$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa File: 3a5025bf-ee37-315a-a197-68996a369c6a.roa (raw, json) Hash identifier: oXaoVBRvl4FhPtFwuMZ+jykihLl/l++vS6XCvmoyKPM= Subject key identifier: 87:DE:4E:5C:37:96:ED:F4:99:17:5E:90:D8:B1:A8:3F:74:7E:35:1F Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F43285848B8F0D15CACA3589B3826CD00 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 54714 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d1:5c:ac:a3:58:9b:38:26:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=08b383b1-63f8-4d16-a736-ec423a35df8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1d:fd:7f:28:ba:6f:f2:fb:44:0b:dd:2e:a8: 49:89:41:c5:0f:5b:77:0d:ac:30:87:fa:56:8b:04: 08:7c:dc:c1:29:56:59:71:4b:d9:02:36:9f:57:f4: 59:4f:45:33:ff:56:f7:22:bf:6c:ae:57:2b:1e:d4: 25:1f:14:f6:5e:94:00:09:6e:b8:ea:b3:41:b2:9e: fb:06:c8:37:16:b7:d4:c8:78:cb:40:6f:2c:af:08: 8c:a3:8f:ab:f0:9b:a9:72:47:fd:1e:fd:32:8b:ac: 2d:37:24:7a:5a:53:53:1b:ba:60:a8:ed:9f:54:f2: f7:69:1b:38:9a:67:e2:ec:48:aa:26:ae:19:50:e4: 3a:ee:7c:d4:46:ec:d2:e0:0a:64:bc:98:54:d4:c4: c1:34:c6:be:c1:f5:79:5d:e7:9d:5f:2a:52:2b:b3: 56:1f:c7:0a:d0:a2:1d:1b:7e:58:7f:9e:cf:79:4f: 0d:d2:99:c1:af:a5:f5:65:a4:82:dd:d8:e2:fe:d2: 5c:ba:51:03:a0:b9:e0:48:52:f2:26:0f:9b:f4:bf: 50:7c:0a:20:3f:34:47:8e:b8:7a:47:af:80:0e:6a: 55:7c:02:a5:73:9a:16:bf:a7:a8:3c:f7:17:16:39: c9:06:ff:f9:4b:4a:94:1d:3b:78:25:49:36:ee:06: 35:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DE:4E:5C:37:96:ED:F4:99:17:5E:90:D8:B1:A8:3F:74:7E:35:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d4:c5:b4:b3:1f:e0:b0:2f:88:ba:e8:79:47:70:35:3f:0f: 01:d3:5d:39:4d:3a:94:51:a3:c6:4f:3b:ae:c2:16:ce:39:1f: 2a:d6:34:1d:e6:7d:6f:47:62:9b:6f:24:46:49:72:89:1b:9f: df:15:16:7b:57:8b:31:f0:78:54:4d:a3:4f:bd:78:bb:b1:4a: 0b:c6:92:96:3b:6b:fd:b2:78:8c:ac:e0:ee:71:9d:9b:15:37: 3a:d3:3a:de:48:d0:35:aa:ec:60:29:24:b3:ea:7d:a1:79:a1: 58:b6:95:46:51:9b:65:99:8b:e4:34:cc:eb:a8:d7:22:df:2a: e8:5c:62:05:91:de:39:90:2a:e0:59:72:34:65:ad:cd:92:da: fd:c7:c4:59:3d:84:6b:ff:25:3d:44:03:21:d6:60:3b:17:ea: dd:95:78:b5:c9:c3:e3:be:e6:1f:25:30:9e:0a:f9:fa:81:3f: 39:4f:f6:38:ca:90:af:54:de:fa:9b:26:d6:f3:0e:5e:1d:10: 50:ab:7c:46:58:92:77:ab:75:f5:64:0c:e4:9c:b3:80:c5:ec: ca:15:09:76:80:bf:3a:d1:84:4a:b8:f3:95:b6:6e:90:d6:5b: 8e:a2:88:f9:a3:00:4e:02:9f:6d:04:49:06:6c:8b:1e:87:ad: 30:aa:c4:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NFcrKNYmzgmzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MDhiMzgzYjEtNjNmOC00ZDE2LWE3MzYtZWM0MjNhMzVkZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh39fyi6b/L7RAvdLqhJiUHFD1t3Dawwh/pW iwQIfNzBKVZZcUvZAjafV/RZT0Uz/1b3Ir9srlcrHtQlHxT2XpQACW646rNBsp77 Bsg3FrfUyHjLQG8srwiMo4+r8Jupckf9Hv0yi6wtNyR6WlNTG7pgqO2fVPL3aRs4 mmfi7EiqJq4ZUOQ67nzURuzS4ApkvJhU1MTBNMa+wfV5XeedXypSK7NWH8cK0KId G35Yf57PeU8N0pnBr6X1ZaSC3dji/tJculEDoLngSFLyJg+b9L9QfAogPzRHjrh6 R6+ADmpVfAKlc5oWv6eoPPcXFjnJBv/5S0qUHTt4JUk27gY1qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfeTlw3lu30mRdekNixqD90fjUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvM2E1MDI1YmYtZWUzNy0z MTVhLWExOTctNjg5OTZhMzY5YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/UxbSzH+CwL4i66HlHcDU/DwHTXTlNOpRRo8ZPO67CFs45HyrWNB3m fW9HYptvJEZJcokbn98VFntXizHweFRNo0+9eLuxSgvGkpY7a/2yeIys4O5xnZsV NzrTOt5I0DWq7GApJLPqfaF5oVi2lUZRm2WZi+Q0zOuo1yLfKuhcYgWR3jmQKuBZ cjRlrc2S2v3HxFk9hGv/JT1EAyHWYDsX6t2VeLXJw+O+5h8lMJ4K+fqBPzlP9jjK kK9U3vqbJtbzDl4dEFCrfEZYknerdfVkDOScs4DF7MoVCXaAvzrRhEq485W2bpDW W46iiPmjAE4Cn20ESQZsix6HrTCqxAA= -----END CERTIFICATE-----Generated at Sat Apr 12 15:33:27 2025 by rpki-client