$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa File: c1af7f83-54d1-3637-b23a-1fac1823fd70.roa (raw, json) Hash identifier: X0x2amaEB+ivvRj73AmqfvQ0xN1vWPTaQNTKEPiVEuQ= Subject key identifier: 42:06:AC:EE:0D:82:4F:74:97:DF:17:68:E2:CE:5B:FF:CB:19:08:C3 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F43285848A6DCA4F130CEA5DAB2DAD240 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa Signing time: Fri 24 Jan 2025 14:35:39 +0000 ROA not before: Fri 24 Jan 2025 14:35:39 +0000 ROA not after: Thu 24 Apr 2025 13:35:39 +0000 asID: 21949 IP address blocks: 65.97.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a6:dc:a4:f1:30:ce:a5:da:b2:da:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Jan 24 14:35:39 2025 GMT Not After : Apr 24 13:35:39 2025 GMT Subject: CN=805b9e87-7efc-41d1-b4b1-22be91b7ca15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3e:95:c9:a6:cc:1d:a1:12:22:7e:dd:bb:cf: c9:a7:68:58:15:79:8b:09:52:5f:89:d2:79:f8:1e: d8:85:c8:1c:5d:93:56:55:e1:67:70:2d:45:82:1f: 4e:d5:22:b7:81:e5:3e:21:05:68:af:46:f4:40:59: ab:ed:29:6e:fe:cc:db:6a:02:31:b4:7a:ec:6f:95: fb:21:3f:37:ec:1c:57:d3:5c:3e:76:46:5c:9b:af: 15:d4:cd:d4:5f:97:33:e5:11:2b:bf:75:0f:d5:0c: 97:40:3a:bf:e4:c9:94:2e:d2:6b:28:fa:52:9e:83: dc:be:5a:84:50:21:0e:dd:b3:74:51:cb:c9:9f:38: 41:4c:48:b8:61:6c:c1:33:25:85:2c:93:34:3d:e7: cf:19:17:92:a8:4f:5a:1b:5d:8a:51:d1:1b:45:ef: 4a:2c:7f:0c:94:eb:3a:30:26:8f:47:66:6d:31:6f: 3e:a5:15:21:b0:50:af:3e:f9:f7:5d:88:48:36:38: 1b:0a:27:a7:46:8c:84:aa:19:44:14:6d:0f:37:c3: 09:48:ed:44:49:27:ba:ea:fd:52:c8:84:e4:35:71: af:95:87:be:37:4e:f7:ab:64:96:6c:e4:58:59:49: 3c:d4:03:e1:53:95:da:aa:07:f3:46:3b:85:a8:60: 96:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:06:AC:EE:0D:82:4F:74:97:DF:17:68:E2:CE:5B:FF:CB:19:08:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/c1af7f83-54d1-3637-b23a-1fac1823fd70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 65.97.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:68:63:39:b0:9e:4e:e2:20:fc:d6:9c:77:f5:6b:5a:09:71: 42:5e:34:f4:d4:8a:e4:0d:00:06:32:d3:a8:73:6d:9b:2a:5b: 0a:22:26:ea:5e:76:32:2d:3a:40:3c:dd:c6:ad:46:36:b0:14: 54:33:e6:d6:a7:a8:92:7c:5a:cd:46:05:2f:b0:49:da:d6:8a: 4f:e0:9a:d8:2f:81:cd:bb:61:76:3b:d0:7b:46:9e:b0:51:38: 25:fb:97:a1:c2:4d:9e:5e:de:1b:da:03:34:30:44:35:eb:f3: 6e:ad:ee:92:9a:c9:97:ad:14:fa:b2:55:19:02:c4:30:54:3e: 0f:4c:e7:0f:d1:3b:4e:72:a7:9a:d9:34:36:d0:1d:21:94:4f: 36:d8:ce:a1:e3:6d:5f:22:e0:47:23:4d:fe:1e:53:7f:27:bd: 03:2f:ff:88:c1:3d:d0:07:0c:49:35:02:93:65:20:ad:70:b6: 38:9d:48:09:00:42:84:c9:e6:64:8c:7b:a8:27:73:6a:ea:9c: 4a:85:fc:0a:1f:0b:ad:05:33:f9:98:33:93:10:0d:8c:7c:31: 99:9f:3a:65:61:0c:71:3f:3e:48:fb:d8:0e:83:28:cc:4f:1d: a3:1d:1c:7f:9f:46:2b:bb:91:18:b6:c3:e6:d9:7f:c5:4e:2f: 0e:89:39:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEim3KTxMM6l2rLa0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDEyNDE0MzUzOVoXDTI1MDQyNDEzMzUzOVowLzEtMCsGA1UEAxMk ODA1YjllODctN2VmYy00MWQxLWI0YjEtMjJiZTkxYjdjYTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT6VyabMHaESIn7du8/Jp2hYFXmLCVJfidJ5 +B7YhcgcXZNWVeFncC1Fgh9O1SK3geU+IQVor0b0QFmr7Slu/szbagIxtHrsb5X7 IT837BxX01w+dkZcm68V1M3UX5cz5RErv3UP1QyXQDq/5MmULtJrKPpSnoPcvlqE UCEO3bN0UcvJnzhBTEi4YWzBMyWFLJM0PefPGReSqE9aG12KUdEbRe9KLH8MlOs6 MCaPR2ZtMW8+pRUhsFCvPvn3XYhINjgbCienRoyEqhlEFG0PN8MJSO1ESSe66v1S yITkNXGvlYe+N073q2SWbORYWUk81APhU5XaqgfzRjuFqGCWBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIGrO4Ngk90l98XaOLOW//LGQjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYzFhZjdmODMtNTRkMS0z NjM3LWIyM2EtMWZhYzE4MjNmZDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQWEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBoYzmwnk7iIPzWnHf1a1oJcUJeNPTUiuQNAAYy06hzbZsqWwoiJupe djItOkA83catRjawFFQz5tanqJJ8Ws1GBS+wSdrWik/gmtgvgc27YXY70HtGnrBR OCX7l6HCTZ5e3hvaAzQwRDXr826t7pKayZetFPqyVRkCxDBUPg9M5w/RO05yp5rZ NDbQHSGUTzbYzqHjbV8i4EcjTf4eU38nvQMv/4jBPdAHDEk1ApNlIK1wtjidSAkA QoTJ5mSMe6gnc2rqnEqF/AofC60FM/mYM5MQDYx8MZmfOmVhDHE/Pkj72A6DKMxP HaMdHH+fRiu7kRi2w+bZf8VOLw6JOZM= -----END CERTIFICATE-----Generated at Tue Apr 8 10:12:46 2025 by rpki-client