$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/30f1d9a5-d454-37a0-8ed7-fe7da94968f7.roa File: 30f1d9a5-d454-37a0-8ed7-fe7da94968f7.roa (raw, json) Hash identifier: wrsEnmAyRQbDzv5HuoKdB+BWGlyIG1j1i4lS723JaRY= Subject key identifier: 7A:56:FA:83:67:BE:72:74:16:82:6A:0F:06:4D:39:24:09:B9:BA:84 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F43285848854B458ADD275E683DC06660 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/30f1d9a5-d454-37a0-8ed7-fe7da94968f7.roa Signing time: Sun 12 Jan 2025 14:00:53 +0000 ROA not before: Sun 12 Jan 2025 14:00:53 +0000 ROA not after: Sat 12 Apr 2025 13:00:53 +0000 asID: 5769 IP address blocks: 24.48.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:85:4b:45:8a:dd:27:5e:68:3d:c0:66:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Jan 12 14:00:53 2025 GMT Not After : Apr 12 13:00:53 2025 GMT Subject: CN=2e055ec3-bf2a-4762-a8a7-032893b0a1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:ff:b3:f0:0b:5f:9a:d2:89:8f:a2:d2:31: 4d:22:8e:6a:5d:b8:08:f4:67:1c:90:cc:ab:9a:2f: 48:76:23:cc:e4:99:5f:aa:d2:62:d2:68:8a:90:91: e0:06:71:e8:60:4b:ff:83:5b:c5:da:95:c6:d0:d7: 8e:3b:f8:69:ee:9c:80:88:e5:4f:73:31:42:72:5f: 11:db:60:11:e5:3d:63:89:c5:f0:ae:56:81:21:33: 0b:1f:30:8f:36:a5:db:11:32:33:48:b5:76:28:e6: 31:b7:f3:1f:c8:38:d6:83:ac:9d:a6:8c:28:60:5b: ef:6d:75:29:61:d2:5a:54:67:cb:82:b5:8e:52:e3: 57:fb:55:b2:fa:f2:07:4c:63:f7:19:1f:1a:84:d4: 94:d4:fa:2d:e1:6f:9a:7e:72:07:09:98:2d:4a:42: 35:a8:9b:84:9e:e8:7b:3e:9f:e3:fc:8e:41:a4:33: b8:03:de:ba:4b:d4:fe:1b:c3:1a:c7:84:0d:73:08: 42:7e:51:2f:d5:2a:29:c5:0c:2c:72:1a:29:72:56: 87:62:ea:d1:16:95:92:90:de:1e:fc:e6:b0:c6:7c: 59:fd:6b:07:71:82:97:f3:a0:8b:ed:3a:25:5a:4b: 77:74:66:f9:52:ee:57:4e:12:c1:7b:2b:02:f6:29: 96:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:56:FA:83:67:BE:72:74:16:82:6A:0F:06:4D:39:24:09:B9:BA:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/30f1d9a5-d454-37a0-8ed7-fe7da94968f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 24.48.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b9:eb:24:b7:2d:a7:ba:73:74:4d:69:ea:fd:e3:98:58:72: 62:4d:5b:a2:f5:52:fc:31:e3:e9:01:86:5a:c5:55:0e:fe:21: f2:40:e0:21:dc:10:2e:5e:25:2d:a3:92:72:61:67:c7:d2:a3: 1d:d8:db:de:fb:1a:da:a1:65:4b:36:9a:2e:02:44:51:c4:e8: dd:f1:05:d9:4a:3e:a9:35:5b:25:18:b9:7b:d8:76:a3:bb:5b: bb:c3:e8:f3:94:96:32:25:21:e0:93:d7:c5:d6:6e:07:10:b3: ae:18:ea:5c:a9:c7:cb:57:d3:a4:57:81:d3:bd:31:d1:0f:97: 30:cd:5d:86:d3:db:95:0c:a0:bd:3e:75:be:eb:ec:a4:2b:08: e6:03:18:e2:d8:79:ef:75:97:77:30:b1:0e:f8:4d:45:11:10: 97:88:54:b7:9a:dc:17:45:8f:19:06:1c:0f:fe:3e:97:c5:8d: 62:f9:07:cf:8d:d1:82:f0:8e:fe:7c:58:22:ad:a1:aa:cb:99: d9:ff:54:f8:9f:f9:0a:3e:45:b9:c7:eb:0d:d9:94:b9:fb:52: 9c:47:20:f5:e5:1e:54:65:30:ef:17:cc:12:53:6d:29:b8:97: db:0c:c7:e0:0c:76:7a:63:20:27:fe:37:f3:c1:c8:87:4e:e8: e5:7d:c8:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiFS0WK3SdeaD3AZmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk MmUwNTVlYzMtYmYyYS00NzYyLWE4YTctMDMyODkzYjBhMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRv/s/ALX5rSiY+i0jFNIo5qXbgI9GcckMyr mi9IdiPM5JlfqtJi0miKkJHgBnHoYEv/g1vF2pXG0NeOO/hp7pyAiOVPczFCcl8R 22AR5T1jicXwrlaBITMLHzCPNqXbETIzSLV2KOYxt/MfyDjWg6ydpowoYFvvbXUp YdJaVGfLgrWOUuNX+1Wy+vIHTGP3GR8ahNSU1Pot4W+afnIHCZgtSkI1qJuEnuh7 Pp/j/I5BpDO4A966S9T+G8Max4QNcwhCflEv1SopxQwschopclaHYurRFpWSkN4e /OawxnxZ/WsHcYKX86CL7TolWkt3dGb5Uu5XThLBeysC9imWyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpW+oNnvnJ0FoJqDwZNOSQJubqEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMzBmMWQ5YTUtZDQ1NC0z N2EwLThlZDctZmU3ZGE5NDk2OGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGDAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC56yS3Lae6c3RNaer945hYcmJNW6L1Uvwx4+kBhlrFVQ7+IfJA4CHc EC5eJS2jknJhZ8fSox3Y2977GtqhZUs2mi4CRFHE6N3xBdlKPqk1WyUYuXvYdqO7 W7vD6POUljIlIeCT18XWbgcQs64Y6lypx8tX06RXgdO9MdEPlzDNXYbT25UMoL0+ db7r7KQrCOYDGOLYee91l3cwsQ74TUUREJeIVLea3BdFjxkGHA/+PpfFjWL5B8+N 0YLwjv58WCKtoarLmdn/VPif+Qo+RbnH6w3ZlLn7UpxHIPXlHlRlMO8XzBJTbSm4 l9sMx+AMdnpjICf+N/PByIdO6OV9yH8= -----END CERTIFICATE-----Generated at Fri Mar 14 09:09:09 2025 by rpki-client