$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c13e7d6-25f5-3c86-bf67-8bbf0107257b.roa File: 6c13e7d6-25f5-3c86-bf67-8bbf0107257b.roa (raw, json) Hash identifier: N0GFDiDKiflnSp19e0Ro0yw9Dr+WkxmlBl1q9xxMou4= Subject key identifier: 1F:7F:A4:E7:E6:A3:3E:2E:D2:65:B3:F9:7A:9D:E8:68:85:7F:91:05 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F432858489BA0B697FCF71150E3421A40 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c13e7d6-25f5-3c86-bf67-8bbf0107257b.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 22773 IP address blocks: 24.249.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:b6:97:fc:f7:11:50:e3:42:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=54c3f33c-5cae-4538-b51b-c403d666aa47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:12:b6:c6:aa:19:76:79:1b:29:b7:b5:89:59: 8c:0e:94:e8:87:d0:ae:8a:b8:d1:04:00:56:86:8b: fd:0f:c5:a4:06:7f:38:45:59:8c:a6:d7:79:08:a6: 1a:a6:e8:be:2a:6f:e0:4c:ba:71:4a:ca:ab:5d:cb: c6:2d:82:8a:91:d3:58:7f:ad:c1:fa:f2:94:d2:7c: 68:7a:3e:7c:a5:ca:7c:4f:aa:b5:0e:9a:2c:85:a0: 0c:7a:12:ec:4b:18:cb:6c:fb:6f:3d:d9:dd:eb:9b: 8c:a4:f3:12:7e:a9:0c:5d:07:b9:bb:2f:28:63:31: 37:79:47:3e:da:72:a1:eb:76:c1:31:36:ef:e6:38: 33:d3:ac:4d:36:64:0b:56:68:8a:47:ff:43:87:ff: 4d:ef:17:21:8e:d1:8e:37:fa:44:a7:2a:5c:63:0b: 13:b0:9a:df:05:84:77:e0:c5:38:0d:b3:fa:b5:12: 62:55:e9:76:5a:57:5a:3a:44:ba:be:14:8a:1d:26: a0:a4:da:78:25:0a:cb:95:21:ac:06:8d:d1:e4:db: b1:d6:c2:31:8e:57:f5:e7:97:a6:e5:86:2e:50:fc: 30:bb:46:6d:2a:c0:f9:b1:b1:ca:f2:33:aa:f6:dd: 4c:05:f1:c7:a4:28:d4:b8:0c:0a:49:fc:b2:c3:9d: 09:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7F:A4:E7:E6:A3:3E:2E:D2:65:B3:F9:7A:9D:E8:68:85:7F:91:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c13e7d6-25f5-3c86-bf67-8bbf0107257b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 24.249.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b0:f7:30:47:10:81:85:ca:b1:5b:93:2c:97:89:01:8b:a2: f5:ee:98:92:c3:a6:0c:a3:34:f6:b9:83:c4:07:61:c1:94:a4: 5a:51:69:9c:05:dc:f5:7d:2a:ff:0d:c6:f0:2f:0e:99:96:ec: 9f:ea:0d:5d:8c:c6:e2:3d:ef:d6:09:8b:ba:96:1a:77:cb:58: e0:af:53:b5:dc:b6:98:39:30:7a:4c:2b:80:2e:d6:d2:28:82: a4:db:43:f3:32:27:b8:fb:ad:f6:f4:69:5a:62:68:15:d3:79: b2:ef:86:ec:f9:3b:3e:cc:ce:b3:26:22:92:55:12:c7:92:c0: 55:7c:ae:73:4b:2b:a4:16:e5:77:f8:12:e4:70:15:75:ac:28: 3a:cd:b6:2b:99:3a:a6:1d:44:d5:22:56:88:d3:c1:d0:ec:07: a9:2b:63:ae:60:18:50:44:c9:ed:49:43:d3:f9:a2:b1:0e:1d: 79:d5:97:96:67:02:55:e0:51:e7:12:d7:23:16:ce:6a:cf:cb: c7:45:39:87:fc:9a:3b:39:d6:69:1b:42:46:e7:29:47:52:23: 0d:d4:82:c3:bb:45:b4:eb:a6:1c:a5:3b:95:8a:2f:97:a2:8e: 21:a2:2f:69:b0:9e:91:a8:ea:f5:6e:ba:eb:aa:09:9e:2c:b2: 5d:ac:b7:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboLaX/PcRUONCGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk NTRjM2YzM2MtNWNhZS00NTM4LWI1MWItYzQwM2Q2NjZhYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBK2xqoZdnkbKbe1iVmMDpToh9CuirjRBABW hov9D8WkBn84RVmMptd5CKYapui+Km/gTLpxSsqrXcvGLYKKkdNYf63B+vKU0nxo ej58pcp8T6q1DposhaAMehLsSxjLbPtvPdnd65uMpPMSfqkMXQe5uy8oYzE3eUc+ 2nKh63bBMTbv5jgz06xNNmQLVmiKR/9Dh/9N7xchjtGON/pEpypcYwsTsJrfBYR3 4MU4DbP6tRJiVel2WldaOkS6vhSKHSagpNp4JQrLlSGsBo3R5Nux1sIxjlf155em 5YYuUPwwu0ZtKsD5sbHK8jOq9t1MBfHHpCjUuAwKSfyyw50JvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9/pOfmoz4u0mWz+Xqd6GiFf5EFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmMxM2U3ZDYtMjVmNS0z Yzg2LWJmNjctOGJiZjAxMDcyNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCw9zBHEIGFyrFbkyyXiQGLovXumJLDpgyjNPa5g8QHYcGUpFpRaZwF 3PV9Kv8NxvAvDpmW7J/qDV2MxuI979YJi7qWGnfLWOCvU7Xctpg5MHpMK4Au1tIo gqTbQ/MyJ7j7rfb0aVpiaBXTebLvhuz5Oz7MzrMmIpJVEseSwFV8rnNLK6QW5Xf4 EuRwFXWsKDrNtiuZOqYdRNUiVojTwdDsB6krY65gGFBEye1JQ9P5orEOHXnVl5Zn AlXgUecS1yMWzmrPy8dFOYf8mjs51mkbQkbnKUdSIw3UgsO7RbTrphylO5WKL5ei jiGiL2mwnpGo6vVuuuuqCZ4ssl2st+0= -----END CERTIFICATE-----Generated at Sun Apr 6 15:58:44 2025 by rpki-client