$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa File: 24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa (raw, json) Hash identifier: GO8xjH7MZSnsOMZefP5z1f215eahIkv8mzE5LHFXQBM= Subject key identifier: B3:80:67:EB:74:23:9A:E7:68:DA:B5:B7:FE:E6:94:E2:5E:2C:A1:D1 Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285849AA4F6772EF7EAC1B546AAD65 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 16433 IP address blocks: 147.92.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:67:72:ef:7e:ac:1b:54:6a:ad:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=777c5a2e-9309-4921-a56f-0481251dd55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4a:21:76:05:fa:a4:76:af:0c:cc:65:8e:8d: af:c2:cb:0e:81:14:c6:d2:79:79:09:dd:23:bb:be: 4a:4f:bc:80:c2:4e:a7:0b:0c:0f:07:79:4f:1b:fc: 83:8f:49:af:aa:55:50:55:de:d5:70:35:c2:6f:58: a5:a3:5a:96:26:a6:7c:0b:1c:80:02:bb:1e:c9:ce: af:6a:df:4c:55:2f:42:de:63:70:cc:08:75:f6:67: 70:97:d1:c8:72:3d:05:eb:8d:c4:26:65:fa:ec:bf: 99:dc:30:92:66:5c:54:8d:c5:1f:f3:f2:cf:6e:72: 03:77:62:dd:0d:ee:7d:34:f8:0d:e5:62:88:1d:c8: 82:71:9c:59:21:33:23:e8:72:f3:1d:19:0e:5e:cc: 68:cf:58:d6:bb:c5:94:2f:5d:63:9f:41:35:cf:74: 3f:d2:f1:c6:a9:94:b1:5c:aa:d4:e3:5d:e2:2d:de: dc:69:9b:92:19:ba:92:ed:74:37:b3:33:59:fa:49: f8:10:a8:75:db:55:10:9c:e7:b3:5b:e1:10:34:dd: af:65:97:9e:12:d3:6b:b2:62:b3:18:36:53:0a:0d: a2:33:33:8e:68:cf:22:5f:62:2d:3c:6c:5a:07:a6: 84:ac:c5:2d:e0:46:3f:8f:a3:3f:05:6b:48:ca:99: 7b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:80:67:EB:74:23:9A:E7:68:DA:B5:B7:FE:E6:94:E2:5E:2C:A1:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/24c78a7d-3fc4-3ee2-a77f-02d8ffa1901e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 147.92.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:93:b1:a2:72:7d:b9:fc:27:f8:ee:cc:42:67:4f:8c:8c:25: 01:47:0d:93:4e:9b:fc:24:dc:fa:98:80:b0:3d:02:86:97:1e: a2:bf:9a:4f:f2:28:d6:a7:3d:06:cf:9b:96:92:fd:32:32:3e: 3c:85:07:bd:e6:72:9b:65:52:40:41:2c:5d:e8:53:3b:07:0b: c0:46:e2:34:b6:b5:38:23:60:f5:f2:c2:7e:6b:ac:36:31:51: 5c:b8:5c:89:f9:f4:ff:29:e2:bd:14:84:81:9e:70:d8:4c:6b: 23:e1:78:46:31:2f:af:83:06:01:ed:5b:3d:d5:bc:bd:13:bf: eb:65:59:99:21:63:2b:49:34:2e:45:c0:66:75:ed:93:2c:5f: ea:b7:d4:9e:49:e2:87:6b:30:58:8d:cb:21:ff:e0:1b:c8:d4: 68:b8:34:f9:00:4e:9e:1f:8a:f0:eb:60:3d:d7:e9:8e:6f:6a: e2:ed:e1:9c:a7:4a:21:c0:ca:45:13:39:fd:f6:8d:5c:af:39: 00:ff:eb:88:ec:93:2a:6e:1c:7d:d9:4e:8b:eb:c9:c3:63:16: 38:b3:77:5a:9c:63:32:18:7d:8c:3d:be:2f:39:3f:10:7c:8b: fc:a9:d1:95:2a:d1:dd:67:63:a7:bd:13:ef:3a:70:0b:fa:34: ef:1a:4a:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2dy736sG1RqrWUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk Nzc3YzVhMmUtOTMwOS00OTIxLWE1NmYtMDQ4MTI1MWRkNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokohdgX6pHavDMxljo2vwssOgRTG0nl5Cd0j u75KT7yAwk6nCwwPB3lPG/yDj0mvqlVQVd7VcDXCb1ilo1qWJqZ8CxyAArseyc6v at9MVS9C3mNwzAh19mdwl9HIcj0F643EJmX67L+Z3DCSZlxUjcUf8/LPbnIDd2Ld De59NPgN5WKIHciCcZxZITMj6HLzHRkOXsxoz1jWu8WUL11jn0E1z3Q/0vHGqZSx XKrU413iLd7caZuSGbqS7XQ3szNZ+kn4EKh121UQnOezW+EQNN2vZZeeEtNrsmKz GDZTCg2iMzOOaM8iX2ItPGxaB6aErMUt4EY/j6M/BWtIypl7GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOAZ+t0I5rnaNq1t/7mlOJeLKHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvMjRjNzhhN2QtM2ZjNC0z ZWUyLWE3N2YtMDJkOGZmYTE5MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEk1wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6TsaJyfbn8J/juzEJnT4yMJQFHDZNOm/wk3PqYgLA9AoaXHqK/mk/y KNanPQbPm5aS/TIyPjyFB73mcptlUkBBLF3oUzsHC8BG4jS2tTgjYPXywn5rrDYx UVy4XIn59P8p4r0UhIGecNhMayPheEYxL6+DBgHtWz3VvL0Tv+tlWZkhYytJNC5F wGZ17ZMsX+q31J5J4odrMFiNyyH/4BvI1Gi4NPkATp4fivDrYD3X6Y5vauLt4Zyn SiHAykUTOf32jVyvOQD/64jskypuHH3ZTovrycNjFjizd1qcYzIYfYw9vi85PxB8 i/yp0ZUq0d1nY6e9E+86cAv6NO8aSlY= -----END CERTIFICATE-----Generated at Mon Apr 28 22:49:52 2025 by rpki-client