$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa File: 9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa (raw, json) Hash identifier: QlDKBsndvb6OvxVjxdr54DccYvNWj+po2pgstVdLa0U= Subject key identifier: D0:31:0E:87:A8:65:47:04:10:27:C9:C2:70:D9:B8:EF:79:73:7F:C9 Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F43285848B8F0D1C29CB906FA6D201B80 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 63306 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d1:c2:9c:b9:06:fa:6d:20:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=fe8d9a71-733b-422b-800e-db88bb0cb056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:36:ae:2d:02:b5:e9:c2:33:74:0d:b6:1a: 15:a6:4d:29:ea:08:00:b7:6e:e6:f4:ff:e3:1e:98: 86:66:ad:bc:1c:7a:27:87:c7:ff:15:f1:09:68:c2: c2:43:7d:58:e0:19:94:34:d1:b0:7a:ae:75:65:4f: 0d:c7:64:70:9c:ae:47:6d:6b:ad:06:71:c9:3d:d6: 56:93:e9:78:5f:74:3c:d8:24:b3:df:f0:fc:9e:f6: 81:39:86:1f:c2:f5:16:68:f2:96:9d:6d:f3:b1:e4: 7c:69:3c:71:33:02:94:bd:93:6b:c9:3a:a7:e6:7f: 4d:51:8e:62:33:ae:0e:13:e0:dc:cc:fb:32:f0:1c: e5:17:ce:19:e0:6a:82:2a:1c:04:91:bb:83:04:25: 71:30:ff:04:ba:17:f3:b4:64:ce:a9:7b:53:78:dd: 8e:dc:30:3c:af:bd:78:44:37:1c:33:f0:ba:18:ae: 90:45:16:48:e7:de:3e:db:cc:d8:33:f0:63:a4:19: 6b:e8:d8:ff:f1:c6:b2:3d:b1:8e:52:4a:ff:2c:b0: 38:20:ce:c0:8e:c2:34:e1:4e:cc:5b:fb:cd:bd:1c: 70:ec:bf:9a:a7:69:1e:9b:d7:91:3a:ed:dc:04:b8: bd:a1:32:7d:ea:c9:41:00:21:e3:4e:0b:55:be:cc: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:31:0E:87:A8:65:47:04:10:27:C9:C2:70:D9:B8:EF:79:73:7F:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/9bae45ae-cbc3-3d81-872c-7d6558d014a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:0d:98:8d:02:f0:11:4e:ff:28:21:37:a4:59:70:e9:68:b2: f7:89:4a:d6:6c:26:40:84:c2:b2:ad:48:a8:6d:12:7c:25:d8: 10:cf:2c:a5:b1:77:d0:5d:1c:44:1e:e6:fe:06:2d:b4:41:f9: 6e:bc:fc:a8:a5:e6:a0:d9:7d:a2:cc:14:3e:ce:20:d8:97:6f: 72:be:70:ed:76:d3:72:b4:7a:3d:be:e5:35:04:99:8c:08:40: 37:dd:c2:66:f3:8a:72:ca:21:0e:82:82:aa:28:d4:f8:28:1f: 0b:1f:e3:c8:6d:8e:8c:46:5a:0e:cb:dc:22:38:fe:58:13:03: 2d:96:05:7a:0e:7e:34:7c:68:f6:bd:ae:f7:e1:6f:4a:56:7a: bc:11:66:56:01:41:33:10:75:aa:d1:c1:eb:ba:1d:5a:d5:1e: 32:82:09:d1:ed:c9:f9:82:7c:d8:f7:fb:8f:18:5c:bf:90:54: 0c:71:a2:4b:23:f3:9f:c5:db:27:d5:1b:b9:0e:a4:5f:86:6c: c8:8b:e3:87:dd:38:0a:0b:76:39:a5:25:7b:b1:16:f1:06:73: dd:d9:5c:f3:b8:40:55:d0:76:5c:59:79:76:d5:e0:56:06:58: 1d:b9:86:2b:72:13:d1:3f:08:b8:cb:d1:96:bc:1d:0c:a7:b3: c6:24:6c:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NHCnLkG+m0gG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk ZmU4ZDlhNzEtNzMzYi00MjJiLTgwMGUtZGI4OGJiMGNiMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto02ri0CtenCM3QNthoVpk0p6ggAt27m9P/j HpiGZq28HHonh8f/FfEJaMLCQ31Y4BmUNNGweq51ZU8Nx2RwnK5HbWutBnHJPdZW k+l4X3Q82CSz3/D8nvaBOYYfwvUWaPKWnW3zseR8aTxxMwKUvZNryTqn5n9NUY5i M64OE+DczPsy8BzlF84Z4GqCKhwEkbuDBCVxMP8EuhfztGTOqXtTeN2O3DA8r714 RDccM/C6GK6QRRZI594+28zYM/BjpBlr6Nj/8cayPbGOUkr/LLA4IM7AjsI04U7M W/vNvRxw7L+ap2kem9eROu3cBLi9oTJ96slBACHjTgtVvszyYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAxDoeoZUcEECfJwnDZuO95c3/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvOWJhZTQ1YWUtY2JjMy0z ZDgxLTg3MmMtN2Q2NTU4ZDAxNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcNmI0C8BFO/yghN6RZcOlosveJStZsJkCEwrKtSKhtEnwl2BDPLKWx d9BdHEQe5v4GLbRB+W68/Kil5qDZfaLMFD7OINiXb3K+cO1203K0ej2+5TUEmYwI QDfdwmbzinLKIQ6Cgqoo1PgoHwsf48htjoxGWg7L3CI4/lgTAy2WBXoOfjR8aPa9 rvfhb0pWerwRZlYBQTMQdarRweu6HVrVHjKCCdHtyfmCfNj3+48YXL+QVAxxoksj 85/F2yfVG7kOpF+GbMiL44fdOAoLdjmlJXuxFvEGc93ZXPO4QFXQdlxZeXbV4FYG WB25hityE9E/CLjL0Za8HQyns8YkbJM= -----END CERTIFICATE-----Generated at Sat Apr 12 14:52:56 2025 by rpki-client