$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/24811dae-1ce6-3dbd-845b-f79aafe06a39.roa File: 24811dae-1ce6-3dbd-845b-f79aafe06a39.roa (raw, json) Hash identifier: hwWdnJvHxAhcbfy9AfqlQRLYBPZn0APqJaG4gWzqWhQ= Subject key identifier: 03:9E:8B:2D:A4:CE:1F:AC:8A:08:E2:F5:FE:A4:49:24:60:3B:6F:EE Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584917DC24F40E213AE5D78FA660 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/24811dae-1ce6-3dbd-845b-f79aafe06a39.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 20473 IP address blocks: 64.154.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:24:f4:0e:21:3a:e5:d7:8f:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=f1972eaa-f540-41e3-a388-8c2126a09080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:07:66:21:25:1b:87:09:5a:26:fd:c4:71:76: 33:62:2a:1a:9b:c4:88:09:c4:7f:ed:8c:df:e2:f2: ee:01:26:05:02:65:23:93:33:67:bb:ad:8f:19:43: 81:a2:cc:03:37:a0:ef:ab:8e:52:f2:25:8c:ab:47: d5:30:9f:15:a7:e1:ba:cc:79:af:ce:64:31:e1:31: d4:dd:ea:0c:cf:5b:d9:8c:da:5c:5e:b5:44:7e:26: ad:30:a3:d8:9b:1c:6b:da:3f:d9:5e:96:b3:2c:a2: 64:96:c5:2b:1c:b3:b2:54:9b:9c:63:ed:1d:a5:70: a4:f0:bc:72:0d:f4:be:74:5f:52:e6:fd:5b:93:ad: 79:43:cf:76:3d:a6:17:e4:a6:1d:9e:7e:41:70:e0: f4:ee:dc:cb:d0:11:60:a7:9a:35:a9:33:7a:6b:38: 3d:6f:60:ed:1f:51:77:a6:c6:7f:e7:d0:04:dc:1f: 6f:3b:b3:52:2c:36:1a:56:84:f9:76:79:28:88:f4: 49:dd:2d:81:1c:15:a0:cd:71:65:1f:a5:35:d7:7e: 04:5e:c3:1c:f5:42:f8:8a:07:b3:09:ef:ea:ed:a9: 47:4b:bd:60:03:ad:5a:c6:ce:1b:c4:cf:2a:75:25: c4:03:3a:c4:1c:e0:fd:20:bf:cc:bb:d8:25:b0:94: a8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9E:8B:2D:A4:CE:1F:AC:8A:08:E2:F5:FE:A4:49:24:60:3B:6F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/24811dae-1ce6-3dbd-845b-f79aafe06a39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.154.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:50:7f:08:67:8e:ba:11:08:25:67:f5:fc:2f:81:4b:ec:9c: d1:f4:cd:2e:40:56:8c:5e:12:be:9f:4e:1c:0d:7f:d9:ae:2b: 3b:77:c1:41:78:94:96:c3:cd:9f:08:6c:8d:93:40:c9:d9:d9: 00:2c:60:42:d8:f6:da:be:63:35:d4:5d:59:ce:94:8e:99:d2: 97:f8:8a:ab:e6:1d:23:86:71:ba:84:06:95:09:3a:b1:72:8e: 3f:b1:8c:40:2a:aa:0d:1d:bf:7c:70:3c:c2:8c:a5:64:2f:b2: 83:29:aa:67:5d:b0:ea:9c:40:0b:0a:3a:4b:d7:e5:6d:b0:6e: 20:12:ce:8c:23:ff:b0:d6:5c:31:90:85:00:9d:f4:d6:d4:87: b4:80:55:45:b3:0b:a0:0e:3b:a8:77:4f:fb:71:88:78:46:e5: d7:8f:d3:99:79:2b:3d:27:d9:0b:db:28:76:26:06:9f:d5:f3: 61:d2:cb:91:01:bc:6b:c3:28:96:08:f4:09:6a:83:a4:49:69: 68:d7:99:a8:19:a8:a7:bb:7b:bd:4a:42:ec:13:89:d1:ef:d3: ad:4e:d9:75:f3:d8:49:f3:e0:49:96:0b:9e:34:29:50:fc:1c: 85:94:13:f2:b9:c2:45:11:b0:15:c0:d0:d0:2e:1e:30:23:fa: 25:67:84:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CT0DiE65dePpmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZjE5NzJlYWEtZjU0MC00MWUzLWEzODgtOGMyMTI2YTA5MDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QdmISUbhwlaJv3EcXYzYioam8SICcR/7Yzf 4vLuASYFAmUjkzNnu62PGUOBoswDN6Dvq45S8iWMq0fVMJ8Vp+G6zHmvzmQx4THU 3eoMz1vZjNpcXrVEfiatMKPYmxxr2j/ZXpazLKJklsUrHLOyVJucY+0dpXCk8Lxy DfS+dF9S5v1bk615Q892PaYX5KYdnn5BcOD07tzL0BFgp5o1qTN6azg9b2DtH1F3 psZ/59AE3B9vO7NSLDYaVoT5dnkoiPRJ3S2BHBWgzXFlH6U1134EXsMc9UL4igez Ce/q7alHS71gA61axs4bxM8qdSXEAzrEHOD9IL/Mu9glsJSoOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOeiy2kzh+sigji9f6kSSRgO2/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMjQ4MTFkYWUtMWNlNi0z ZGJkLTg0NWItZjc5YWFmZTA2YTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJomMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtQfwhnjroRCCVn9fwvgUvsnNH0zS5AVoxeEr6fThwNf9muKzt3wUF4 lJbDzZ8IbI2TQMnZ2QAsYELY9tq+YzXUXVnOlI6Z0pf4iqvmHSOGcbqEBpUJOrFy jj+xjEAqqg0dv3xwPMKMpWQvsoMpqmddsOqcQAsKOkvX5W2wbiASzowj/7DWXDGQ hQCd9NbUh7SAVUWzC6AOO6h3T/txiHhG5deP05l5Kz0n2QvbKHYmBp/V82HSy5EB vGvDKJYI9Alqg6RJaWjXmagZqKe7e71KQuwTidHv061O2XXz2Enz4EmWC540KVD8 HIWUE/K5wkURsBXA0NAuHjAj+iVnhLs= -----END CERTIFICATE-----Generated at Sat Apr 5 20:48:11 2025 by rpki-client