$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ccbae526-41fb-39e8-8de4-2dd011fc2a40.roa File: ccbae526-41fb-39e8-8de4-2dd011fc2a40.roa (raw, json) Hash identifier: ANEtSEK/w2Gd50h20my1i+b5ZjLtpsSQViHH3urUolo= Subject key identifier: 82:BC:8A:F9:D8:0B:DD:A5:92:53:46:71:34:22:86:5F:5F:5A:84:03 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F43285848FD56CFD64B5B3002764D3F80 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ccbae526-41fb-39e8-8de4-2dd011fc2a40.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 394996 IP address blocks: 24.144.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:cf:d6:4b:5b:30:02:76:4d:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=542fa129-76bc-430e-8fe7-170811deb3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f9:7f:9d:8e:df:90:38:4f:0a:60:32:ab:ba: b9:32:4f:51:d9:42:19:56:e0:b0:80:86:37:44:04: dc:4d:65:06:98:01:32:3c:d3:47:9e:5e:e1:a2:40: 69:f3:95:d1:50:dd:80:4f:84:5c:d3:05:b5:9c:cb: 95:e6:45:43:da:d5:94:69:00:13:28:97:88:48:97: d9:5a:ea:af:ee:5d:81:ff:58:16:31:99:83:28:41: be:9a:7e:09:f2:d8:e7:3e:ac:ac:64:88:e9:9c:e5: 78:f9:8e:1a:01:51:37:11:f8:7a:09:b0:5b:37:f8: 1b:54:ea:1e:74:48:f9:83:2e:65:e8:62:e7:1c:f8: d6:bd:58:db:15:4d:76:3f:37:47:ec:e9:1c:d3:f9: e0:10:d2:fd:2a:6e:fd:4f:4b:3d:76:16:55:10:23: 5b:b0:02:ce:95:69:8c:6d:09:6f:cb:9b:f3:b5:2f: c5:d5:19:bb:21:cf:4e:06:bd:78:a6:ea:c0:33:18: 9d:17:db:db:b1:43:9e:a7:76:a0:9a:df:67:ce:86: 30:1d:18:36:91:54:0a:55:2f:4d:1c:d9:72:c7:fd: 85:23:e8:6c:46:e7:49:9d:a7:5c:36:3f:c7:04:af: c0:55:da:b5:1e:26:16:95:dc:e5:75:66:ed:ab:fc: f0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BC:8A:F9:D8:0B:DD:A5:92:53:46:71:34:22:86:5F:5F:5A:84:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ccbae526-41fb-39e8-8de4-2dd011fc2a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 24.144.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:5a:2d:0f:e5:7e:f1:14:42:b8:66:0d:84:be:ca:21:fb:09: f2:79:55:c0:b3:4d:6a:41:dc:bd:be:39:70:5a:39:e9:5d:cc: 03:72:01:a7:03:6f:04:01:7e:83:ba:be:6f:32:e8:d6:80:9c: 48:e9:5c:c5:fe:f9:8f:5a:fb:eb:25:a5:01:29:21:b5:eb:7a: f6:02:56:c6:84:65:7e:d8:be:bb:af:9b:47:10:3e:4d:42:e2: ca:3a:98:27:e5:ea:f8:10:bb:7f:69:f5:be:65:df:cc:b0:1c: a2:cf:df:3f:f1:eb:84:9a:b8:1f:43:7e:98:6e:ac:46:99:66: fc:07:c6:25:9d:9d:d3:c0:9e:70:33:dc:bb:de:5d:04:a6:d0: 95:77:81:ce:5f:6e:a3:53:76:08:c8:cc:e2:cf:14:83:36:0e: 36:87:9f:da:ed:e0:0b:dd:ac:c2:01:ca:71:cb:08:05:2d:e6: 99:cd:e6:65:95:f9:f2:97:70:3c:33:8a:96:4d:7f:57:48:ab: 01:b4:01:01:3c:d3:e6:19:9c:d0:76:61:07:60:cb:c7:45:e7: 14:b8:45:d9:63:fd:f3:9b:45:89:58:7d:53:08:f3:ac:63:ca: 8d:53:2b:c8:4f:30:45:52:9b:1a:81:77:0a:e5:92:34:b7:cb: e0:8a:b2:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vs/WS1swAnZNP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NTQyZmExMjktNzZiYy00MzBlLThmZTctMTcwODExZGViM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fl/nY7fkDhPCmAyq7q5Mk9R2UIZVuCwgIY3 RATcTWUGmAEyPNNHnl7hokBp85XRUN2AT4Rc0wW1nMuV5kVD2tWUaQATKJeISJfZ Wuqv7l2B/1gWMZmDKEG+mn4J8tjnPqysZIjpnOV4+Y4aAVE3Efh6CbBbN/gbVOoe dEj5gy5l6GLnHPjWvVjbFU12PzdH7Okc0/ngENL9Km79T0s9dhZVECNbsALOlWmM bQlvy5vztS/F1Rm7Ic9OBr14purAMxidF9vbsUOep3agmt9nzoYwHRg2kVQKVS9N HNlyx/2FI+hsRudJnadcNj/HBK/AVdq1HiYWldzldWbtq/zwhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIK8ivnYC92lklNGcTQihl9fWoQDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvY2NiYWU1MjYtNDFmYi0z OWU4LThkZTQtMmRkMDExZmMyYTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGJBJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNaLQ/lfvEUQrhmDYS+yiH7CfJ5VcCzTWpB3L2+OXBaOeldzANyAacD bwQBfoO6vm8y6NaAnEjpXMX++Y9a++slpQEpIbXrevYCVsaEZX7Yvruvm0cQPk1C 4so6mCfl6vgQu39p9b5l38ywHKLP3z/x64SauB9DfphurEaZZvwHxiWdndPAnnAz 3LveXQSm0JV3gc5fbqNTdgjIzOLPFIM2DjaHn9rt4AvdrMIBynHLCAUt5pnN5mWV +fKXcDwzipZNf1dIqwG0AQE80+YZnNB2YQdgy8dF5xS4Rdlj/fObRYlYfVMI86xj yo1TK8hPMEVSmxqBdwrlkjS3y+CKsq0= -----END CERTIFICATE-----Generated at Fri Apr 11 23:40:56 2025 by rpki-client