$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa File: 4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa (raw, json) Hash identifier: Ka8Mz5khxZZBgFYW7pVz9quKDpEoGvuwGjnqH+2GTk4= Subject key identifier: 9F:0F:64:48:C1:25:E8:E0:A3:CD:66:C0:77:8C:60:85:3C:B6:25:32 Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F43285848B8F0D1B2E5F3A855CEC54A00 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 63303 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d1:b2:e5:f3:a8:55:ce:c5:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=09456cc0-3479-4477-8283-7b602b93d682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:60:12:d8:a9:1e:76:31:09:88:0e:dd:16:94: a8:64:a8:8e:1a:cc:8b:46:1a:d4:1d:39:5a:e2:3a: c5:4d:cb:12:33:98:b2:67:0d:d7:bc:b2:8f:d3:cd: 19:24:37:d7:86:ff:cc:8c:fb:fa:9a:f2:cc:0d:b6: 4d:fa:7b:6f:0b:6b:21:0e:23:16:be:86:ff:7b:b9: 0f:48:dc:f8:40:05:ef:f3:82:ef:cc:22:d6:10:c8: 81:57:31:96:5c:69:a6:3b:e3:59:35:8c:1a:71:8a: 98:3a:f7:33:4d:22:e3:9e:81:95:a9:64:c0:03:6a: ed:38:ce:2b:64:f2:99:f7:63:74:8c:3c:1b:ff:a0: b2:db:6c:ae:72:4a:01:91:a9:cc:58:32:f5:dc:d0: 1e:ed:03:66:37:4e:45:33:95:eb:11:7b:37:b0:9c: 32:ca:66:36:d1:06:2d:4b:04:a6:2b:0e:92:4d:7b: 14:5f:1d:bc:f2:31:a5:df:83:b9:ec:68:51:c9:e1: d0:51:80:23:29:d3:49:57:b5:7d:b1:7a:45:13:6f: fc:e1:fb:ee:87:78:7c:e5:f8:4c:4d:39:a5:bb:b6: d0:34:2d:c6:a9:c7:51:f0:8d:f9:26:30:ae:99:85: eb:b8:87:8d:46:0e:ab:d1:14:66:cb:ce:1d:de:dd: d3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0F:64:48:C1:25:E8:E0:A3:CD:66:C0:77:8C:60:85:3C:B6:25:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/4b760c67-58b5-3d8c-9406-2d3a0f2cfda7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:25:be:df:e2:85:c1:ed:9d:e4:cf:4f:fb:7c:0c:5c:26:26: 3a:b4:88:75:58:0b:d7:54:17:f7:b7:88:2c:c9:ba:a9:dd:4a: 71:86:c9:60:4c:ae:a8:63:d9:f8:39:84:90:43:b3:39:79:d2: 78:92:8a:15:13:ed:7d:24:c6:39:b6:f1:87:a0:dc:19:c3:07: 48:07:d1:00:83:49:1f:15:bd:28:a2:73:85:03:56:6f:fe:48: e5:c7:72:9d:ff:cf:6e:b3:1c:f3:d9:50:8f:d3:07:3a:4e:12: cc:cf:da:23:22:41:65:97:cc:87:57:75:a5:02:96:b2:c1:88: d6:eb:ca:2a:53:3c:01:36:d5:e3:64:25:be:e6:fb:95:9c:f3: 2e:6f:a5:8e:a8:77:fb:a0:68:aa:e3:cd:fc:7b:bd:46:c3:0f: 90:d0:ae:e3:89:1c:c9:ce:82:14:3d:a6:45:76:7d:76:a9:e8: 2b:7a:0a:a3:ce:0d:77:f7:fe:0e:50:72:cf:1e:8a:16:b8:5f: 47:47:94:f3:39:00:66:e4:41:30:22:f0:b7:24:17:db:a2:0a: 2b:4b:1b:13:50:d2:00:24:73:60:fa:47:0e:20:09:29:93:40: 59:61:a3:99:90:40:ac:36:5b:42:ea:28:b9:31:3c:77:27:4b: 2b:83:77:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NGy5fOoVc7FSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MDk0NTZjYzAtMzQ3OS00NDc3LTgyODMtN2I2MDJiOTNkNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGAS2KkedjEJiA7dFpSoZKiOGsyLRhrUHTla 4jrFTcsSM5iyZw3XvLKP080ZJDfXhv/MjPv6mvLMDbZN+ntvC2shDiMWvob/e7kP SNz4QAXv84LvzCLWEMiBVzGWXGmmO+NZNYwacYqYOvczTSLjnoGVqWTAA2rtOM4r ZPKZ92N0jDwb/6Cy22yuckoBkanMWDL13NAe7QNmN05FM5XrEXs3sJwyymY20QYt SwSmKw6STXsUXx288jGl34O57GhRyeHQUYAjKdNJV7V9sXpFE2/84fvuh3h85fhM TTmlu7bQNC3GqcdR8I35JjCumYXruIeNRg6r0RRmy84d3t3TPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8PZEjBJejgo81mwHeMYIU8tiUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvNGI3NjBjNjctNThiNS0z ZDhjLTk0MDYtMmQzYTBmMmNmZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0lvt/ihcHtneTPT/t8DFwmJjq0iHVYC9dUF/e3iCzJuqndSnGGyWBM rqhj2fg5hJBDszl50niSihUT7X0kxjm28Yeg3BnDB0gH0QCDSR8VvSiic4UDVm/+ SOXHcp3/z26zHPPZUI/TBzpOEszP2iMiQWWXzIdXdaUClrLBiNbryipTPAE21eNk Jb7m+5Wc8y5vpY6od/ugaKrjzfx7vUbDD5DQruOJHMnOghQ9pkV2fXap6Ct6CqPO DXf3/g5Qcs8eiha4X0dHlPM5AGbkQTAi8LckF9uiCitLGxNQ0gAkc2D6Rw4gCSmT QFlho5mQQKw2W0LqKLkxPHcnSyuDd2c= -----END CERTIFICATE-----Generated at Sat Apr 12 11:22:06 2025 by rpki-client