52:45:8b:1c:c5:96:b2:96:2b:cf:a5:5c: 9d:d9:12:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgKjqIC7Xi4N7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MGFhYjQ0NGYtNmMxMi00NDUxLWIwNjUtYzBlZDFlM2NkODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiEErCz6Fazjwh5+PLe4Jhbvley7bpmotKFd tU6ZQtvyJgv7FbXk35/jyBzEK8hzLCaA18EyIvHYQj7n5oR0rFAeRkDfkC/PLA+3 7lAhmoZTWy9r9CB1rLc7vWl9XcodqTdUXbF+GR1pPgOcOTWP9HoSrLJu76vdEIqA pNo0piq/6bizUbgfIHDM6D4w+Z7uORj+ixQcFLry6zXwJKyBTuNqfpX4qygh6zSe SSFh9RMEAGSQktMDH4jPF8Wd/2rSLl6t60b4ZepITYDjKb4XZbOM0wmrNNHzq+zg uKSlJf/MrurKCHutLniO4nIeaU9OsaI20lh+ULIlNxtjiL1ycwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApI5ULHCpAJbIHjmKOJuW4RBnEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMjkyNDQ2YTctMmJmNC0z OWYzLWE4ODUtMmVhNzA0ZWJlNTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGHG/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfEaq8DxfgVbIrdT+YYMixKeKYaKf1NSXIPmm1kHT/7I7Kp6gpl3yRt 3Okftc6GoQNKvicl3QdG8YHs5A44WV4lz/0g79eX7NYsE0lGSUF81bJggPW/uDtr 20fdI1FNmhXb7uQhBXQGXcpcW1KfXpIS0P5SclXKE/Xz+oqSDAgg5GrJ0jLCD+Tj HSi0Ji+shRlri5E8IsBGIStp2SmoNPQJHjw4SbKsUpvvDXot17dPsD/RSXW5uv9h KaclLRPUylmXPDPEcvAEwS5akmt/ulgpGWH/pPaOaqhmLfGvShOi1/wvXeN8jVa0 YLjPHaZejlJFixzFlrKWK8+lXJ3ZEtI= -----END CERTIFICATE-----Generated at Tue Apr 29 09:25:21 2025 by rpki-client